Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	stdlib@go1.17.9	1.25.10
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.25.10
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	stdlib@go1.20.11	1.25.10

Open the chart page →

13,656

clickstackhdx-oss-v2

1.1.1

1 of 5 See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/mongo :5.0.32-focal	3b6c281e1c08	stdlib@go1.24.0	1.25.10

Open the chart page →

4,750

headscale-uiheadscale-ui

0.2.9

1 of 1 See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	stdlib@go1.25.8	1.25.10

Open the chart page →

1,476

guacamolehelmforge

1.5.2

2 of 5 See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	stdlib@go1.24.6	1.25.10
library/postgres :17.5-bookworm	fbcea1bd13b6	stdlib@go1.18.2	1.25.10

Open the chart page →

8,773

mariadbhelmforge

2.1.1

1 of 1 See more

mariadb helmforge 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.3	dd9b303aed4f	stdlib@go1.24.6	1.25.10

Open the chart page →

1,919

matomohelmforge

2.3.0

1 of 3 See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/mysql :9.7.2	b2cf29815e62	stdlib@go1.24.6	1.25.10

Open the chart page →

2,711

velerohelmforge

1.4.10

1 of 2 See more

velero helmforge 1.4.10

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	stdlib@go1.25.7	1.25.10

Open the chart page →

1,426

uptimekumahelm-l3st86

0.1.10

1 of 1 See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.13	96510915e6be	stdlib@go1.19.6	1.25.10

Open the chart page →

4,196

helm-operatorhelm-operator

0.0.2

1 of 1 See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
bsgrigorov/helm-operator :latest	45ab095f09c8	stdlib@go1.15.12	1.25.10

Open the chart page →

6,977

spirehelm-spire

0.30.2

3 of 10 See more

spire helm-spire 0.30.2

3 of the 10 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	stdlib@go1.24.0	1.25.10
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	stdlib@go1.25.3	1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.25.10

Open the chart page →

1,640

helmuphelmup

0.1.0

1 of 3 See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
sirrend/helmup-engine :0.1.13	699e79e3d4e2	stdlib@go1.20.4	1.25.10

Open the chart page →

16,532

hiverhiver

0.1.45

9 of 10 See more

hiver hiver 0.1.45

9 of the 10 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
hiversh/antigravity :0.1.45-microvm	0e36d98402bc	stdlib@go1.19.8	1.25.10
hiversh/browser :0.1.45-microvm	b5048c6342ce	stdlib@go1.19.8	1.25.10
hiversh/claude :0.1.45-microvm	2fbf9f264498	stdlib@go1.19.8	1.25.10
hiversh/codex :0.1.45-microvm	4f43130f51e5	stdlib@go1.19.8	1.25.10
hiversh/controller :0.1.45	b0b85f8942c7	stdlib@go1.19.8	1.25.10
hiversh/copilot :0.1.45-microvm	50c07b84f298	stdlib@go1.19.8	1.25.10
hiversh/node :0.1.45-alpine-microvm	836a37641941	stdlib@go1.19.8	1.25.10
hiversh/openclaw :0.1.45-microvm	958b7ebb4eb4	stdlib@go1.19.8	1.25.10
hiversh/python :0.1.45-3.13-alpine-microvm	63a5ae179a9f	stdlib@go1.19.8	1.25.10

Open the chart page →

21,779

cratedb-adapter-v2hmdmph

0.2.1

1 of 1 See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	stdlib@go1.16.3	1.25.10

Open the chart page →

2,913

openprojecthomeenterpriseinc

0.5.0

1 of 1 See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
openproject/community :12.0.2	734743d11094	stdlib@go1.17	1.25.10

Open the chart page →

6,810

honeycombhoneycomb

1.9.3

1 of 1 See more

honeycomb honeycomb 1.9.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
honeycombio/honeycomb-kubernetes-agent :2.7.4	48c38d0870f2	stdlib@go1.24.3	1.25.10

Open the chart page →

437

hpe-greenlake-file-csi-driverhpe-storage

2.6.4

5 of 7 See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

5 of the 7 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.0	a399393ff5bd	stdlib@go1.23.1	1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.10
registry.k8s.io/sig-storage/csi-resizer :v1.12.0	ab774734705a	stdlib@go1.22.5	1.25.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	stdlib@go1.24.6	1.25.10

