StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,817
of 17,813 indexed, latest versions
Container images
4,367
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,817 of 17,813 indexed charts deploy, on 4,367 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more0.44.04,367
OSV records
GO-2026-5024

Charts affected

3,817 by stars
ChartLatestAffected imagesRadar Score
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

9,908
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,723
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0

Open the chart page →

3,650
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/sys@v0.0.0-20220808155132-1c4a2a72c664
0.44.0

Open the chart page →

2,321
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0

Open the chart page →

3,820
postgresql-backup-to-miniokrzwiatrzyk0.0.11 of 2See more

postgresql-backup-to-minio krzwiatrzyk 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

2,200
traggokrzwiatrzyk1.0.01 of 1See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
traggo/server:0.2.3f1ced637510e
golang.org/x/sys@v0.0.0-20190520201301-c432e742b0af
0.44.0

Open the chart page →

1,885
ksoc-pluginsksocOfficialVerified publisher1.9.105 of 5See more

ksoc-plugins ksoc 1.9.10

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
golang.org/x/sys@v0.28.0
0.44.0
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

3,213
kubeadapt-k8s-pulsekubeadaptVerified publisher1.0.21 of 1See more

kubeadapt-k8s-pulse kubeadapt 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

2,458
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

2,276
cluster-componentkubebb0.2.24 of 4See more

cluster-component kubebb 0.2.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/cert-manager-controller:v1.8.020509de4b399
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0

Open the chart page →

8,178
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/sys@v0.0.0-20220610221304-9f5ed59c137d
0.44.0

Open the chart page →

3,996
ingress-nginxkubebb4.7.02 of 2See more

ingress-nginx kubebb 4.7.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
golang.org/x/sys@v0.8.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

3,099
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
golang.org/x/sys@v0.11.0
0.44.0

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
golang.org/x/sys@v0.3.0
0.44.0
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
golang.org/x/sys@v0.4.0
0.44.0

Open the chart page →

7,614
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

6,503
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
golang.org/x/sys@v0.3.0
0.44.0
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

2,432
u4a-componentkubebb0.2.106 of 8See more

u4a-component kubebb 0.2.10

6 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubebb/capsule-ce:v0.1.2-20221122a3dba2a95cef
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
kubebb/oidc-server:v0.2.02b5894ef1e2f
golang.org/x/sys@v0.0.0-20210923061019-b8560ed6a9b7
0.44.0
kubebb/resource-viewer:v0.2.065bb40b353db
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0

Open the chart page →

13,854
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
golang.org/x/sys@v0.15.0
0.44.0
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

2,886
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
golang.org/x/sys@v0.19.0
0.44.0
calico/kube-controllers:v3.28.08f04e4772a2b
golang.org/x/sys@v0.19.0
0.44.0
calico/node:v3.28.0385bf6391fea
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

3,316
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

2,307
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
0.44.0
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
golang.org/x/sys@v0.0.0-20211209171907-798191bca915
0.44.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

13,820
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
golang.org/x/sys@v0.15.0
0.44.0
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

5,152
dt-platformkubeblocksVerified publisher0.1.21 of 1See more

dt-platform kubeblocks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/dt-platform:0.1.1d48bcbd38066
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

880
geminikubeblocksVerified publisher0.13.43 of 8See more

gemini kubeblocks 0.13.4

3 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/sys@v0.28.0
0.44.0
victoriametrics/vmalert:v1.95.1a83e5db0897a
golang.org/x/sys@v0.14.0
0.44.0

Open the chart page →

3,104
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
golang.org/x/sys@v0.23.0
0.44.0

Open the chart page →

1,572
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
golang.org/x/sys@v0.10.0
0.44.0

Open the chart page →

3,578
ingress-nginxkubeblocksVerified publisher4.12.12 of 2See more

ingress-nginx kubeblocks 4.12.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2e8825994b7a2
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

1,624
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
golang.org/x/sys@v0.0.0-20220627191245-f75cf1eec38b
0.44.0

