StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,853
of 17,821 indexed, latest versions
Container images
4,415
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,853 of 17,821 indexed charts deploy, on 4,415 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+272 more0.44.04,415
OSV records
GO-2026-5024

Charts affected

3,853 by stars
ChartLatestAffected imagesRadar Score
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
golang.org/x/sys@v0.9.0
0.44.0

Open the chart page →

2,485
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0

Open the chart page →

3,700
zoo-project-druzoo-projectOfficialVerified publisher0.10.42 of 6See more

zoo-project-dru zoo-project 0.10.4

2 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:18.4-alpine3.249a8afca54e78
golang.org/x/sys@v0.1.0
0.44.0
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

7,966

Container images carrying it

4,415 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
golang.org/x/sys@v0.31.0
0.44.0
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
golang.org/x/sys@v0.0.0-20191228213918-04cbcbbfeed8
0.44.0
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
golang.org/x/sys@v0.32.0
0.44.0
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
golang.org/x/sys@v0.7.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
golang.org/x/sys@v0.39.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
golang.org/x/sys@v0.5.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
golang.org/x/sys@v0.5.0
0.44.0
2
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/sys@v0.42.0
0.44.0
2
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/sys@v0.42.0
0.44.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
golang.org/x/sys@v0.25.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
golang.org/x/sys@v0.36.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/sys@v0.5.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/sys@v0.23.0
0.44.0
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/sys@v0.43.0
0.44.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
golang.org/x/sys@v0.0.0-20220328115105-d36c6a25d886
0.44.0
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
golang.org/x/sys@v0.30.0
0.44.0
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/sys@v0.42.0
0.44.0
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
golang.org/x/sys@v0.1.0
0.44.0
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
golang.org/x/sys@v0.0.0-20220330033206-e17cdc41300f
0.44.0
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
golang.org/x/sys@v0.0.0-20220502124256-b6088ccd6cba
0.44.0
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
golang.org/x/sys@v0.0.0-20220502124256-b6088ccd6cba
0.44.0
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
golang.org/x/sys@v0.0.0-20220502124256-b6088ccd6cba
0.44.0
2
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/sys@v0.4.0
0.44.0
2
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
golang.org/x/sys@v0.13.0
0.44.0
2
quay.io/jetstack/cert-manager-cainjector:v1.14.39395dec77fcf
golang.org/x/sys@v0.15.0
0.44.0
2
quay.io/jetstack/cert-manager-cainjector:v1.15.3e0ce8ae280c8
golang.org/x/sys@v0.21.0
0.44.0
2
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
golang.org/x/sys@v0.31.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
golang.org/x/sys@v0.31.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
golang.org/x/sys@v0.15.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
golang.org/x/sys@v0.13.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/sys@v0.4.0
0.44.0
2

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.