StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,878
of 17,821 indexed, latest versions
Container images
4,449
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,878 of 17,821 indexed charts deploy, on 4,449 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+273 more0.44.04,449
OSV records
GO-2026-5024

Charts affected

3,878 by stars
ChartLatestAffected imagesRadar Score
kuberecordkuberecordVerified publisher0.4.01 of 1See more

kuberecord kuberecord 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kuberecord/kuberecord:v0.4.02a19792ad2ec
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

190
kubereportkubereport1.1.01 of 1See more

kubereport kubereport 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesuite/kubereport:latest0262424ee702
golang.org/x/sys@v0.25.0
0.44.0

Open the chart page →

1,121
adguard-homekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

adguard-home kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.767157eb1dc3b2
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

726
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

1,399
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

4,396
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.22 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
library/mysql:885b9bf2e29cf
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

2,772
navidromekubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

navidrome kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
deluan/navidrome:0.61.29fa40b3d8dec
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

901
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

1,532
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,513
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.22 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/influxdb:2.8af89d51080c9
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

5,394
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

1,476
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

2,597
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

6,432
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

3,632
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

1,205
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

4,611
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
golang.org/x/sys@v0.22.0
0.44.0

Open the chart page →

855
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

739
kubernetesweeklykubernetesweekly2.1.01 of 1See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
golang.org/x/sys@v0.0.0-20220330033206-e17cdc41300f
0.44.0

Open the chart page →

1,490
kube-secrets-exporterkube-secrets-exporter0.1.01 of 1See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter:latesta9043737cb73
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

544
api-serverkubeshop0.11.162 of 2See more

api-server kubeshop 0.11.16

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
0.44.0
minio/minio:latest14cea493d9a3
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

3,551
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
golang.org/x/sys@v0.0.0-20220913175220-63ea55921009
0.44.0

Open the chart page →

1,624
kusk-gateway-apikubeshop0.1.282 of 2See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
golang.org/x/sys@v0.0.0-20220913175220-63ea55921009
0.44.0
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
golang.org/x/sys@v0.0.0-20220913175220-63ea55921009
0.44.0

Open the chart page →

2,311
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

1,671
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

1,431
testkube-operatorkubeshop2.1.1542 of 3See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/kube-webhook-certgen:0.0.7866827c379ae
golang.org/x/sys@v0.30.0
0.44.0
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

1,019
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

1,570
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

910
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
0.44.0

Open the chart page →

2,528
apisix-ingress-controllerkubesphereVerified publisher0.8.01 of 2See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:1.3.0412f92cde0b3
golang.org/x/sys@v0.0.0-20210819072135-bce67f096156
0.44.0

Open the chart page →

2,411
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

2,903
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/sys@v0.0.0-20200223170610-d5e6a3e2c0ae
0.44.0
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/sys@v0.0.0-20200113162924-86b910548bc1
0.44.0
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/sys@v0.0.0-20200113162924-86b910548bc1
0.44.0
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
0.44.0

Open the chart page →

37,690
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
goharbor/harbor-core:v2.5.386bf3031f4a7
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/sys@v0.0.0-20200212091648-12a6c2dcc1e4
0.44.0
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/sys@v0.0.0-20200212091648-12a6c2dcc1e4
0.44.0
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
golang.org/x/sys@v0.0.0-20220517195934-5e4e11fc645e
0.44.0

Open the chart page →

17,858
pvc-autoresizerkubesphereVerified publisher0.1.01 of 1See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0

Open the chart page →

1,564
storageclass-accessorkubesphereVerified publisher0.1.01 of 1See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0

Open the chart page →

1,511
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
golang.org/x/sys@v0.0.0-20211209171907-798191bca915
0.44.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0

Open the chart page →

8,586
cni-hostnickubesphere-stable0.1.01 of 1See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0

Open the chart page →

2,445
cranekubesphere-stable0.5.23 of 3See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
gocrane/crane-scheduler-controller:0.1.23a2d7e60576f9
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
gocrane/craned:v0.5.1a1400909118c
golang.org/x/sys@v0.0.0-20211205182925-97ca703d548d
0.44.0

Open the chart page →

8,907
csi-qingcloudkubesphere-stable1.4.06 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44
0.44.0
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/sys@v0.0.0-20190801041406-cbf593c0f2f3
0.44.0
csiplugin/csi-resizer:v1.2.036c31f7e1f43
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/sys@v0.0.0-20201214095126-aec9a390925b
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0

Open the chart page →

12,450
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/sys@v0.0.0-20180302081741-dd2ff4accc09
0.44.0

Open the chart page →

2,832
deepflowkubesphere-stable6.2.6065 of 8See more

deepflow kubesphere-stable 6.2.606

5 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
golang.org/x/sys@v0.5.0
0.44.0
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
golang.org/x/sys@v0.6.0
0.44.0
deepflowce/mysql:8.0.313d7ae561cf60
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0
grafana/grafana:9.5.239c849cebccc
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

18,503
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

1,329
edgemeshkubesphere-stable0.1.02 of 2See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
golang.org/x/sys@v0.8.0
0.44.0
kubeedge/edgemesh-server:latesta437cf5ec0ae
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0

Open the chart page →

4,136
fpga-operatorkubesphere-stable2.7.43 of 7See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
golang.org/x/sys@v0.15.0
0.44.0
inaccel/mkrt:latest187fd448b6f2
golang.org/x/sys@v0.8.0
0.44.0
inaccel/reef:latestc967218739f3
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

