StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,853
of 17,821 indexed, latest versions
Container images
4,415
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,853 of 17,821 indexed charts deploy, on 4,415 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+272 more0.44.04,415
OSV records
GO-2026-5024

Charts affected

3,853 by stars
ChartLatestAffected imagesRadar Score
postgresqlglassflowVerified publisher0.1.91 of 1See more

postgresql glassflow 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

494
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

773
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

2,692
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
golang.org/x/sys@v0.24.0
0.44.0

Open the chart page →

895
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

12,501
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
golang.org/x/sys@v0.36.0
0.44.0
rancher/local-path-provisioner:v0.0.329289da488b07
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/sys@v0.41.0
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
golang.org/x/sys@v0.35.0
0.44.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.33d671cf20a35
golang.org/x/sys@v0.36.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

7,727
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
golang.org/x/sys@v0.22.0
0.44.0

Open the chart page →

2,222
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

651
goldpingergoldpinger1.1.31 of 1See more

goldpinger goldpinger 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.3a8ea8c61ff4c
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

142
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,699
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/sys@v0.5.0
0.44.0
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/sys@v0.5.0
0.44.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

4,437
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0

Open the chart page →

1,827
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/sys@v0.0.0-20210806184541-e5e7981a1069
0.44.0
library/mongo:latest5211c51171f5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

22,729
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/sys@v0.0.0-20210806184541-e5e7981a1069
0.44.0
library/mongo:latest5211c51171f5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

24,514
goweeklygoweekly2.0.01 of 1See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
golang.org/x/sys@v0.0.0-20220702020025-31831981b65f
0.44.0

Open the chart page →

1,230
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
golang.org/x/sys@v0.40.0
0.44.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
golang.org/x/sys@v0.40.0
0.44.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
golang.org/x/sys@v0.40.0
0.44.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

3,460
ingress-nginxgpg-dev4.9.02 of 2See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
golang.org/x/sys@v0.15.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

2,316
jaegergpg-dev3.3.34 of 5See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
golang.org/x/sys@v0.15.0
0.44.0
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
jaegertracing/jaeger-collector:1.53.07f1269222903
golang.org/x/sys@v0.15.0
0.44.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

19,388
kube-prometheus-stackgpg-dev84.0.05 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

5 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/sys@v0.42.0
0.44.0
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
golang.org/x/sys@v0.43.0
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

4,334
kubernetes-dashboardgpg-dev7.5.04 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
golang.org/x/sys@v0.20.0
0.44.0
kubernetesui/dashboard-auth:1.1.307135c09e9ff
golang.org/x/sys@v0.18.0
0.44.0
kubernetesui/dashboard-metrics-scraper:1.1.17747d363c9fe
golang.org/x/sys@v0.17.0
0.44.0
kubernetesui/dashboard-web:1.4.04445b31a2c25
golang.org/x/sys@v0.20.0
0.44.0

Open the chart page →

6,104
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

1,085
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
golang.org/x/sys@v0.25.0
0.44.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/sys@v0.15.0
0.44.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/sys@v0.27.0
0.44.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/sys@v0.22.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
golang.org/x/sys@v0.20.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
golang.org/x/sys@v0.20.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
golang.org/x/sys@v0.15.0
0.44.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

50,054
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
golang.org/x/sys@v0.37.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

3,309
prometheus-operator-admission-webhookgpg-dev0.18.12 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
golang.org/x/sys@v0.28.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,686
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

602
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

1,309
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

1,582
grafana-cloud-onboardinggrafana0.4.75 of 5See more

grafana-cloud-onboarding grafana 0.4.7

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
golang.org/x/sys@v0.39.0
0.44.0
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
golang.org/x/sys@v0.40.0
0.44.0
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

4,738
grafana-samplinggrafana1.1.72 of 2See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/sys@v0.35.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

3,412
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
0.44.0
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
0.44.0

Open the chart page →

17,811
pyroscope-monitoringgrafana0.1.15 of 6See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

8,492
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
golang.org/x/sys@v0.0.0-20201204225414-ed752295db88
0.44.0