Open the chart page →

6,131

htnn-controllerhtnn

0.5.0

1 of 1 See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	stdlib@go1.21.12	1.25.10

Open the chart page →

4,339

demoryhuseyinbabal

0.7.0

1 of 1 See more

demory huseyinbabal 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
huseyinbabal/demory :0.0.0-rc.20	ae8eb4053c60	stdlib@go1.17.2	1.25.10

Open the chart page →

1,573

hybrid-csi-pluginhybrid-csi-plugin

0.1.11

1 of 1 See more

hybrid-csi-plugin hybrid-csi-plugin 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/hybrid-csi-provisioner :v0.3.1	221e07794a8a	stdlib@go1.25.5	1.25.10

Open the chart page →

373

spoolmanideaplexus

2.7.1

1 of 1 See more

spoolman ideaplexus 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.25.10

Open the chart page →

1,786

backendikusi-bk-chart

1.0.3

1 of 3 See more

backend ikusi-bk-chart 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/postgres :15	9b1d34adbce1	stdlib@go1.24.6	1.25.10

Open the chart page →

5,976

ilum-coreilum

6.7.3

2 of 5 See more

ilum-core ilum 6.7.3

2 of the 5 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	stdlib@go1.24.6	1.25.10
ilum/mongodb :6.0.5	42b6d774c37d	stdlib@go1.20.12	1.25.10

Open the chart page →

3,556

ilum-jupyterilum

6.7.3

1 of 2 See more

ilum-jupyter ilum 6.7.3

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
bitnamisecure/gitdigest-pinned	72ae5bd9715f	stdlib@go1.24.6	1.25.10

Open the chart page →

644

odooimio

3.0.2

1 of 3 See more

odoo imio 3.0.2

1 of the 3 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/postgres :17.10	ebba4f4de37f	stdlib@go1.24.6	1.25.10

Open the chart page →

3,081

immichimmich-helm

0.3.0

1 of 4 See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	stdlib@go1.18.2	1.25.10

Open the chart page →

15,749

webhook-broker-chartimytech

0.2.4

1 of 1 See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	stdlib@go1.23.0	1.25.10

Open the chart page →

1,246

inbucketinbucket

2.5.0

1 of 1 See more

inbucket inbucket 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
inbucket/inbucket :3.0.0	1f10a0efea69	stdlib@go1.17.1	1.25.10

Open the chart page →

2,167

telegraf-operatorinfluxdata

1.4.0

1 of 1 See more

telegraf-operator influxdata 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	stdlib@go1.18.10	1.25.10

Open the chart page →

925

valkey-clusterinnago

1.1.0

1 of 2 See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.66.0	d98e6db8094f	stdlib@go1.23.2	1.25.10

Open the chart page →

2,634

supersetinseefrlab

1.4.0

1 of 4 See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.25.10

Open the chart page →

7,130

interlinkinterlink

0.6.1

1 of 2 See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw :latest	0e05a7b49c33	stdlib@go1.24.5	1.25.10

Open the chart page →

2,455

irsa-managerirsa-manager

0.3.2

1 of 1 See more

irsa-manager irsa-manager 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/kkb0318/irsa-manager :0.3.2	96d600ae97b4	stdlib@go1.22.7	1.25.10

Open the chart page →

820

cniistio

1.10.3

1 of 1 See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
istio/install-cni :1.10.3	2232f365aed6	stdlib@go1.16.6	1.25.10

Open the chart page →

10,415

discoveryistio

1.10.3

1 of 1 See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.3	e7e110a421c2	stdlib@go1.16.6	1.25.10

Open the chart page →

10,489

egressistio

1.10.3

1 of 1 See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	stdlib@go1.16.6	1.25.10

Open the chart page →

10,435

ingressistio

1.10.3

1 of 1 See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	stdlib@go1.16.6	1.25.10

Open the chart page →

10,435

operatoristio

1.10.3

1 of 1 See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
istio/operator :1.10.3	655eefa11c84	stdlib@go1.16.6	1.25.10

Open the chart page →

10,716

istio-ratelimitistio-ratelimit

0.0.5

1 of 2 See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :4d2efd61	ede09a75a84c	stdlib@go1.14.15	1.25.10

