StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,817
of 17,813 indexed, latest versions
Container images
4,367
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,817 of 17,813 indexed charts deploy, on 4,367 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more0.44.04,367
OSV records
GO-2026-5024

Charts affected

3,817 by stars
ChartLatestAffected imagesRadar Score
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

9,908
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,723
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

3,650
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/sys@v0.0.0-20220808155132-1c4a2a72c664
0.44.0

Open the chart page →

2,321
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0

Open the chart page →

3,820
postgresql-backup-to-miniokrzwiatrzyk0.0.11 of 2See more

postgresql-backup-to-minio krzwiatrzyk 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

2,200
traggokrzwiatrzyk1.0.01 of 1See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
traggo/server:0.2.3f1ced637510e
golang.org/x/sys@v0.0.0-20190520201301-c432e742b0af
0.44.0

Open the chart page →

1,885
ksoc-pluginsksocOfficialVerified publisher1.9.105 of 5See more

ksoc-plugins ksoc 1.9.10

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

3,213
kubeadapt-k8s-pulsekubeadaptVerified publisher1.0.21 of 1See more

kubeadapt-k8s-pulse kubeadapt 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

2,458
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

2,276
cluster-componentkubebb0.2.24 of 4See more

cluster-component kubebb 0.2.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/cert-manager-controller:v1.8.020509de4b399
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0

Open the chart page →

8,178
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/sys@v0.0.0-20220610221304-9f5ed59c137d
0.44.0

Open the chart page →

3,996
ingress-nginxkubebb4.7.02 of 2See more

ingress-nginx kubebb 4.7.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
golang.org/x/sys@v0.8.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

3,099
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
golang.org/x/sys@v0.11.0
0.44.0

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
golang.org/x/sys@v0.3.0
0.44.0
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
golang.org/x/sys@v0.4.0
0.44.0

Open the chart page →

7,614
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

6,503
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
golang.org/x/sys@v0.3.0
0.44.0
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

2,432
u4a-componentkubebb0.2.106 of 8See more

u4a-component kubebb 0.2.10

6 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/capsule-ce:v0.1.2-20221122a3dba2a95cef
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
kubebb/oidc-server:v0.2.02b5894ef1e2f
golang.org/x/sys@v0.0.0-20210923061019-b8560ed6a9b7
0.44.0
kubebb/resource-viewer:v0.2.065bb40b353db
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0

Open the chart page →

13,854
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
golang.org/x/sys@v0.15.0
0.44.0
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

2,886
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
golang.org/x/sys@v0.19.0
0.44.0
calico/kube-controllers:v3.28.08f04e4772a2b
golang.org/x/sys@v0.19.0
0.44.0
calico/node:v3.28.0385bf6391fea
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

3,316
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

2,307
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
0.44.0
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
golang.org/x/sys@v0.0.0-20211209171907-798191bca915
0.44.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

13,820
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
golang.org/x/sys@v0.15.0
0.44.0
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

5,152
dt-platformkubeblocksVerified publisher0.1.21 of 1See more

dt-platform kubeblocks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/dt-platform:0.1.1d48bcbd38066
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

880
geminikubeblocksVerified publisher0.13.43 of 8See more

gemini kubeblocks 0.13.4

3 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/sys@v0.28.0
0.44.0
victoriametrics/vmalert:v1.95.1a83e5db0897a
golang.org/x/sys@v0.14.0
0.44.0

Open the chart page →

3,104
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
golang.org/x/sys@v0.23.0
0.44.0

Open the chart page →

1,572
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
golang.org/x/sys@v0.10.0
0.44.0

Open the chart page →

3,578
ingress-nginxkubeblocksVerified publisher4.12.12 of 2See more

ingress-nginx kubeblocks 4.12.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2e8825994b7a2
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

1,624
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
golang.org/x/sys@v0.0.0-20220627191245-f75cf1eec38b
0.44.0

Open the chart page →

2,090
kubetrankubeblocksVerified publisher0.1.01 of 1See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/kubetran-platform:latest32bd92c7f7fa
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

1,208
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
golang.org/x/sys@v0.8.0
0.44.0
grafana/loki:2.9.26074e01dbe03
golang.org/x/sys@v0.13.0
0.44.0
grafana/loki-canary:2.9.24249db29b992
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

5,863
metallbkubeblocksVerified publisher0.14.42 of 3See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.14.4bbef1ee3e7d3
golang.org/x/sys@v0.18.0
0.44.0
quay.io/metallb/speaker:v0.14.437611bde45a2
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

2,602
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

1,145
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

4,524
openebskubeblocksVerified publisher3.10.03 of 3See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

10,631
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/sys@v0.20.0
0.44.0

Open the chart page →

1,555
prometheuskubeblocksVerified publisher15.16.16 of 6See more

prometheus kubeblocks 15.16.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
prom/pushgateway:v1.4.33496e0f85943
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
quay.io/prometheus/alertmanager:v0.24.0088464f949de
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/sys@v0.0.0-20211117180635-dee7805ff2e1
0.44.0
quay.io/prometheus/prometheus:v2.39.14748e26f9369
golang.org/x/sys@v0.0.0-20220919091848-fb04ddd9f9c8
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0

Open the chart page →

10,323
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

9,257
snapshot-controllerkubeblocksVerified publisher1.7.21 of 1See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

1,128
spiderpoolkubeblocksVerified publisher1.2.04 of 4See more

spiderpool kubeblocks 1.2.0

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
golang.org/x/sys@v0.18.0
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
golang.org/x/sys@v0.0.0-20210902050250-f475640dd07b
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
golang.org/x/sys@v0.0.0-20210902050250-f475640dd07b
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins:19f19457ae7cec86457b0411543a3cf21dd9f95a8edc39be1e22
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

