CVE-2026-39836
UnscoredAdvisory
Published 7 May 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.006
- 47th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,921
- of 17,803 indexed, latest versions
- Container images
- 4,511
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Panic in Dial and LookupPort when handling NUL byte on Windows in net
Carried by container images the latest versions of 3,921 of 17,803 indexed charts deploy, on 4,511 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+179 more | 1.25.10 | 4,511 |
- OSV records
- GO-2026-4971
- Also known as
- BIT-golang-2026-39836
Charts affected
3,921 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| free5gc-chffree5gc-chfVerified publisher | 0.1.3 | 1 of 1See more | 1,004 |
| free5gc-nrffree5gc-nrfVerified publisher | 0.1.3 | 1 of 1See more | 919 |
| free5gc-nssffree5gc-nssfVerified publisher | 0.1.3 | 1 of 1See more | 911 |
| free5gc-pcffree5gc-pcfVerified publisher | 0.1.3 | 1 of 1See more | 903 |
| free5gc-smffree5gc-smfVerified publisher | 0.1.3 | 1 of 1See more | 918 |
| free5gc-udmfree5gc-udmVerified publisher | 0.1.3 | 1 of 1See more | 911 |
| free5gc-udrfree5gc-udrVerified publisher | 0.1.3 | 1 of 1See more | 919 |
| free5gc-upffree5gc-upfVerified publisher | 0.1.3 | 1 of 1See more | 1,075 |
| free5gc-webuifree5gc-webuiVerified publisher | 0.1.3 | 1 of 1See more | 1,256 |
| powerdnsfsdrw08 | 0.1.3 | 1 of 4See more | 1,959 |
| aptlyg0dscookie | 0.4.0 | 1 of 2See more | 3,482 |
| icinga2g0dscookie | 0.2.0 | 1 of 1See more | 4,429 |
| passboltg0dscookie | 0.5.2 | 2 of 2See more | 7,994 |
| borgmaticgabe565Verified publisher | 0.10.1 | 1 of 1See more | 2,438 |
| castsponsorskipgabe565Verified publisher | 0.8.1 | 1 of 1See more | 1,237 |
| generic-device-plugingabe565Verified publisher | 0.1.3 | 1 of 1See more | 260 |
| gotifygabe565Verified publisher | 0.4.0 | 1 of 1See more | 763 |
| hammondgabe565Verified publisher | 0.6.4 | 1 of 1See more | 1,807 |
| limogabe565Verified publisher | 0.8.0 | 1 of 1See more | 1,330 |
| matrimonygabe565Verified publisher | 0.7.0 | 1 of 1See more | 1,136 |
| podgrabgabe565Verified publisher | 0.5.2 | 1 of 1See more | 2,401 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,281 |
| smarter-device-managergabe565Verified publisher | 0.5.2 | 1 of 1See more | 1,226 |
| transsmutegabe565Verified publisher | 1.1.0 | 1 of 1See more | 801 |
| guacamolegabibbo97 | 0.3.0 | 1 of 3See more | 6,455 |
| galoygaloymoney | 0.34.7 | 4 of 24See more | 8,700 |
| galoy-depsgaloymoney | 0.10.20 | 8 of 9See more | 11,982 |
| lndgaloymoney | 0.10.6 | 1 of 3See more | 2,161 |
| monitoringgaloymoney | 0.12.21 | 5 of 6See more | 5,316 |
| galoygaloymoney2 | 0.34.7 | 4 of 24See more | 8,700 |
| galoy-depsgaloymoney2 | 0.10.20 | 8 of 9See more | 11,982 |
| lndgaloymoney2 | 0.10.6 | 1 of 3See more | 2,161 |
| monitoringgaloymoney2 | 0.12.21 | 5 of 6See more | 5,316 |
| gameserver-operatorgameserver-operator | 0.3.0 | 1 of 1See more | 376 |
| pagesgary-pages | 1.0.0 | 1 of 3See more | 20,262 |
| alertmanager-discordgeek-cookbookVerified publisher | 1.3.2 | 1 of 1See more | 1,045 |
| anonaddygeek-cookbookVerified publisher | 6.0.0 | 1 of 1See more | 4,790 |
| apache-musicindexgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 14,716 |
| autobrrgeek-cookbookVerified publisher | 1.1.3 | 1 of 1See more | 2,236 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 16,221 |