Open the chart page →

2,090
kubetrankubeblocksVerified publisher0.1.01 of 1See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/kubetran-platform:latest32bd92c7f7fa
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

1,208
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
golang.org/x/sys@v0.8.0
0.44.0
grafana/loki:2.9.26074e01dbe03
golang.org/x/sys@v0.13.0
0.44.0
grafana/loki-canary:2.9.24249db29b992
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

5,863
metallbkubeblocksVerified publisher0.14.42 of 3See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.14.4bbef1ee3e7d3
golang.org/x/sys@v0.18.0
0.44.0
quay.io/metallb/speaker:v0.14.437611bde45a2
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

2,602
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

1,145
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

4,524
openebskubeblocksVerified publisher3.10.03 of 3See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

10,631
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/sys@v0.20.0
0.44.0

Open the chart page →

1,555
prometheuskubeblocksVerified publisher15.16.16 of 6See more

prometheus kubeblocks 15.16.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
prom/pushgateway:v1.4.33496e0f85943
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
quay.io/prometheus/alertmanager:v0.24.0088464f949de
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/sys@v0.0.0-20211117180635-dee7805ff2e1
0.44.0
quay.io/prometheus/prometheus:v2.39.14748e26f9369
golang.org/x/sys@v0.0.0-20220919091848-fb04ddd9f9c8
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0

Open the chart page →

10,323
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

9,257
snapshot-controllerkubeblocksVerified publisher1.7.21 of 1See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

1,128
spiderpoolkubeblocksVerified publisher1.2.04 of 4See more

spiderpool kubeblocks 1.2.0

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
golang.org/x/sys@v0.18.0
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
golang.org/x/sys@v0.0.0-20210902050250-f475640dd07b
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
golang.org/x/sys@v0.0.0-20210902050250-f475640dd07b
0.44.0
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins:19f19457ae7cec86457b0411543a3cf21dd9f95a8edc39be1e22
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

8,515
vaultkubeblocksVerified publisher0.30.02 of 2See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
golang.org/x/sys@v0.30.0
0.44.0
hashicorp/vault-k8s:1.6.2103a2d817a74
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

3,044
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload3 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
0.44.0
victoriametrics/vmalert:v1.95.1a83e5db0897a
golang.org/x/sys@v0.14.0
0.44.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

3,717
kube-botblocker-operatorkube-botblockerVerified publisher0.2.21 of 2See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/gustavojst/kube-botblocker:0.2.04de059bb32ac
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

507
kubeclaritykubeclarity2.23.33 of 5See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
golang.org/x/sys@v0.11.0
0.44.0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

5,521
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

438
commons-operatorkubedoopVerified publisher0.4.01 of 1See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