8,515
vaultkubeblocksVerified publisher0.30.02 of 2See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
golang.org/x/sys@v0.30.0
0.44.0
hashicorp/vault-k8s:1.6.2103a2d817a74
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

3,044
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload3 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
victoriametrics/vmalert:v1.95.1a83e5db0897a
golang.org/x/sys@v0.14.0
0.44.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

3,717
kube-botblocker-operatorkube-botblockerVerified publisher0.2.21 of 2See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/gustavojst/kube-botblocker:0.2.04de059bb32ac
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

507
kubeclaritykubeclarity2.23.33 of 5See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
golang.org/x/sys@v0.11.0
0.44.0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

5,521
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

438
commons-operatorkubedoopVerified publisher0.4.01 of 1See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

388

Container images carrying it

4,367 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
netrisai/netris-operator:v4.0.244f60aa0d898
golang.org/x/sys@v0.2.0
0.44.0
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
golang.org/x/sys@v0.31.0
0.44.0
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/sys@v0.0.0-20201218084310-7d0127a74742
0.44.0
1
nineinfra/hdfs-operator:v0.7.0debb1e3410e2
golang.org/x/sys@v0.13.0
0.44.0
1
nineinfra/kyuubi-operator:v0.7.08d8ed87ef77c
golang.org/x/sys@v0.11.0
0.44.0
1
nineinfra/metastore-operator:v0.7.011259032fb04
golang.org/x/sys@v0.11.0
0.44.0
1
nineinfra/nineinfra:v0.7.0d4aad414eccd
golang.org/x/sys@v0.14.0
0.44.0
1
nineinfra/zookeeper-operator:v0.7.0af6eb2f37bfc
golang.org/x/sys@v0.13.0
0.44.0
1
nmalhotr/webserver:v1.0.03419361fb0dd
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
1
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/sys@v0.15.0
0.44.0
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/sys@v0.0.0-20220808155132-1c4a2a72c664
0.44.0
1
nocodb/nocodb:0.301.5d9516f0bf546
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
nocodb/nocodb:0.84.15f9b799933aa8
golang.org/x/sys@v0.0.0-20220204135822-1c1b9b1eba6a
0.44.0
1
novosga/novosga:latest34b9acbe6e51
golang.org/x/sys@v0.43.0
0.44.0
1
ntakashi/cole:1.2.3f7b68bee2a68
golang.org/x/sys@v0.8.0
0.44.0
1
ntakashi/gitana:1.4.04171ec641120
golang.org/x/sys@v0.0.0-20210927094055-39ccf1dd6fa6
0.44.0
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
1
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
golang.org/x/sys@v0.5.0
0.44.0
1
oamdev/cluster-gateway:v1.4.0dc97164c4c1f
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.44.0
1
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.44.0
1
oamdev/kube-webhook-certgen:v2.331e0892f3583
golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c
0.44.0
1
oamdev/terraform-controller:v0.8.070447f4d360a
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0
1
oamdev/vector-controller:v0.2.39dd8be44ffc9
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.44.0
1
oamdev/vela-core:v1.11.095fa412c934e
golang.org/x/sys@v0.34.0
0.44.0
1
oamdev/vela-prism:v1.6.06db6a937647d
golang.org/x/sys@v0.0.0-20220319134239-a9b59b0215f8
0.44.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
golang.org/x/sys@v0.36.0
0.44.0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/sys@v0.13.0
0.44.0
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/sys@v0.0.0-20220207234003-57398862261d
0.44.0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/sys@v0.34.0
0.44.0
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
golang.org/x/sys@v0.18.0
0.44.0
1
okteto/civo-webhook:0.5.357cd51176538
golang.org/x/sys@v0.12.0
0.44.0
1
oliver006/redis_exporter:v1.11.104d958d209ab
golang.org/x/sys@v0.0.0-20200615200032-f1bc736245b1
0.44.0
1
oliver006/redis_exporter:v1.67.0120f7ec77293
golang.org/x/sys@v0.22.0
0.44.0
1
oliver006/redis_exporter:v1.14.0d55e056987af
golang.org/x/sys@v0.0.0-20201015000850-e3ed0017c211
0.44.0
1
oliver006/redis_exporter:v1.66.0d98e6db8094f
golang.org/x/sys@v0.22.0
0.44.0
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
golang.org/x/sys@v0.41.0
0.44.0
1
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
0.44.0
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
0.44.0
1
ondrejsika/counter:latestd95eaeee2172
golang.org/x/sys@v0.37.0
0.44.0
1
opea/codegen-ui:1.02bee4eb66f3e
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
opea/codetrans-ui:1.03ef121f34610
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
opea/docsum-ui:1.07f854e9bffaf
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
opea/gmcmanager:1.0514af17c495c
golang.org/x/sys@v0.20.0
0.44.0
1
openbas/caldera-server:5.1.0a277796d9724
golang.org/x/sys@v0.15.0
0.44.0
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/sys@v0.0.0-20210225134936-a50acf3fe073
0.44.0
1
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
golang.org/x/sys@v0.24.0
0.44.0
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
golang.org/x/sys@v0.39.0
0.44.0
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
golang.org/x/sys@v0.26.0
0.44.0
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
golang.org/x/sys@v0.40.0
0.44.0
1
opencsghq/lws:v0.6.1de15437db41b
golang.org/x/sys@v0.32.0
0.44.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.