| dendritegeek-cookbookVerified publisher | 6.4.0 | 1 of 1See more | 2,144 |
| duplicatigeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 1,793 |
| embygeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 8,597 |
| gatusgeek-cookbookVerified publisher | 1.1.2 | 1 of 1See more | 1,881 |
| gonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 3,525 |
| gotifygeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 3,132 |
| haste-servergeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 11,060 |
| jackettgeek-cookbookVerified publisher | 11.7.2 | 1 of 1See more | 9,749 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,320 |
| maddygeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 2,630 |
Container images carrying it
4,511 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| falcosecurity/ | 8a99fcc57a57 | stdlib | 1.25.10 | 1 |
| falcosecurity/ | 1976da721518 | stdlib | 1.25.10 | 1 |
| falcosecurity/ | 828ee36cb13a | stdlib | 1.25.10 | 1 |
| fatliverfreddy/ | e79f24ca7371 | stdlib | 1.25.10 | 1 |
| featureformcom/ | 82396f8fb5e8 | stdlib | 1.25.10 | 1 |
| federid/ | fbfb7c6510a7 | stdlib | 1.25.10 | 1 |
| feiyu563/ | 224cfa68cbd9 | stdlib | 1.25.10 | 1 |
| felipecs8/ | f945423be36d | stdlib | 1.25.10 | 1 |
| filebrowser/ | 4fcd47af573c | stdlib | 1.25.10 | 1 |
| filebrowser/ | c5d0a75a0041 | stdlib | 1.25.10 | 1 |
| fission/ | 3fcfd8a0fa5d | stdlib | 1.25.10 | 1 |
| fission/ | fa0f24cdb9cd | stdlib | 1.25.10 | 1 |
| fission/ | 04c6e06af175 | stdlib | 1.25.10 | 1 |
| flanksource/ | 1dacc3195bf9 | stdlib | 1.25.10 | 1 |
| flanksource/ | 689687a7cf95 | stdlib | 1.25.10 | 1 |
| flanksource/ | 764c84e550db | stdlib | 1.25.10 | 1 |
| flanksource/ | 891f21df54fb | stdlib | 1.25.10 | 1 |
| flanksource/ | bd3294c20a60 | stdlib | 1.25.10 | 1 |
| flashbots/ | 7c486b5789da | stdlib | 1.25.10 | 1 |
| flashcatcloud/ | 421acb36181b | stdlib | 1.25.10 | 1 |
| fleetdm/ | 12e644b7f40e | stdlib | 1.25.10 | 1 |
| flomesh/ | cc39c96711c4 | stdlib | 1.25.10 | 1 |
| flomesh/ | 22f849c70b25 | stdlib | 1.25.10 | 1 |
| flomesh/ | b188e128cbfe | stdlib | 1.25.10 | 1 |
| flomesh/ | add7a4da4622 | stdlib | 1.25.10 | 1 |
| flomesh/ | 47287e3ad324 | stdlib | 1.25.10 | 1 |
| flomesh/ | bd224d55ed0f | stdlib | 1.25.10 | 1 |
| fluxcd/ | 704d55295355 | stdlib | 1.25.10 | 1 |
| fluxcd/ | 92b891e495d8 | stdlib | 1.25.10 | 1 |
| fluxcd/ | 31a8c79a6803 | stdlib | 1.25.10 | 1 |
| fluxninja/ | 356d7aa86632 | stdlib | 1.25.10 | 1 |
| fonoster/ | d08a8a574a50 | stdlib | 1.25.10 | 1 |
| foomo/ | e436da524785 | stdlib | 1.25.10 | 1 |
| forchaladtest/ | 70827eaecad1 | stdlib | 1.25.10 | 1 |
| fortio/ | fc8221136fe2 | stdlib | 1.25.10 | 1 |
| fosrl/ | ccd2b0e9a049 | stdlib | 1.25.10 | 1 |
| foundationdb/ | 7d7b6985291e | stdlib | 1.25.10 | 1 |
| foxcpp/ | 6ab538e2f28b | stdlib | 1.25.10 | 1 |
| foxcpp/ | 8fa2bd8f6830 | stdlib | 1.25.10 | 1 |
| foxcpp/ | a4b839985b9b | stdlib | 1.25.10 | 1 |
| foxcpp/ | eeb5813fc4d1 | stdlib | 1.25.10 | 1 |
| gabekangas/ | 97461aedb580 | stdlib | 1.25.10 | 1 |
| galaxy/ | e5c265fe9fcd | stdlib | 1.25.10 | 1 |
| galaxy/ | e50a890e24c9 | stdlib | 1.25.10 | 1 |
| galexrt/ | 5373078a3a08 | stdlib | 1.25.10 | 1 |
| garethgeorge/ | b85297975428 | stdlib | 1.25.10 | 1 |
| garugaru/ | 5201314c28f3 | stdlib | 1.25.10 | 1 |
| garugaru/ | 89d66d117029 | stdlib | 1.25.10 | 1 |
| gboxproxy/ | 3a9f4a711d5c | stdlib | 1.25.10 | 1 |
| gdxbsv/ | 675693335054 | stdlib | 1.25.10 | 1 |