StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,764
of 17,792 indexed, latest versions
Container images
4,327
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,764 of 17,792 indexed charts deploy, on 4,327 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+268 more0.44.04,327
OSV records
GO-2026-5024

Charts affected

3,764 by stars
ChartLatestAffected imagesRadar Score
api-usage-serverapi-usage-server1.16.01 of 1See more

api-usage-server api-usage-server 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

740
gateway-helmappscodeVerified publisher0.0.0-latest1 of 2See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

1,096
scannerappscodeVerified publisher2026.1.153 of 3See more

scanner appscode 2026.1.15

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
golang.org/x/sys@v0.39.0
0.44.0
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

5,315
smtprelayappscodeVerified publisher2026.9.111 of 1See more

smtprelay appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
golang.org/x/sys@v0.29.0
0.44.0

Open the chart page →

872
stash-enterpriseappscodeVerified publisher0.42.04 of 4See more

stash-enterprise appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/stashed/stash-crd-installer:v0.42.1d6c9b7a1f7b8
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

3,628
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

5,249
argocd-rbac-operatorargocd-rbac-operator0.4.51 of 1See more

argocd-rbac-operator argocd-rbac-operator 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

961
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
golang.org/x/sys@v0.26.0
0.44.0
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

2,290
s3dartur9010Verified publisher1.0.11 of 1See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/siafoundation/s3d:bf33bf3b3fcc85f7282
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

1,736
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

2,327
cert-exporterarzu3.0.11 of 1See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
joeelliott/cert-exporter:v2.7.0b4acd14642d0
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0

Open the chart page →

2,819
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

17,951
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
0.44.0

Open the chart page →

10,740
dltbrokerassist-iot-distributed-broker0.2.04 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/distributed_broker:1.0.033e02dad168f
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

77,883
dltloggingassist-iot-logging-auditing0.2.04 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/logging_auditing:1.0.0790dbb198e86
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

77,863
astradnsastradnsVerified publisher0.2.92 of 2See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
golang.org/x/sys@v0.41.0
0.44.0
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

2,649
deployautoml0.1.02 of 3See more

deploy automl 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
muonsoft/openapi-mock:latestc9afe1295484
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

2,947
cso-proxyav1o-chartsVerified publisher0.1.31 of 1See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0

Open the chart page →

4,308
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

3,398
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0

Open the chart page →

3,731
prismav1o-chartsVerified publisher0.3.11 of 1See more

prism av1o-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
0.44.0

Open the chart page →

1,276
kubebrowseravistoOfficialVerified publisher1.4.01 of 1See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

677
db-backupballe-petersen0.1.41 of 1See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
tobiasbp/db-backup:0.0.314bee6e33a26
golang.org/x/sys@v0.0.0-20191210023423-ac6580df4449
0.44.0

Open the chart page →

4,821
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

3,702
chirpstackbeeinventor0.1.103 of 5See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
chirpstack/chirpstack-gateway-bridge:3.13.2ce3f2cdca8a9
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

7,821
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
golang.org/x/sys@v0.0.0-20220503163025-988cb79eb6c6
0.44.0

Open the chart page →

2,609
cloudflare-tunnel-operatorbeezlabs0.2.01 of 1See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
golang.org/x/sys@v0.0.0-20220704084225-05e143d24a9e
0.44.0

Open the chart page →

1,595
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

2,908
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

492
aramid-indexerbiatec-repoVerified publisher3.9.04 of 5See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
golang.org/x/sys@v0.1.0
0.44.0
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
golang.org/x/sys@v0.32.0
0.44.0
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
golang.org/x/sys@v0.33.0
0.44.0
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

13,544
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

7,246
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

5,117
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

7,246
self-hostbitwarden2.4.110 of 11See more

self-host bitwarden 2.4.1

10 of the 11 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.8.2eb950aea1b34
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/api:2026.8.28b3774af74b4
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/attachments:2026.8.2754553d14aa0
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/events:2026.8.2eb836d99a14e
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/icons:2026.8.2183d536d0186
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/identity:2026.8.2738553de549c
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/notifications:2026.8.2f280dda4fbee
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/sso:2026.8.2727314be4cb1
golang.org/x/sys@v0.1.0
0.44.0
ghcr.io/bitwarden/web:2026.8.1dd1df8408daf
golang.org/x/sys@v0.1.0
0.44.0
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
golang.org/x/sys@v0.25.0
0.44.0

Open the chart page →

5,269
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

2,919
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

1,630
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,839
btrfs-nfs-csibtrfs-nfs-csi0.4.06 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

6 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
golang.org/x/sys@v0.38.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
golang.org/x/sys@v0.41.0
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
golang.org/x/sys@v0.33.0
0.44.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
golang.org/x/sys@v0.40.0
0.44.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
golang.org/x/sys@v0.41.0
0.44.0
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

3,226
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

2,049
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
golang.org/x/sys@v0.0.0-20201009025420-dfb3f7c4e634
0.44.0

Open the chart page →

2,670
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

1,541
buildkit-fleetbuildkit-fleetVerified publisher0.1.21 of 1See more

buildkit-fleet buildkit-fleet 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.0-rootless80b15f0735e8
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

910
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

1,490
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

1,490
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

4,056
camel-dashboard-operatorcamel-dashboardVerified publisher0.1.01 of 1See more

camel-dashboard-operator camel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

520
blackbox-exportercamptocamp31.0.01 of 1See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.25.0b04a9fef4fa0
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

913
capsulecapsuleOfficialVerified publisher0.14.61 of 2See more

capsule capsule 0.14.6

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

1,238
capsule-proxycapsule-proxyOfficialVerified publisher0.14.11 of 2See more

capsule-proxy capsule-proxy 0.14.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