388

Container images carrying it

4,367 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
summerwind/actions-runner-controller:v0.27.62128f81dbede
golang.org/x/sys@v0.10.0
0.44.0
1
supabase/gotrue:v2.189.0385184459f57
golang.org/x/sys@v0.43.0
0.44.0
1
supabase/gotrue:v2.91.07174d551d720
golang.org/x/sys@v0.8.0
0.44.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
golang.org/x/sys@v0.23.0
0.44.0
1
supabase/postgres:17.6.1.136f371b5f3f2ac
golang.org/x/sys@v0.1.0
0.44.0
1
superorbital/cludod:0.0.2-alphad59732f61d6e
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
0.44.0
1
superque/smokeping-prober:v0.11.028ca636d1dee
golang.org/x/sys@v0.41.0
0.44.0
1
supporttools/do-database-metrics-adapter:1.0.2ab55fd5a69c3
golang.org/x/sys@v0.18.0
0.44.0
1
supporttools/go-redis-proxy:0.0.7cbd45f6b02b8
golang.org/x/sys@v0.16.0
0.44.0
1
supporttools/go-web-cache:v1.3.2f4f775dd43b9
golang.org/x/sys@v0.20.0
0.44.0
1
supporttools/powerdns-admin-proxy:5e3687d66bcfa
golang.org/x/sys@v0.11.0
0.44.0
1
surajwarbhe/grafana:v185248611e9f1
golang.org/x/sys@v0.0.0-20191220142924-d4481acd189f
0.44.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
golang.org/x/sys@v0.6.0
0.44.0
1
svtechnmaa/svtech_icingadb:v1.1.26d91c2e4e882
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
golang.org/x/sys@v0.6.0
0.44.0
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
golang.org/x/sys@v0.15.0
0.44.0
1
syepes/network_exporter:1.8.000af1691570e
golang.org/x/sys@v0.32.0
0.44.0
1
syncthing/syncthing:1.18.2966433161272
golang.org/x/sys@v0.0.0-20210819135213-f52c844e1c1c
0.44.0
1
sysintelligent/hello-app:2.0.177fb30df847d
golang.org/x/sys@v0.15.0
0.44.0
1
sysnet4admin/colosseum-nti:logc947c3629371
golang.org/x/sys@v0.32.0
0.44.0
1
t3nde/tideways:1.7.2777e008f764db
golang.org/x/sys@v0.0.0-20190228124157-a34e9553db1e
0.44.0
1
tailscale/k8s-operator:v1.70.08edd06cf5bac
golang.org/x/sys@v0.21.0
0.44.0
1
tailscale/tailscale:v1.96.5dbeff02d2337
golang.org/x/sys@v0.40.0
0.44.0
1
tailwarden/komiser:3.1.103f68c8ae7993
golang.org/x/sys@v0.15.0
0.44.0
1
tdengine/tdengine:3.0.2.24140a4021ddb
golang.org/x/sys@v0.0.0-20220610221304-9f5ed59c137d
0.44.0
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
0.44.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
golang.org/x/sys@v0.6.0
0.44.0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
golang.org/x/sys@v0.18.0
0.44.0
1
temporalio/admin-tools:1.22.0836af062af30
golang.org/x/sys@v0.5.0
0.44.0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
golang.org/x/sys@v0.33.0
0.44.0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
golang.org/x/sys@v0.23.0
0.44.0
1
temporalio/admin-tools:1.28cfde8170c92f
golang.org/x/sys@v0.38.0
0.44.0
1
temporalio/auto-setup:1.29.15b3502a3b685
golang.org/x/sys@v0.32.0
0.44.0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
golang.org/x/sys@v0.31.0
0.44.0
1
temporalio/server:1.26.21e2626efcbc1
golang.org/x/sys@v0.18.0
0.44.0
1
temporalio/server:1.25.08a5798191dea
golang.org/x/sys@v0.18.0
0.44.0
1
temporalio/server:1.29.1c1e3326b2ce1
golang.org/x/sys@v0.30.0
0.44.0
1
temporalio/server:1.22.0ddeebf8bad8f
golang.org/x/sys@v0.11.0
0.44.0
1
temporalio/ui:2.44.00b36e00aad30
golang.org/x/sys@v0.33.0
0.44.0
1
temporalio/ui:2.30.25c2a3645d09c
golang.org/x/sys@v0.13.0
0.44.0
1
temporalio/ui:2.33.05c586a3c8ec5
golang.org/x/sys@v0.13.0
0.44.0
1
temporalio/ui:2.39.0b768f87f18b5
golang.org/x/sys@v0.33.0
0.44.0
1
temporalio/ui:2.52.0fc47cd8202c9
golang.org/x/sys@v0.40.0
0.44.0
1
tensorzero/ui:2026.6.0f2563d54724e
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
tenureai/tenure:v1.0.285f5b222df9a5
golang.org/x/sys@v0.43.0
0.44.0
1
testinprod/op-erigon:latest0a125bd77a2d
golang.org/x/sys@v0.28.0
0.44.0
1
thanosio/thanos:v0.19.088276fcd1491
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
1
thanosio/thanos:v0.15.0b12d5c31bf5a
golang.org/x/sys@v0.0.0-20200728102440-3e129f6d46b1
0.44.0
1
thecampagnards/trafficlight-api:main7dca9d973837
golang.org/x/sys@v0.0.0-20210521203332-0cec03c779c1
0.44.0
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.