CVE-2026-39824
UnscoredAdvisory
Published 22 May 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,878
- of 17,821 indexed, latest versions
- Container images
- 4,449
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
Carried by container images the latest versions of 3,878 of 17,821 indexed charts deploy, on 4,449 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+273 more | 0.44.0 | 4,449 |
- OSV records
- GO-2026-5024
Charts affected
3,878 by stars
Container images carrying it
4,449 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 0e58eac0e2f7 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 379e583a0a75 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 6c17297f9098 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 349f7dca95ec | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | c18da04d70f6 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 32234e63c1d0 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | a7ea52f87446 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | b37a442c0497 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 2434560e8f0e | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 165efd4469ea | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 457bb5ada68b | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | e5146a7dd515 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 008b9b662289 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 380eccdc29e9 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 3b6c6220bf9c | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | a3ca4c02a5df | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 26f82b148dfe | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 590e50477b76 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 5e331c925091 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 79b81912f1fb | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 89490ef63b72 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 8936271cf56a | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | b880da90aa1a | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 61344c13f17d | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 787f6de2b620 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | e05a3e701291 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 90bfeb2e0d71 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | bcb7f0f733f5 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 5a10cd095699 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | a281cb44176d | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 3776500fde82 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 6d6794f45f3e | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | adc0eeb4dd05 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 0b97452674a3 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 77a36c035b4b | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 087a80163971 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 1838720c13b2 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 548e962d0061 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | d3e3929a3d2b | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | cdc0658c40fb | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | ba9f5a44ad68 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | f0c6f7d7daa6 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 0fae829caf29 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 45bdeaf3fcd6 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | c3d9d9c98be7 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | de37ff39a4c0 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 97596c95276a | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 00bb31622b1e | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 5f8f97a60558 | golang.org/ | 0.44.0 | 1 |
| ghcr.io/ | 03e125b9279e | golang.org/ | 0.44.0 | 1 |