StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,843
of 17,805 indexed, latest versions
Container images
4,392
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,843 of 17,805 indexed charts deploy, on 4,392 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more0.44.04,392
OSV records
GO-2026-5024

Charts affected

3,843 by stars
ChartLatestAffected imagesRadar Score
concourseconcourseVerified publisher20.3.02 of 2See more

concourse concourse 20.3.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
concourse/concourse:8.3.040a143ce5873
golang.org/x/sys@v0.35.0
0.44.0
library/postgres:1767f41722b7a8
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

2,090
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
golang.org/x/sys@v0.0.0-20210611083646-a4fc73990273
0.44.0

Open the chart page →

4,188
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
golang.org/x/sys@v0.29.1-0.20250107080300-1c14dcadc3ab
0.44.0

Open the chart page →

2,020
oncallgrafana1.16.57 of 12See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
golang.org/x/sys@v0.21.0
0.44.0
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0

Open the chart page →

16,467
k8sgpt-operatork8sgptOfficialVerified publisher0.2.292 of 2See more

k8sgpt-operator k8sgpt 0.2.29

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
golang.org/x/sys@v0.43.0
0.44.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

988
openbaoopenbaoVerified publisher0.29.51 of 2See more

openbao openbao 0.29.5

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

1,521
openprojectopenproject-helm-chartsOfficialVerified publisher13.12.01 of 5See more

openproject openproject-helm-charts 13.12.0

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

20,281
kratosory0.64.01 of 1See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
oryd/kratos:v26.2.02a13bb8d362c
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

883
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
0.44.0

Open the chart page →

11,570
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

1,573
zabbixcetic3.1.33 of 5See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
golang.org/x/sys@v0.1.0
0.44.0
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
golang.org/x/sys@v0.0.0-20220310020820-b874c991c1a5
0.44.0
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
golang.org/x/sys@v0.0.0-20220310020820-b874c991c1a5
0.44.0

Open the chart page →

34,110
chatwootchatwootVerified publisher2.0.242 of 3See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

9,369
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

3,022
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

4,959
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
golang.org/x/sys@v0.36.0
0.44.0

Open the chart page →

2,406
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

1,481
prometheus-snmp-exporterprometheus-communityOfficialVerified publisher9.18.01 of 1See more

prometheus-snmp-exporter prometheus-community 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

509
hostpath-provisionerrimusz0.2.131 of 1See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/rimusz/hostpath-provisioner:v0.2.587f0398ec7ff
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0

Open the chart page →

2,040
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

12,946
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

3,065
netbirdjaconiVerified publisher0.15.13 of 4See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
golang.org/x/sys@v0.32.0
0.44.0
netbirdio/relay:0.45.1872e3add0e1e
golang.org/x/sys@v0.32.0
0.44.0
netbirdio/signal:0.45.146ce5a45538f
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

8,673
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

726
kube-starrockskube-starrocksOfficialVerified publisher1.11.71 of 1See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
starrocks/operator:v1.11.78c20435a7579
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

556
linkerd-jaegerlinkerd2Verified publisher30.12.112 of 4See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
otel/opentelemetry-collector:0.59.0ee9da0b08d83
golang.org/x/sys@v0.0.0-20220808155132-1c4a2a72c664
0.44.0

Open the chart page →

4,423
argocdnicklasfrahm-argocdVerified publisher0.3.02 of 2See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/redis:7.2.8-alpinec88ea2979a49
golang.org/x/sys@v0.13.0
0.44.0
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

5,494
oneuptimeoneuptimeOfficialVerified publisher13.0.71 of 7See more

oneuptime oneuptime 13.0.7

1 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

11,765
open-feature-operatoropen-feature-operatorOfficialVerified publisher0.9.31 of 1See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

142
karmawiremindVerified publisher2.13.11 of 1See more

karma wiremind 2.13.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/prymitive/karma:v0.13190a10c5c6793
golang.org/x/sys@v0.43.0
0.44.0

Open the chart page →

119
amd-gpuamd-gpu-helmOfficialVerified publisher0.22.01 of 1See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
rocm/k8s-device-plugin:1.31.0.926212c665aab
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

1,177
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
0.44.0

Open the chart page →

6,856
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0

Open the chart page →

5,215
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

1,775
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
golang.org/x/sys@v0.12.0
0.44.0
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
golang.org/x/sys@v0.12.0
0.44.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
golang.org/x/sys@v0.12.0
0.44.0

Open the chart page →

12,206
kube-prometheus-stackkube-prometheus-stack-oci91.4.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

682
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

5,422
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

1,363
plane-cemakeplaneOfficialVerified publisher1.8.13 of 11See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
golang.org/x/sys@v0.13.0
0.44.0
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
golang.org/x/sys@v0.34.0
0.44.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

5,004
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
golang.org/x/sys@v0.31.0
0.44.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