Open the chart page →

1,812

kubernetes-event-exporteritakurah

0.2.3

1 of 1 See more

kubernetes-event-exporter itakurah 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
ghcr.io/itakurah/kubernetes-event-exporter :v1.7	8abb52b66557	stdlib@go1.20.14	1.25.10

Open the chart page →

1,135

jessejesse-chart

0.0.46

1 of 6 See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
library/postgres :alpine	d3e1620b530c	stdlib@go1.24.6	1.25.10

Open the chart page →

3,423

jetic-operatorjetic-operator

2.0.2

1 of 1 See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
apache/camel-k :1.10.4	3bb13d14f64a	stdlib@go1.17.13	1.25.10

Open the chart page →

9,318

jenkinsjkim

5.5.14

1 of 2 See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	stdlib@go1.21.8	1.25.10

Open the chart page →

7,393

job-manager-dispatcherjob-manager-dispatcher

1.27.0

1 of 1 See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	stdlib@go1.23.12	1.25.10

Open the chart page →

472

job-manager-serverjob-manager-server

1.27.0

1 of 1 See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	stdlib@go1.23.12	1.25.10

Open the chart page →

750

hncjouve

0.8.3

1 of 1 See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	stdlib@go1.20.5	1.25.10

Open the chart page →

1,071

joylive-injectorjoylive

1.3.5

1 of 2 See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector :0.100.0	9e36620d6c2c	stdlib@go1.22.2	1.25.10

Open the chart page →

1,273

todo-appjunktext-direct

1.1.4

1 of 1 See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-39836.

Container image	Digest	Package	Fixed in
junktext/getting-started :1.0.5	a70936c04aed	stdlib@go1.18.7	1.25.10

Open the chart page →

3,369

Container images carrying it

4,537 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
oryd/kratos :v1.3.1	fe2428f103a6	stdlib@go1.23.2	1.25.10	2
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	stdlib@go1.20.5	1.25.10	2
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.25.10	2
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	stdlib@go1.21.7	1.25.10	2
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	stdlib@go1.23.2	1.25.10	2
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.25.10	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.25.10	2
percona/everest-helmtools :0.0.1	904458d04a18	stdlib@go1.24.6	1.25.10	2
pgautoupgrade/pgautoupgrade :18-alpine	48b448825656	stdlib@go1.24.6	1.25.10	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	stdlib@go1.24.6	1.25.10	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.10	2
phntom/kochi :1.1.3	3b82358bd56e	stdlib@go1.15.5	1.25.10	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.25.10	2
polyaxon/polyaxon-operator :2.16.4	2716f552b301	stdlib@go1.24.13	1.25.10	2
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.25.10	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.25.10	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	stdlib@go1.15.2	1.25.10	2
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.10	2
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.25.10	2
prom/prometheus :v2.52.0	5c435642ca4d	stdlib@go1.22.3	1.25.10	2
prom/prometheus :v2.37.9	8176adea328e	stdlib@go1.19.11	1.25.10	2
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.25.10	2
prom/prometheus :v2.21.0	d43417c260e5	stdlib@go1.15.2	1.25.10	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.25.10	2
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.25.10	2
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.10	2
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.25.10	2
qmcgaw/ddns-updater :2.10.0 :v2.10.0	3e2aa558946b	stdlib@go1.26.2	1.25.10	2
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.25.10	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.10	2
rancher/kine :v0.11.4	12889bbcd1e8	stdlib@go1.21.5	1.25.10	2
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	stdlib@go1.26.1	1.25.10	2
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	stdlib@go1.22.5	1.25.10	2
rclone/rclone :1.68	74c51b8817e5	stdlib@go1.23.3	1.25.10	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.10	2
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.25.10	2
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.25.10	2
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.25.10	2
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.25.10	2
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	stdlib@go1.25.8	1.25.10	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	stdlib@go1.15.2	1.25.10	2
sikalabs/hello-world-server :latest	5f49bf889a64	stdlib@go1.26.2	1.25.10	2
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.25.10	2
starrocks/operator :v1.11.7	8c20435a7579	stdlib@go1.22.12	1.25.10	2
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.10	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.25.10	2
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.25.10	2
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.25.10	2
temporalio/server :1.22.4	c0a44c26397b	stdlib@go1.20.11	1.25.10	2
temporalio/ui :2.16.2	af9c9349708f	stdlib@go1.20.5	1.25.10	2