StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,843
of 17,805 indexed, latest versions
Container images
4,392
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,843 of 17,805 indexed charts deploy, on 4,392 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more0.44.04,392
OSV records
GO-2026-5024

Charts affected

3,843 by stars
ChartLatestAffected imagesRadar Score
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

8,495
mayastormayastorVerified publisher2.12.115 of 31See more

mayastor mayastor 2.12.1

15 of the 31 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
golang.org/x/sys@v0.31.0
0.44.0
grafana/loki:3.4.258a6c186ce78
golang.org/x/sys@v0.29.0
0.44.0
library/nats:2.9.17-alpine1a7b320b2942
golang.org/x/sys@v0.7.0
0.44.0
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
golang.org/x/sys@v0.4.0
0.44.0
natsio/prometheus-nats-exporter:0.11.031c02aac089a
golang.org/x/sys@v0.7.0
0.44.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/sys@v0.31.0
0.44.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/sys@v0.25.0
0.44.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/sys@v0.28.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/sys@v0.29.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/sys@v0.28.0
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
golang.org/x/sys@v0.29.0
0.44.0
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
golang.org/x/sys@v0.29.0
0.44.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
golang.org/x/sys@v0.27.0
0.44.0
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
golang.org/x/sys@v0.27.0
0.44.0

Open the chart page →

21,418
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
0.44.0
library/mysql:8.0.28fc77d54cacef
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

29,884
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

4,102
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

5,700
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

431
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

418
mdai-hubmdai-hubVerified publisher0.10.16 of 14See more

mdai-hub mdai-hub 0.10.1

6 of the 14 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
golang.org/x/sys@v0.41.0
0.44.0
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/sys@v0.42.0
0.44.0
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
golang.org/x/sys@v0.43.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
golang.org/x/sys@v0.42.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

4,926
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,338
pod-cleanupmediamarktsaturn1.2.11 of 1See more

pod-cleanup mediamarktsaturn 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

423
sabnzbdmedia-servarrVerified publisher1.6.31 of 3See more

sabnzbd media-servarr 1.6.3

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

552
cameramedia-streaming-meshVerified publisher0.2.51 of 3See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

18,713
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

3,737
ingressmedia-streaming-meshVerified publisher0.1.82 of 2See more

ingress media-streaming-mesh 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

3,302
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
golang.org/x/sys@v0.28.0
0.44.0
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
golang.org/x/sys@v0.28.0
0.44.0
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

11,651
msm-rtspmedia-streaming-meshVerified publisher0.0.21 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

18,713
rtspmedia-streaming-meshVerified publisher0.0.141 of 2See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

18,713
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

1,919
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

5,925
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,521
dex-k8s-authenticatormesosphere1.4.31 of 1See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mesosphere/dex-k8s-authenticator:v1.4.1-d2iqf3d9982cc2fd
golang.org/x/sys@v0.10.0
0.44.0

Open the chart page →

1,019
flaggermesosphere0.21.01 of 2See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/sys@v0.0.0-20190209173611-3b5209105503
0.44.0

Open the chart page →

6,050
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
0.44.0

Open the chart page →

3,042
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

5,484
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
golang.org/x/sys@v0.39.0
0.44.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

3,854
kafka-operatormesosphere0.20.21 of 2See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
golang.org/x/sys@v0.0.0-20211015200801-69063c4bb744
0.44.0

Open the chart page →

1,884
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0

Open the chart page →

2,111
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/sys@v0.0.0-20200808120158-1030fc2bf1d9
0.44.0

Open the chart page →

12,076
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
golang.org/x/sys@v0.0.0-20201015000850-e3ed0017c211
0.44.0

Open the chart page →

3,152
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
golang.org/x/sys@v0.0.0-20200113162924-86b910548bc1
0.44.0

Open the chart page →

3,152
kube-prometheus-stackmesosphere87.16.02 of 7See more

kube-prometheus-stack mesosphere 87.16.0

2 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/sys@v0.15.0
0.44.0
grafana/grafana:13.1.0121a7a9ece6d
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

7,518
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
golang.org/x/sys@v0.0.0-20191025090151-53bf42e6b339
0.44.0

Open the chart page →

5,710
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
0.44.0

Open the chart page →

2,318
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/sys@v0.0.0-20190801041406-cbf593c0f2f3
0.44.0

Open the chart page →

2,807
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0

Open the chart page →

10,532
prometheus-operatormesosphere12.11.135 of 8See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
golang.org/x/sys@v0.39.0
0.44.0
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
golang.org/x/sys@v0.0.0-20201015000850-e3ed0017c211
0.44.0
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/sys@v0.0.0-20200602225109-6fdc65e7d980
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

