StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,817
of 17,813 indexed, latest versions
Container images
4,367
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,817 of 17,813 indexed charts deploy, on 4,367 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more0.44.04,367
OSV records
GO-2026-5024

Charts affected

3,817 by stars
ChartLatestAffected imagesRadar Score
job-manager-dispatcherjob-manager-dispatcher1.27.01 of 1See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

479
job-manager-serverjob-manager-server1.27.01 of 1See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

757
hncjouveVerified publisher0.8.31 of 1See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

1,078
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

1,290
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0

Open the chart page →

3,381
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3213 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

13 of the 17 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
golang.org/x/sys@v0.41.0
0.44.0
grafana/grafana:12.3.12175aaa91c96
golang.org/x/sys@v0.37.0
0.44.0
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/sys@v0.38.0
0.44.0
grafana/loki-canary:3.6.70dac7d5cb383
golang.org/x/sys@v0.38.0
0.44.0
grafana/tempo:2.9.065a578975943
golang.org/x/sys@v0.35.0
0.44.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/sys@v0.25.0
0.44.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/sys@v0.28.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/sys@v0.31.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
golang.org/x/sys@v0.40.0
0.44.0
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
golang.org/x/sys@v0.40.0
0.44.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/sys@v0.37.0
0.44.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/sys@v0.41.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

15,794
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

5,595
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

5,875
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

5,287
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

521
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

5,324
giteakeyporttech0.2.102 of 4See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
golang.org/x/sys@v0.0.0-20200615200032-f1bc736245b1
0.44.0
library/postgres:115d2aa4a7b5f9
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

5,409
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
golang.org/x/sys@v0.29.0
0.44.0

Open the chart page →

2,979
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mariadb:latestd4fdec0510ad
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

5,005
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
golang.org/x/sys@v0.29.0
0.44.0
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
golang.org/x/sys@v0.27.0
0.44.0

Open the chart page →

12,237
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

398
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

544
kubeadaptkubeadaptVerified publisher1.0.71 of 1See more

kubeadapt kubeadapt 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

214
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
golang.org/x/sys@v0.31.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
golang.org/x/sys@v0.31.0
0.44.0
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
golang.org/x/sys@v0.31.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

2,928
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

20,617
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/sys@v0.15.0
0.44.0
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

4,741
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

4,302
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
0.44.0

Open the chart page →

2,426
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

3,399
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
golang.org/x/sys@v0.3.0
0.44.0
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

6,109
kube-monkeykubemonkey1.6.01 of 1See more

kube-monkey kubemonkey 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.40a5bb6fc3f3f
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

120
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

503
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

10,091
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.96.5dbeff02d2337
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

1,039
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

3,284
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

747
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

4,307
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
golang.org/x/sys@v0.27.0
0.44.0

Open the chart page →

1,076
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

909
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

2,522
mesherykubesphere-stable0.5.012 of 13See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
golang.org/x/sys@v0.32.0
0.44.0
layer5/meshery-app-mesh:stable-latest77d59943b3d6
golang.org/x/sys@v0.2.0
0.44.0
layer5/meshery-consul:stable-latest25a4cc38abcd
golang.org/x/sys@v0.13.0
0.44.0
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
golang.org/x/sys@v0.0.0-20190422165155-953cdadca894
0.44.0
layer5/meshery-istio:stable-latestfde47c141ec6
golang.org/x/sys@v0.30.0
0.44.0
layer5/meshery-kuma:stable-latest9d25f029a8a2
golang.org/x/sys@v0.13.0
0.44.0
layer5/meshery-linkerd:stable-latestb99c73bac1f5
golang.org/x/sys@v0.15.0
0.44.0
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
golang.org/x/sys@v0.7.0
0.44.0
layer5/meshery-nsm:stable-latestebd6a8faf21f
golang.org/x/sys@v0.0.0-20201009025420-dfb3f7c4e634
0.44.0
layer5/meshery-operator:stable-latest6f58a28fe422
golang.org/x/sys@v0.28.0
0.44.0
layer5/meshery-osm:stable-latestec898e5786c6
golang.org/x/sys@v0.4.0
0.44.0
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
golang.org/x/sys@v0.7.0
0.44.0

Open the chart page →

24,962
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
golang.org/x/sys@v0.0.0-20190616124812-15dcb6c0061f
0.44.0

Open the chart page →

2,612
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mysql:885b9bf2e29cf
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

7,776
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
golang.org/x/sys@v0.0.0-20220615213510-4f61da869c0c
0.44.0

Open the chart page →

1,576
kubetailkubetailVerified publisher0.26.03 of 3See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/kubetail-org/kubetail-cluster-api:0.8.28e6acd0da9ac
golang.org/x/sys@v0.42.0
0.44.0
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