Open the chart page →

670
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/sys@v0.16.0
0.44.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/sys@v0.19.0
0.44.0
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/sys@v0.23.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

5,323
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,521
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

83,510
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mongo:85d7043a4ffe0
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

5,411
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

1,399
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
golang.org/x/sys@v0.0.0-20210331175145-43e1dd70ce54
0.44.0

Open the chart page →

14,302
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
golang.org/x/sys@v0.24.0
0.44.0

Open the chart page →

2,608
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
0.44.0

Open the chart page →

2,183
routergroundcover1.12.3783See more

router groundcover 1.12.378

3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
golang.org/x/sys@v0.42.0
0.44.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
golang.org/x/sys@v0.38.0
0.44.0
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

—
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

463
tailscale-subnet-routergtaylor1.2.11 of 1See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,835
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

1,258
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

338
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/sys@v0.0.0-20190624142023-c5567b49c5d0
0.44.0

Open the chart page →

2,382
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/sys@v0.0.0-20210305230114-8fe3ee5dd75b
0.44.0

Open the chart page →

4,463
thunderdome-planning-pokerhalkeye0.1.11 of 1See more

thunderdome-planning-poker halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

432
hcp-terraform-operatorhashicorpVerified publisher2.12.11 of 2See more

hcp-terraform-operator hashicorp 2.12.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

692
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,739

Container images carrying it

4,415 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/stashed/stash:v0.42.03a98245a7667
golang.org/x/sys@v0.22.0
0.44.0
1
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
golang.org/x/sys@v0.12.0
0.44.0
1
ghcr.io/stashed/stash-crd-installer:v0.42.1d6c9b7a1f7b8
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
golang.org/x/sys@v0.32.0
0.44.0
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
golang.org/x/sys@v0.12.0
0.44.0
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0
1
ghcr.io/stenic/k8status:0.17.093298e03089e
golang.org/x/sys@v0.21.0
0.44.0
1
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
ghcr.io/stenic/well-known:1.11.0ae85f257a10f
golang.org/x/sys@v0.39.0
0.44.0
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
golang.org/x/sys@v0.16.0
0.44.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
golang.org/x/sys@v0.0.0-20220818161305-2296e01440c6
0.44.0
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
golang.org/x/sys@v0.34.0
0.44.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
golang.org/x/sys@v0.32.0
0.44.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
golang.org/x/sys@v0.34.0
0.44.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
golang.org/x/sys@v0.39.0
0.44.0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
golang.org/x/sys@v0.25.0
0.44.0
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
golang.org/x/sys@v0.25.0
0.44.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
golang.org/x/sys@v0.37.0
0.44.0
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
golang.org/x/sys@v0.37.0
0.44.0
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.44.0
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
golang.org/x/sys@v0.24.0
0.44.0
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
golang.org/x/sys@v0.18.0
0.44.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
golang.org/x/sys@v0.38.0
0.44.0
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
golang.org/x/sys@v0.5.0
0.44.0
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
golang.org/x/sys@v0.6.0
0.44.0
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
golang.org/x/sys@v0.8.0
0.44.0
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
golang.org/x/sys@v0.5.0
0.44.0
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
golang.org/x/sys@v0.15.0
0.44.0
1
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
golang.org/x/sys@v0.40.0
0.44.0
1
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
golang.org/x/sys@v0.1.0
0.44.0
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
ghcr.io/tale/headplane:0.6.39476cc5adb12
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
1
ghcr.io/tarampampam/webhook-tester:2.3.085818267b450
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/taskmedia/kubectl-gpg-ncftp:main0fb2b5584f7c
golang.org/x/sys@v0.18.0
0.44.0
1
ghcr.io/techarohq/anubis:v1.21.3940ac71ef6fc
golang.org/x/sys@v0.34.0
0.44.0
1
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
golang.org/x/sys@v0.41.0
0.44.0
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
golang.org/x/sys@v0.33.0
0.44.0
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
golang.org/x/sys@v0.40.0
0.44.0
1
ghcr.io/topolvm/pvc-autoresizer:0.21.1078d3527f38b
golang.org/x/sys@v0.38.0
0.44.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
golang.org/x/sys@v0.40.0
0.44.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.