5,785
iomeshkubesphere-stable1.1.023 of 25See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
iomesh/csi-driver:v2.7.25d3f9bf9240b
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
0.44.0
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
iomesh/csi-snapshotter:v6.2.2becc53e25b96
golang.org/x/sys@v0.6.0
0.44.0
iomesh/deck:v0.1.0a31e26b6ae22
golang.org/x/sys@v0.15.0
0.44.0
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
golang.org/x/sys@v0.15.0
0.44.0
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
iomesh/livenessprobe:v2.8.0560f01510f99
golang.org/x/sys@v0.0.0-20220731174439-a90be440212d
0.44.0
iomesh/localpv-manager:v0.2.0f13deacac3f4
golang.org/x/sys@v0.3.0
0.44.0
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/operator:v1.1.060081c9b2f52
golang.org/x/sys@v0.13.0
0.44.0
iomesh/post-delete-hook:v1.1.0eea5651f3270
golang.org/x/sys@v0.13.0
0.44.0
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
golang.org/x/sys@v0.6.0
0.44.0
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
golang.org/x/sys@v0.5.0
0.44.0
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/sys@v0.7.0
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

49,073
IOMeshkubesphere-stable1.2.023 of 25See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
iomesh/csi-driver:v2.8.01a151f602451
golang.org/x/sys@v0.6.0
0.44.0
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
iomesh/csi-snapshotter:v6.2.2becc53e25b96
golang.org/x/sys@v0.6.0
0.44.0
iomesh/deck:v0.2.0282d6c419ed3
golang.org/x/sys@v0.15.0
0.44.0
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
golang.org/x/sys@v0.15.0
0.44.0
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
iomesh/livenessprobe:v2.8.0560f01510f99
golang.org/x/sys@v0.0.0-20220731174439-a90be440212d
0.44.0
iomesh/localpv-manager:v0.2.0f13deacac3f4
golang.org/x/sys@v0.3.0
0.44.0
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
iomesh/operator:v1.2.0ba4dd6be7e59
golang.org/x/sys@v0.13.0
0.44.0
iomesh/post-delete-hook:v1.2.0e3b92f838f4b
golang.org/x/sys@v0.13.0
0.44.0
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
golang.org/x/sys@v0.6.0
0.44.0
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
golang.org/x/sys@v0.5.0
0.44.0
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/sys@v0.7.0
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
golang.org/x/sys@v0.6.0
0.44.0
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

46,763
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
0.44.0
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/sys@v0.0.0-20201022201747-fb209a7c41cd
0.44.0

Open the chart page →

91,532
aws-fsx-csi-driverkubesphere-testVerified publisher0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0

Open the chart page →

1,595
cni-hostnickubesphere-testVerified publisher0.1.01 of 1See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0

Open the chart page →

2,445
csi-neonsankubesphere-testVerified publisher1.3.06 of 6See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44
0.44.0
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/sys@v0.0.0-20191113165036-4c7a9d0fe056
0.44.0
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0
csiplugin/csi-resizer:v1.2.036c31f7e1f43
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/sys@v0.0.0-20201214095126-aec9a390925b
0.44.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
0.44.0

Open the chart page →

18,554

Container images carrying it

4,449 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
golang.org/x/sys@v0.7.0
0.44.0
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
golang.org/x/sys@v0.22.0
0.44.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
golang.org/x/sys@v0.10.0
0.44.0
1
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
golang.org/x/sys@v0.16.0
0.44.0
1
ghcr.io/vvanouytsel/jetspotter:1.48.1ec0e17a94f61
golang.org/x/sys@v0.32.0
0.44.0
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
golang.org/x/sys@v0.31.0
0.44.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
golang.org/x/sys@v0.38.0
0.44.0
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
golang.org/x/sys@v0.33.0
0.44.0
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
golang.org/x/sys@v0.33.0
0.44.0
1
ghcr.io/wiremind/druid-tasks-exporter:v0.4.04755c3fcd5f0
golang.org/x/sys@v0.17.0
0.44.0
1
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
golang.org/x/sys@v0.35.0
0.44.0
1
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
golang.org/x/sys@v0.21.0
0.44.0
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
golang.org/x/sys@v0.2.0
0.44.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
golang.org/x/sys@v0.11.0
0.44.0
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
golang.org/x/sys@v0.29.0
0.44.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
golang.org/x/sys@v0.21.0
0.44.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
golang.org/x/sys@v0.33.0
0.44.0
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
1
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
golang.org/x/sys@v0.11.0
0.44.0
1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager:0.2.11d078e45bac70
golang.org/x/sys@v0.40.0
0.44.0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
golang.org/x/sys@v0.28.0
0.44.0
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/sys@v0.20.0
0.44.0
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
1
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
golang.org/x/sys@v0.30.0
0.44.0
1
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
golang.org/x/sys@v0.42.0
0.44.0
1
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/sys@v0.28.0
0.44.0
1
ghcr.io/zufardhiyaulhaq/frp-operator:v0.11.0cd25ee354df2
golang.org/x/sys@v0.18.0
0.44.0
1
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
golang.org/x/sys@v0.16.0
0.44.0
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
golang.org/x/sys@v0.0.0-20220906165534-d0df966e6959
0.44.0
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0
1
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
golang.org/x/sys@v0.25.0
0.44.0
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
golang.org/x/sys@v0.25.0
0.44.0
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
golang.org/x/sys@v0.25.0
0.44.0
1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
golang.org/x/sys@v0.5.0
0.44.0
1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
golang.org/x/sys@v0.5.0
0.44.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/sys@v0.0.0-20191220220014-0732a990476f
0.44.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0
1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.