11,162
mssqlmssqlVerified publisher1.10.31 of 1See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
golang.org/x/sys@v0.25.0
0.44.0

Open the chart page →

643
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0

Open the chart page →

4,458
spirespiffeVerified publisher0.30.23 of 10See more

spire spiffe 0.30.2

3 of the 10 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
golang.org/x/sys@v0.38.0
0.44.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

1,688
ansible-semaphorecloudhippieVerified publisher15.2.111 of 1See more

ansible-semaphore cloudhippie 15.2.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
golang.org/x/sys@v0.30.0
0.44.0

Open the chart page →

1,430
vertical-pod-autoscalercluster-autoscaler0.12.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

1,062
codefreshcodefresh-onpremOfficialVerified publisher2.12.155 of 42See more

codefresh codefresh-onprem 2.12.15

5 of the 42 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
golang.org/x/sys@v0.35.0
0.44.0
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
golang.org/x/sys@v0.21.0
0.44.0
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
golang.org/x/sys@v0.35.0
0.44.0
quay.io/codefresh/dind:3.0.250885ab519dac
golang.org/x/sys@v0.38.0
0.44.0
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

15,541
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/sys@v0.35.0
0.44.0
couchbase/operator:2.9.369a385b49e1f
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

754
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
golang.org/x/sys@v0.3.0
0.44.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
golang.org/x/sys@v0.3.0
0.44.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
golang.org/x/sys@v0.3.0
0.44.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
golang.org/x/sys@v0.3.0
0.44.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
golang.org/x/sys@v0.5.0
0.44.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

6,527
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
grafana/loki:2.6.11ee60f980950
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
0.44.0

Open the chart page →

6,486
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

273
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
golang.org/x/sys@v0.0.0-20210603125802-9665404d3644
0.44.0

Open the chart page →

3,772
questdbquestdb1.0.271 of 2See more

questdb questdb 1.0.27

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

153

Container images carrying it

4,392 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
golang.org/x/sys@v0.28.0
0.44.0
1
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
golang.org/x/sys@v0.31.0
0.44.0
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
golang.org/x/sys@v0.42.0
0.44.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
golang.org/x/sys@v0.13.0
0.44.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
golang.org/x/sys@v0.37.0
0.44.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
golang.org/x/sys@v0.13.0
0.44.0
1
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
golang.org/x/sys@v0.0.0-20220319134239-a9b59b0215f8
0.44.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
golang.org/x/sys@v0.31.0
0.44.0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
golang.org/x/sys@v0.0.0-20220520151302-bc2c85ada10a
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
golang.org/x/sys@v0.4.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
golang.org/x/sys@v0.35.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
golang.org/x/sys@v0.35.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
golang.org/x/sys@v0.17.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
golang.org/x/sys@v0.8.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
golang.org/x/sys@v0.6.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
golang.org/x/sys@v0.26.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
golang.org/x/sys@v0.19.0
0.44.0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
golang.org/x/sys@v0.28.0
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.2050a34002d5b
golang.org/x/sys@v0.35.0
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.33d671cf20a35
golang.org/x/sys@v0.36.0
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.044d1d0e9f19c
golang.org/x/sys@v0.17.0
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0549e71a6ca24
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0aaafd456bda1
golang.org/x/sys@v0.28.0
0.44.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.1e63459ec5965
golang.org/x/sys@v0.34.0
0.44.0
1
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
golang.org/x/sys@v0.5.0
0.44.0
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
golang.org/x/sys@v0.17.0
0.44.0
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
registry.k8s.io/kubectl:1.33.4261a9ed843eb
golang.org/x/sys@v0.31.0
0.44.0
1
registry.k8s.io/kubectl:v1.32.73c5268158974
golang.org/x/sys@v0.26.0
0.44.0
1
registry.k8s.io/kubectl:v1.35.64d8c68e8c2bf
golang.org/x/sys@v0.38.0
0.44.0
1
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
golang.org/x/sys@v0.31.0
0.44.0
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
golang.org/x/sys@v0.26.0
0.44.0
1
registry.k8s.io/kubectl:v1.36.2b0d792e0d8df
golang.org/x/sys@v0.40.0
0.44.0
1
registry.k8s.io/kubectl:v1.36.1d08f476d04d0
golang.org/x/sys@v0.40.0
0.44.0
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
golang.org/x/sys@v0.21.0
0.44.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
golang.org/x/sys@v0.13.0
0.44.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
golang.org/x/sys@v0.15.0
0.44.0
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
golang.org/x/sys@v0.18.0
0.44.0
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f
0.44.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.05658d0011a41
golang.org/x/sys@v0.3.0
0.44.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.2ec5732e28f15
golang.org/x/sys@v0.5.0
0.44.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
golang.org/x/sys@v0.16.0
0.44.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/sys@v0.16.0
0.44.0
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
golang.org/x/sys@v0.20.0
0.44.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.