1,224
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
golang.org/x/sys@v0.0.0-20200814200057-3d37ad5750ed
0.44.0

Open the chart page →

3,509

Container images carrying it

4,327 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/redmine:6.1.204ac44a2595b
golang.org/x/sys@v0.1.0
0.44.0
1
library/telegraf:1.20.428e98eece020
golang.org/x/sys@v0.0.0-20211004093028-2c5d950f24ef
0.44.0
1
library/telegraf:1.27507a3eecf809
golang.org/x/sys@v0.11.0
0.44.0
1
library/telegraf:1.19.0-alpine794079a7f241
golang.org/x/sys@v0.0.0-20210324051608-47abb6519492
0.44.0
1
library/telegraf:1.19-alpineaddb86c0c520
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
1
library/traefik:v2.11.00a5157f742d2
golang.org/x/sys@v0.16.0
0.44.0
1
library/traefik:3.3.5104204dadedf
golang.org/x/sys@v0.31.0
0.44.0
1
library/traefik:v2.10.11489caffaedb
golang.org/x/sys@v0.5.0
0.44.0
1
library/traefik:2.10.61957e3314f43
golang.org/x/sys@v0.13.0
0.44.0
1
library/traefik:2.5.62f603f8d3abe
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0
1
library/traefik:v3.6.1334d5089d0b41
golang.org/x/sys@v0.41.0
0.44.0
1
library/traefik:v1.7.345d47b7bb2546
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
1
library/traefik:2.5.47d0228d19042
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0
1
library/traefik:2.4.8eda951fd29a8
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
0.44.0
1
library/traefik:2.2.8f5af5a5ce17f
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
0.44.0
1
library/vault:1.13.3f98ac9dd97b0
golang.org/x/sys@v0.6.0
0.44.0
1
librenms/librenms:24.11.00920bc9117a8
golang.org/x/sys@v0.15.0
0.44.0
1
librenms/librenms:22.4.14f1f3d667cc7
golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887
0.44.0
1
librenms/librenms:26.8.28194a4a9ff49
golang.org/x/sys@v0.1.0
0.44.0
1
lifailon/openrouter-bot:latestea37e4b6b952
golang.org/x/sys@v0.35.0
0.44.0
1
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
golang.org/x/sys@v0.16.0
0.44.0
1
linuxserver/cloud9:latest45c5fe102ff3
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
1
linuxserver/smokeping:2.9.02f4488c9afcd
golang.org/x/sys@v0.6.0
0.44.0
1
linuxserver/smokeping:2.8.2b7f906899cd3
golang.org/x/sys@v0.0.0-20210514084401-e8d321eab015
0.44.0
1
linuxserver/wireguard:latestbf03578ef731
golang.org/x/sys@v0.39.0
0.44.0
1
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
golang.org/x/sys@v0.39.0
0.44.0
1
lishimeng/hufu:v1.2.13d5752dac834
golang.org/x/sys@v0.10.0
0.44.0
1
lishimeng/owl-console:v0.11.2c79a67657baf
golang.org/x/sys@v0.13.0
0.44.0
1
lishimeng/owl-messager:v0.11.23d00485e64dc
golang.org/x/sys@v0.13.0
0.44.0
1
lishimeng/passport:v0.2.163e7d05ded625
golang.org/x/sys@v0.6.0
0.44.0
1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
golang.org/x/sys@v0.6.0
0.44.0
1
lishimeng/tabby:v1.0.48145c3dc83c8
golang.org/x/sys@v0.6.0
0.44.0
1
lishimeng/tree:v0.2.89b2f8be6c7d3
golang.org/x/sys@v0.6.0
0.44.0
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
golang.org/x/sys@v0.12.0
0.44.0
1
listmonk/listmonk:v6.0.0bf3903d54a46
golang.org/x/sys@v0.38.0
0.44.0
1
litestream/litestream:0.3c5a1e1b01916
golang.org/x/sys@v0.11.0
0.44.0
1
livekit/ingress:v1.2.21ab01641b366
golang.org/x/sys@v0.15.0
0.44.0
1
livekit/livekit-recorder:v0.3.13ecf1409c75e0
golang.org/x/sys@v0.0.0-20220128215802-99c3d69c2c27
0.44.0
1
livekit/livekit-server:v1.9.03602a85840d5
golang.org/x/sys@v0.33.0
0.44.0
1
livekit/livekit-server:v1.0.08391fd1b834f
golang.org/x/sys@v0.0.0-20220503163025-988cb79eb6c6
0.44.0
1
lmierzwa/karma:v0.503751e5eed656
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0
1
lmierzwa/karma:v0.70d417abe7ddb5
golang.org/x/sys@v0.0.0-20200722175500-76b94024e4b6
0.44.0
1
localstack/localstack:3.19d278167f2b7
golang.org/x/sys@v0.1.0
0.44.0
1
loeken/home-assistant:2026.5.14ce6abc553b3
golang.org/x/sys@v0.40.0
0.44.0
1
loftsh/directclusterendpoint:1.14.0310cc7d690f5
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0
1
loftsh/jspolicy:0.2.225deb9bd2683
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.44.0
1
loftsh/virtual-cluster:0.0.28023b13bf5898
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
1
logiqai/flash:v3.10.265b996bc7bdc
golang.org/x/sys@v0.21.0
0.44.0
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
golang.org/x/sys@v0.0.0-20200323222414-85ca7c5b95cd
0.44.0
1
logiqai/logiqctl:2.0.4798306811f2d
golang.org/x/sys@v0.0.0-20200223170610-d5e6a3e2c0ae
0.44.0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.