StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,770
of 17,803 indexed, latest versions
Container images
4,347
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,770 of 17,803 indexed charts deploy, on 4,347 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+268 more0.44.04,347
OSV records
GO-2026-5024

Charts affected

3,770 by stars
ChartLatestAffected imagesRadar Score
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0

Open the chart page →

5,211
arcadearcadeVerified publisher1.10.11 of 10See more

arcade arcade 1.10.1

1 of the 10 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

991
argocdargo-helm-charts1.0.03 of 3See more

argocd argo-helm-charts 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
golang.org/x/sys@v0.30.0
0.44.0
public.ecr.aws/docker/library/redis:7.2.8-alpinec88ea2979a49
golang.org/x/sys@v0.13.0
0.44.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
golang.org/x/sys@v0.25.0
0.44.0

Open the chart page →

7,369
argo-workflowsargo-helm-charts1.0.02 of 2See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
golang.org/x/sys@v0.33.0
0.44.0
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

1,840
argonix-apiargonix0.2.92See more

argonix-api argonix 0.2.9

2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0aa679ddf5c3a
golang.org/x/sys@v0.20.0
0.44.0
ghcr.io/argonix-io/argonix-api-frontend:1.0.0a584153dfae5
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

—
argo-zombiesargo-zombies0.1.521 of 1See more

argo-zombies argo-zombies 0.1.52

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/henrywhitaker3/argo-zombies:v0.4.4316c397906c9
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

254
arlas-aiasarlas-stackVerified publisher28.8.06 of 22See more

arlas-aias arlas-stack 28.8.0

6 of the 22 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
golang.org/x/sys@v0.32.0
0.44.0
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
golang.org/x/sys@v0.33.0
0.44.0
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
golang.org/x/sys@v0.25.0
0.44.0
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
golang.org/x/sys@v0.32.0
0.44.0
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
golang.org/x/sys@v0.21.0
0.44.0
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

40,651
arma-reforgerarma-reforger0.5.38 of 8See more

arma-reforger arma-reforger 0.5.3

8 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/pushgateway:v1.5.128fe26c8b8b1
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
stakater/reloader:v1.0.15f4b87a8e56d4
golang.org/x/sys@v0.5.0
0.44.0
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
golang.org/x/sys@v0.5.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.63.03f976422884e
golang.org/x/sys@v0.4.0
0.44.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/sys@v0.3.0
0.44.0
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
golang.org/x/sys@v0.2.0
0.44.0
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
golang.org/x/sys@v0.3.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.05658d0011a41
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

23,435
cluster-autoscalerarzu9.19.11 of 1See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
breton/cool:dev41b1bb483aa2
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0

Open the chart page →

1,780
itera-lmaarzu1.34.604 of 6See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
0.44.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/sys@v0.0.0-20211117180635-dee7805ff2e1
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0

Open the chart page →

8,622
assemblylineassemblylineVerified publisher7.4.202 of 12See more

assemblyline assemblyline 7.4.20

2 of the 12 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-01-11T05-49-32Z026ae522febc
golang.org/x/sys@v0.15.0
0.44.0
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

12,667
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

5,537
dltkvassist-iot-data-integrity-verification0.2.04 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/data_integrity_verification:1.0.0eb7f5d765ab6
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

78,035
dltflassist-iot-dlt-based-fl0.2.04 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/dlt_based_fl:1.1.04bc3d92788ed
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

78,035
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

3,789
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

9,422
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

4,369
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

13,389
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
postgis/postgis:15-3.3a2fc46b52819
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

10,173
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
kong/kubernetes-ingress-controller:2.35e66021b64a8
golang.org/x/sys@v0.0.0-20220328115105-d36c6a25d886
0.44.0

Open the chart page →

18,426
performanceandusagediagnosisassist-iot-pud1.0.05 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

5 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
golang.org/x/sys@v0.0.0-20220615213510-4f61da869c0c
0.44.0
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
golang.org/x/sys@v0.8.0
0.44.0
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
golang.org/x/sys@v0.0.0-20220615213510-4f61da869c0c
0.44.0