11,736
registry-syncermesosphere0.1.01 of 1See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
regclient/regsync:v0.8.33d8d8e40afb7
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

371
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
0.44.0

Open the chart page →

3,350
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/sys@v0.0.0-20191220220014-0732a990476f
0.44.0
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0

Open the chart page →

14,113
cert-manager-setupmesosphere-stable0.2.104 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/sys@v0.4.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/sys@v0.4.0
0.44.0
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/sys@v0.4.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/sys@v0.4.0
0.44.0

Open the chart page →

7,217
cosimesosphere-stable0.2.21 of 1See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

305
dexmesosphere-stable2.14.13 of 5See more

dex mesosphere-stable 2.14.1

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/sys@v0.15.0
0.44.0
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
golang.org/x/sys@v0.5.0
0.44.0
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
golang.org/x/sys@v0.20.0
0.44.0

Open the chart page →

19,322
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
0.44.0

Open the chart page →

3,042
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/sys@v0.0.0-20180302081741-dd2ff4accc09
0.44.0

Open the chart page →

3,614
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

5,484
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

3,359
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
golang.org/x/sys@v0.31.0
0.44.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

4,682
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,242
karmamesosphere-stable2.0.31 of 1See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.70d417abe7ddb5
golang.org/x/sys@v0.0.0-20200722175500-76b94024e4b6
0.44.0

Open the chart page →

1,967

Container images carrying it

4,392 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/postgres:18.0073e7c8b84e2
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:14.32d1e636f0778
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0
1
library/postgres:17.4304ab8135187
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:18.43a82e1f56c8f
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:18.1-alpine3.2144d837eb4c2e
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:16.11468e1f126ca5
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:18.3-alpine54451ecb8ab3
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:16.6557fea37a744
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:13.11-bullseye5c265bf1fd30
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/postgres:17.5-alpine6567bca8d7bc
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:18.369e8582b781c
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:15.186eb0add3b77c
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:17.4-alpine7062a2109c4b
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:12-alpine7c8f48705831
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:17.2-alpine7e5df973a748
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:15.38775adb39f0d
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/postgres:18.48ff36f3c6637
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:18.4-alpine3.249a8afca54e78
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:18.3a9abf4275f9e
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:17.5aadf2c0696f5
golang.org/x/sys@v0.13.0
0.44.0
1
library/postgres:13.12ced3ba927f4c
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/postgres:15.18-bookworme8db9bd3e9e1
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:14.22eba8ddbdd837
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:17.10ebba4f4de37f
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:17.6-alpineef257d85f76e
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:17-alpinef02121de6f74
golang.org/x/sys@v0.1.0
0.44.0
1
library/postgres:14.6f565573d74ae
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/postgres:17.5-bookwormfbcea1bd13b6
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:7.0.4091a7b5de688
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0
1
library/redis:7.0.15352c1fdadc91
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:7-bullseye6a5130174e14
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:6.2.20-alpine77697a75da9f
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis83edc2b8e9ff
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:7.0.1092b8b307ee28
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
library/redis:7.4.1bb142a9c18ac
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:7.4.1-alpinec1e88455c852
golang.org/x/sys@v0.13.0
0.44.0
1
library/redis:7.0-alpinec9d92d840fd0
golang.org/x/sys@v0.13.0
0.44.0
1
library/redmine:6.1.204ac44a2595b
golang.org/x/sys@v0.1.0
0.44.0
1
library/telegraf:1.20.428e98eece020
golang.org/x/sys@v0.0.0-20211004093028-2c5d950f24ef
0.44.0
1
library/telegraf:1.27507a3eecf809
golang.org/x/sys@v0.11.0
0.44.0
1
library/telegraf:1.19.0-alpine794079a7f241
golang.org/x/sys@v0.0.0-20210324051608-47abb6519492
0.44.0
1
library/telegraf:1.19-alpineaddb86c0c520
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
1
library/traefik:v2.11.00a5157f742d2
golang.org/x/sys@v0.16.0
0.44.0
1
library/traefik:3.3.5104204dadedf
golang.org/x/sys@v0.31.0
0.44.0
1
library/traefik:v2.10.11489caffaedb
golang.org/x/sys@v0.5.0
0.44.0
1
library/traefik:2.10.61957e3314f43
golang.org/x/sys@v0.13.0
0.44.0
1
library/traefik:2.5.62f603f8d3abe
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0
1
library/traefik:v3.6.1334d5089d0b41
golang.org/x/sys@v0.41.0
0.44.0
1
library/traefik:v1.7.345d47b7bb2546
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.