StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,871
of 17,813 indexed, latest versions
Container images
4,436
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,871 of 17,813 indexed charts deploy, on 4,436 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+272 more0.44.04,436
OSV records
GO-2026-5024

Charts affected

3,871 by stars
ChartLatestAffected imagesRadar Score
buildkitdwiremindVerified publisher0.33.01 of 1See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

1,165
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0

Open the chart page →

4,715
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
golang.org/x/sys@v0.0.0-20220503163025-988cb79eb6c6
0.44.0

Open the chart page →

4,051
yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter0.38.01 of 1See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

924
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

4,180
adcs-issueradcs-issuer3.0.21 of 1See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
djkormo/adcs-issuer:2.1.29f34e87e7586
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

829
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

1,875
agentareaagentareaVerified publisher0.0.185 of 16See more

agentarea agentarea 0.0.18

5 of the 16 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16-alpine3c5c8892d184
golang.org/x/sys@v0.1.0
0.44.0
library/postgres:alpine6c538e7206ea
golang.org/x/sys@v0.1.0
0.44.0
oryd/kratos:v1.3.1fe2428f103a6
golang.org/x/sys@v0.23.0
0.44.0
temporalio/auto-setup:1.29.15b3502a3b685
golang.org/x/sys@v0.32.0
0.44.0
temporalio/ui:2.39.0b768f87f18b5
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

14,566
traefikaigisukVerified publisher0.1.11 of 1See more

traefik aigisuk 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/traefik:2.7.0-rc2b70710baceeb
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0

Open the chart page →

2,884
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.261 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.26

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

2,458
alertmanager-discordalertmanagerdiscordVerified publisher0.3.21 of 1See more

alertmanager-discord alertmanagerdiscord 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
speckle/alertmanager-discord:latestf6221ff308e9
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

420
clearml-servingallegroaiVerified publisher1.6.26 of 9See more

clearml-serving allegroai 1.6.2

6 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
golang.org/x/sys@v0.2.0
0.44.0
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
grafana/grafana:9.4.376dcf36e7d2a
golang.org/x/sys@v0.3.0
0.44.0
jimmidyson/configmap-reload:v0.8.05af9d3041d12
golang.org/x/sys@v0.0.0-20221010170243-090e33056c14
0.44.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/sys@v0.3.0
0.44.0
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

18,003
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
0.44.0

Open the chart page →

5,001
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

8,411
soft-servealphani-helm-chartsVerified publisher0.4.01 of 1See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
charmcli/soft-serve:v0.4.039523c1a6ba8
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0

Open the chart page →

3,121
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
golang.org/x/sys@v0.0.0-20220307203707-22a9840ba4d7
0.44.0

Open the chart page →

2,174
cloudflare-operatorankra-chartsVerified publisher0.2.01 of 1See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
adyanth/cloudflare-operatordigest-pinned6b168dc237d5
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

507
upcloud-csiankra-chartsVerified publisher0.4.08 of 8See more

upcloud-csi ankra-charts 0.4.0

8 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
golang.org/x/sys@v0.35.0
0.44.0
ghcr.io/upcloudltd/upcloud-csidigest-pinned5af91c663788
golang.org/x/sys@v0.39.0
0.44.0
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0

Open the chart page →

15,008
annotations-exporterannotations-exporter0.5.01 of 1See more

annotations-exporter annotations-exporter 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/alex123012/annotations-exporter:v0.5.04c2b8dbc798e
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,150
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

3,437
anteonanteonVerified publisher2.6.45 of 13See more

anteon anteon 2.6.4

5 of the 13 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.64634b094b2183
golang.org/x/sys@v0.18.0
0.44.0
ddosify/selfhosted_hammer:2.0.0181965edb12e
golang.org/x/sys@v0.6.0
0.44.0
library/influxdb:2.6.1-alpine44a366dd7724
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
library/redis:7.2.4-alpinec8bb255c3559
golang.org/x/sys@v0.13.0
0.44.0
prom/prometheus:v2.37.98176adea328e
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

22,658
antreaantreaVerified publisher2.7.01 of 2See more

antrea antrea 2.7.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

3,730
api-usage-serverapi-usage-server1.16.01 of 1See more

api-usage-server api-usage-server 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

740
gateway-helmappscodeVerified publisher0.0.0-latest1 of 2See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

1,096
scannerappscodeVerified publisher2026.1.153 of 3See more

scanner appscode 2026.1.15

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
golang.org/x/sys@v0.15.0
0.44.0
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
golang.org/x/sys@v0.39.0
0.44.0
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

5,343
smtprelayappscodeVerified publisher2026.9.111 of 1See more

smtprelay appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
golang.org/x/sys@v0.29.0
0.44.0

Open the chart page →

872
stash-enterpriseappscodeVerified publisher0.42.04 of 4See more

stash-enterprise appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
golang.org/x/sys@v0.21.0
0.44.0
ghcr.io/stashed/stash-crd-installer:v0.42.1d6c9b7a1f7b8
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

3,637
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

5,283
argocd-rbac-operatorargocd-rbac-operator0.4.51 of 1See more

argocd-rbac-operator argocd-rbac-operator 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

985
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
golang.org/x/sys@v0.26.0
0.44.0
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

2,529
s3dartur9010Verified publisher1.0.11 of 1See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/siafoundation/s3d:bf33bf3b3fcc85f7282
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