Open the chart page →

8,571
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

8,052
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

1,084
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
golang.org/x/sys@v0.30.0
0.44.0
library/mongo:4.4.66efa05203990
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
0.44.0
library/mysql:5.74bc6bc963e6d
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

45,620
astrotrekastria0.0.24 of 4See more

astrotrek astria 0.0.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
golang.org/x/sys@v0.0.0-20191026070338-33540a1f6037
0.44.0
ghcr.io/astriaorg/astria-indexer:0.1.05cf1e5709820
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

32,664
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
golang.org/x/sys@v0.36.0
0.44.0
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

3,300
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

1,513
evm-faucetastria0.1.51 of 1See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

1,764
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

4,019
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

4,019
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

3,717
graph-nodeastria0.2.22 of 3See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ipfs/kubo:v0.17.0803fac58ba15
golang.org/x/sys@v0.2.0
0.44.0
library/postgres:latest4ef4dbc939d6
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

5,572
sequencerastria4.0.02 of 3See more

sequencer astria 4.0.0

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
golang.org/x/sys@v0.29.0
0.44.0
rclone/rclone:1.56.0f2fc45c8bc57
golang.org/x/sys@v0.0.0-20210423185535-09eb48e85fd7
0.44.0

Open the chart page →

6,344
sequencer-faucetastria0.9.21 of 1See more

sequencer-faucet astria 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
golang.org/x/sys@v0.23.0
0.44.0

Open the chart page →

1,320
phonebook-chartasumankamberoglu0.1.51 of 3See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

3,176
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

9,449
hcloud-csi-driveratem181.5.12 of 6See more

hcloud-csi-driver atem18 1.5.1

2 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
golang.org/x/sys@v0.0.0-20201015000850-e3ed0017c211
0.44.0
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/sys@v0.0.0-20180302081741-dd2ff4accc09
0.44.0

Open the chart page →

6,509
attestkeepattestkeepVerified publisher1.1.11 of 2See more

attestkeep attestkeep 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16.15-alpinecf78e76683b9
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

707
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,571
okd-webhookav1o-chartsVerified publisher0.1.01 of 1See more

okd-webhook av1o-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0

Open the chart page →

1,727
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

5,083
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
golang.org/x/sys@v0.0.0-20220919091848-fb04ddd9f9c8
0.44.0

Open the chart page →

6,965
kubeslice-workeraveshaVerified publisher1.5.02 of 14See more

kubeslice-worker avesha 1.5.0

2 of the 14 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
aveshasystems/spiffe-csi-driver:0.2.753fc6d009e04
golang.org/x/sys@v0.19.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.1f6717ce72a26
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

1,645
amazon-ec2-metadata-mockaws1.11.21 of 1See more

amazon-ec2-metadata-mock aws 1.11.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock:v1.11.2dd02d3569da0
golang.org/x/sys@v0.0.0-20210823070655-63515b42dcdf
0.44.0

Open the chart page →

860
appmesh-jaegeraws1.0.31 of 1See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.2942822be7888b
golang.org/x/sys@v0.0.0-20210823070655-63515b42dcdf
0.44.0

Open the chart page →

2,487
appmesh-prometheusaws1.0.31 of 2See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0

Open the chart page →

2,946
aws-node-termination-handler-2aws0.2.02 of 2See more

aws-node-termination-handler-2 aws 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller:v2.0.0-beta9637c80dd23f
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
0.44.0
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook:v2.0.0-beta86b0f7243250
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
0.44.0

Open the chart page →

2,966
aws-sigv4-proxy-admission-controlleraws0.1.21 of 1See more

aws-sigv4-proxy-admission-controller aws 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller:1.067b89ae52240
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0

Open the chart page →

2,140
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
golang.org/x/sys@v0.2.0
0.44.0

Open the chart page →

9,730
axonops-developer-operatoraxonops-developer-operator0.1.01 of 1See more

axonops-developer-operator axonops-developer-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/axonops/axonops-developer-operator:v0.1.0b3d6600c8ba5
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