1,896
kube-vault-controllerkube-vault-controller1.2.01 of 1See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

1,550
kube-vip-cloud-providerkube-vip0.2.101 of 1See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

806
kubemodkubmod0.5.21 of 2See more

kubemod kubmod 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubemod/kubemod:v0.19.11f8154f7e80c
golang.org/x/sys@v0.3.0
0.44.0

Open the chart page →

4,544
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.15 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
golang.org/x/sys@v0.9.0
0.44.0
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

7,132
kubeservice-cpupools-controllerkubservice-chartsVerified publisher0.1.12 of 2See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
golang.org/x/sys@v0.8.0
0.44.0
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

3,129
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.05 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
golang.org/x/sys@v0.30.0
0.44.0
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

6,126
kubeservice-ebpf-exporterkubservice-chartsVerified publisher1.2.11 of 1See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/cloudflare/ebpf_exporter:v2.3.075370b2ec2bb
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

545
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.25 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
dongjiang1989/ns-node-affinity:latest451f7823723c
golang.org/x/sys@v0.5.0
0.44.0
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/sys@v0.12.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

6,911
kubeservice-scheduler-pluskubservice-chartsVerified publisher0.2.11 of 2See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

1,804
ingress-annotatorkuossOfficialVerified publisher0.3.01 of 1See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kuoss/ingress-annotator:v0.3.0ae179f65d869
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

494

Container images carrying it

4,367 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter:v0.62.1bdba5215a666
golang.org/x/sys@v0.28.0
0.44.0
1
quay.io/prometheus/influxdb-exporter:v0.10.03854d8af7bd4
golang.org/x/sys@v0.0.0-20220708085239-5a0f0661e09d
0.44.0
1
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
golang.org/x/sys@v0.6.0
0.44.0
1
quay.io/prometheus/node-exporter:v1.7.04cb2b9019f17
golang.org/x/sys@v0.13.0
0.44.0
1
quay.io/prometheus/node-exporter:v1.8.08a57af80a4c7
golang.org/x/sys@v0.19.0
0.44.0
1
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
golang.org/x/sys@v0.28.0
0.44.0
1
quay.io/prometheus-operator/admission-webhook:v0.90.1ffe7c4ca80cb
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.63.03f976422884e
golang.org/x/sys@v0.4.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2706cde441321
golang.org/x/sys@v0.18.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
golang.org/x/sys@v0.33.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.69.17bbe804260f3
golang.org/x/sys@v0.13.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.70.0e20576b76ffd
golang.org/x/sys@v0.15.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
golang.org/x/sys@v0.26.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.0e5aab3be6873
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
golang.org/x/sys@v0.35.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
golang.org/x/sys@v0.18.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
golang.org/x/sys@v0.20.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
golang.org/x/sys@v0.35.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.75.1a7cc63108511
golang.org/x/sys@v0.21.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.88.0b4f51de53357
golang.org/x/sys@v0.39.0
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
golang.org/x/sys@v0.2.0
0.44.0
1
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
golang.org/x/sys@v0.26.0
0.44.0
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
golang.org/x/sys@v0.0.0-20220919091848-fb04ddd9f9c8
0.44.0
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
golang.org/x/sys@v0.0.0-20220627191245-f75cf1eec38b
0.44.0
1
quay.io/prometheus/prometheus:v3.2.05888c188cf09
golang.org/x/sys@v0.29.0
0.44.0
1
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
golang.org/x/sys@v0.33.0
0.44.0
1
quay.io/prometheus/prometheus:v3.2.16927e0919a14
golang.org/x/sys@v0.29.0
0.44.0
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
1
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
golang.org/x/sys@v0.32.0
0.44.0
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
0.44.0
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
golang.org/x/sys@v0.21.0
0.44.0
1
quay.io/prometheus/pushgateway:v1.11.103738d278e08
golang.org/x/sys@v0.30.0
0.44.0
1
quay.io/prometheus/pushgateway:v1.6.05111de00e969
golang.org/x/sys@v0.8.0
0.44.0
1
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
golang.org/x/sys@v0.42.0
0.44.0
1
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
golang.org/x/sys@v0.24.0
0.44.0
1
quay.io/prometheus/statsd-exporter:v0.22.8f53cca722a03
golang.org/x/sys@v0.0.0-20220708085239-5a0f0661e09d
0.44.0
1
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
golang.org/x/sys@v0.37.0
0.44.0
1
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
golang.org/x/sys@v0.39.0
0.44.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
1
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.44.0
1
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.44.0
1
quay.io/redhat-developer/servicebinding-operator16286ac84ddd
golang.org/x/sys@v0.13.0
0.44.0
1
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
golang.org/x/sys@v0.24.0
0.44.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
golang.org/x/sys@v0.39.0
0.44.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
0.44.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.