1,768
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

2,368
cert-exporterarzu3.0.11 of 1See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
joeelliott/cert-exporter:v2.7.0b4acd14642d0
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0

Open the chart page →

2,820
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0

Open the chart page →

18,047
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
0.44.0

Open the chart page →

10,798
dltbrokerassist-iot-distributed-broker0.2.04 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/distributed_broker:1.0.033e02dad168f
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

194,560
dltloggingassist-iot-logging-auditing0.2.04 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
assistiot/logging_auditing:1.0.0790dbb198e86
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0

Open the chart page →

194,540
astradnsastradnsVerified publisher0.2.92 of 2See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
golang.org/x/sys@v0.41.0
0.44.0
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

2,699
deployautoml0.1.02 of 3See more

deploy automl 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
muonsoft/openapi-mock:latestc9afe1295484
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

2,949
cso-proxyav1o-chartsVerified publisher0.1.31 of 1See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0

Open the chart page →

4,326
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

3,399
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0

Open the chart page →

3,750
prismav1o-chartsVerified publisher0.3.11 of 1See more

prism av1o-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
0.44.0

Open the chart page →

1,276
kubebrowseravistoOfficialVerified publisher1.4.01 of 1See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

678
db-backupballe-petersen0.1.41 of 1See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
tobiasbp/db-backup:0.0.314bee6e33a26
golang.org/x/sys@v0.0.0-20191210023423-ac6580df4449
0.44.0

Open the chart page →

4,822
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

3,748
chirpstackbeeinventor0.1.103 of 5See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
chirpstack/chirpstack-gateway-bridge:3.13.2ce3f2cdca8a9
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

7,824
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
golang.org/x/sys@v0.0.0-20220503163025-988cb79eb6c6
0.44.0

Open the chart page →

2,610
cloudflare-tunnel-operatorbeezlabs0.2.01 of 1See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
golang.org/x/sys@v0.0.0-20220704084225-05e143d24a9e
0.44.0

Open the chart page →

1,596
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

2,909

Container images carrying it

4,436 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/nicholaswilde/shiori:version-v1.5.0e0645abe6777
golang.org/x/sys@v0.0.0-20190804053845-51ab0e2deafa
0.44.0
1
ghcr.io/nicholaswilde/static:version-ee8a20cd1d47c730bc4
golang.org/x/sys@v0.0.0-20190422165155-953cdadca894
0.44.0
1
ghcr.io/nicholaswilde/todo:941c0d3-ls1d7ba1341a940
golang.org/x/sys@v0.0.0-20200720211630-cb9d2d5c5666
0.44.0
1
ghcr.io/nicholaswilde/twtxt:version-0.1.158736a73ca10
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
1
ghcr.io/nicholaswilde/wiki:version-900b76a6c4f261d8f5e
golang.org/x/sys@v0.0.0-20190624142023-c5567b49c5d0
0.44.0
1
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
golang.org/x/sys@v0.0.0-20200323222414-85ca7c5b95cd
0.44.0
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
0.44.0
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
golang.org/x/sys@v0.37.0
0.44.0
1
ghcr.io/nlamirault/bbox_exporter:1.0.0f5dd1f7794c6
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
0.44.0
1
ghcr.io/nlamirault/freebox-exporter:1.0.02d522b664e12
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/sys@v0.33.0
0.44.0
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
golang.org/x/sys@v0.34.0
0.44.0
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
golang.org/x/sys@v0.5.0
0.44.0
1
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
golang.org/x/sys@v0.0.0-20211210111614-af8b64212486
0.44.0
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
golang.org/x/sys@v0.29.0
0.44.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
golang.org/x/sys@v0.34.0
0.44.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/sys@v0.19.0
0.44.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/okteto/backend:0.0.0-2026-08-17629bdce31b4d
golang.org/x/sys@v0.38.0
0.44.0
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/okteto/okteto:3.22.04585017f52f6
golang.org/x/sys@v0.38.0
0.44.0
1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller:0.2.30aec31e36d95
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
golang.org/x/sys@v0.28.0
0.44.0
1
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
golang.org/x/sys@v0.15.0
0.44.0
1
ghcr.io/openappsec/smartsync:latest580d68c50cc7
golang.org/x/sys@v0.0.0-20220704084225-05e143d24a9e
0.44.0
1
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
golang.org/x/sys@v0.0.0-20220513210249-45d2b4557a2a
0.44.0
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
golang.org/x/sys@v0.11.0
0.44.0
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
golang.org/x/sys@v0.15.0
0.44.0
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
golang.org/x/sys@v0.13.0
0.44.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/sys@v0.41.0
0.44.0
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
golang.org/x/sys@v0.28.0
0.44.0
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
golang.org/x/sys@v0.15.0
0.44.0
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
golang.org/x/sys@v0.18.0
0.44.0
1
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
golang.org/x/sys@v0.39.0
0.44.0
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
golang.org/x/sys@v0.29.0
0.44.0
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
golang.org/x/sys@v0.43.0
0.44.0
1
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
golang.org/x/sys@v0.22.0
0.44.0
1
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
golang.org/x/sys@v0.28.0
0.44.0
1
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/sys@v0.22.0
0.44.0
1
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
golang.org/x/sys@v0.39.0
0.44.0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
golang.org/x/sys@v0.37.0
0.44.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
golang.org/x/sys@v0.35.0
0.44.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.