750

Container images carrying it

4,347 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oryd/kratos:v26.2.02a13bb8d362c
golang.org/x/sys@v0.40.0
0.44.0
1
oryd/kratos:v1.1.08f15006a080d
golang.org/x/sys@v0.16.0
0.44.0
1
oryd/oathkeeper:v26.2.0467329abde34
golang.org/x/sys@v0.40.0
0.44.0
1
oryd/oathkeeper-maester:v0.1.140942e9fe9b1a
golang.org/x/sys@v0.43.0
0.44.0
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
golang.org/x/sys@v0.19.0
0.44.0
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
golang.org/x/sys@v0.0.0-20220808155132-1c4a2a72c664
0.44.0
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/sys@v0.27.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
golang.org/x/sys@v0.39.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
golang.org/x/sys@v0.26.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
golang.org/x/sys@v0.11.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
golang.org/x/sys@v0.24.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
golang.org/x/sys@v0.14.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
golang.org/x/sys@v0.40.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
golang.org/x/sys@v0.9.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
golang.org/x/sys@v0.1.0
0.44.0
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
golang.org/x/sys@v0.37.0
0.44.0
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
golang.org/x/sys@v0.30.0
0.44.0
1
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
golang.org/x/sys@v0.5.0
0.44.0
1
outlinewiki/outline:0.82.0494dfb9249a6
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
owncloud/ocis:7.1.388e7c854517d
golang.org/x/sys@v0.29.0
0.44.0
1
owncloud/ocis:8.0.1b38fd8fdd58f
golang.org/x/sys@v0.40.0
0.44.0
1
owncloud/ocis:1.7.0d2efcae92c84
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0
1
owncloud/server:10.15.051d9b74fc2a8
golang.org/x/sys@v0.22.0
0.44.0
1
owncloud/server:10.16.274c53d341076
golang.org/x/sys@v0.43.0
0.44.0
1
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
golang.org/x/sys@v0.0.0-20191029155521-f43be2a4598c
0.44.0
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
0.44.0
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
0.44.0
1
pannoi/kollektor:1.0.59559617788fc
golang.org/x/sys@v0.13.0
0.44.0
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
0.44.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
golang.org/x/sys@v0.37.0
0.44.0
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
golang.org/x/sys@v0.32.0
0.44.0
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
golang.org/x/sys@v0.16.0
0.44.0
1
percona/pmm-server:3.9.1003f9c25f842
golang.org/x/sys@v0.37.0
0.44.0
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
golang.org/x/sys@v0.30.0
0.44.0
1
pgsharding/spqr-router:nightly-2.8.3-1839-f66048d84734940216d3
golang.org/x/sys@v0.38.0
0.44.0
1
pgvector/pgvector:pg17cf134a767f47
golang.org/x/sys@v0.1.0
0.44.0
1
phntom/chartmuseum:v0.16.053883b65d9b7
golang.org/x/sys@v0.8.0
0.44.0
1
phntom/chartmuseum:v0.15.29242b4df9e65
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
1
phntom/external-dns-host-network:0.0.123adadbac8443
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
phntom/goalert:0.0.298ca4df55499b
golang.org/x/sys@v0.15.0
0.44.0
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
golang.org/x/sys@v0.13.0
0.44.0
1
phntom/mindav:0.1.7-kix35695f546abbb
golang.org/x/sys@v0.0.0-20201223074533-0d417f636930
0.44.0
1
phntom/oauth2-proxy:v7.3.48ea656a2a895
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
1
photoprism/photoprism:231128-ce284de9cc4f9c
golang.org/x/sys@v0.15.0
0.44.0
1
photoprism/photoprism:220629-jammy2954334adbda
golang.org/x/sys@v0.0.0-20220615213510-4f61da869c0c
0.44.0
1
photoprism/photoprism:251130db16ee6b1ba3
golang.org/x/sys@v0.38.0
0.44.0
1
photoprism/photoprism:240711-cefc6fd632ca74
golang.org/x/sys@v0.22.0
0.44.0
1
piblokto/backlokto-operator:v0.0.20963cda71e393
golang.org/x/sys@v0.13.0
0.44.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.