CVE-2026-39836
UnscoredAdvisory
Published 7 May 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.006
- 46th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,940
- of 17,790 indexed, latest versions
- Container images
- 4,539
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Panic in Dial and LookupPort when handling NUL byte on Windows in net
Carried by container images the latest versions of 3,940 of 17,790 indexed charts deploy, on 4,539 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+179 more | 1.25.10 | 4,539 |
- OSV records
- GO-2026-4971
- Also known as
- BIT-golang-2026-39836
Charts affected
3,940 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| toxiproxyhelm-charts-nr | 1.3.9 | 1 of 2See more | 598 |
| weblatehelm-charts-nr | 0.3.2 | 1 of 3See more | 7,987 |
| dbapphelmcourseVerified publisher | 0.3.3 | 1 of 2See more | 3,971 |
| mysqlhelmcourseVerified publisher | 0.2.4 | 1 of 1See more | 1,518 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,148 |
| helmfile-gitops-agenthelmfile-gitops-agentVerified publisher | 1.1.96 | 2 of 3See more | 2,613 |
| affinehelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 4,081 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,114 |
| appwritehelmforgeVerified publisher | 2.0.0 | 1 of 5See more | 4,689 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,675 |
| automatischhelmforgeVerified publisher | 1.3.7 | 2 of 4See more | 5,816 |
| booklorehelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 2,329 |
| castopodhelmforgeVerified publisher | 1.2.7 | 2 of 3See more | 9,485 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 7,086 |
| ckanhelmforgeVerified publisher | 1.3.8 | 2 of 6See more | 10,027 |
| countlyhelmforgeVerified publisher | 1.2.6 | 2 of 3See more | 18,938 |
| dawarichhelmforgeVerified publisher | 1.0.1 | 2 of 4See more | 10,442 |
| ddns-updaterhelmforgeVerified publisher | 1.4.12 | 1 of 1See more | 211 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 2 of 3See more | 29,930 |
| druidhelmforgeVerified publisher | 1.3.6 | 2 of 4See more | 8,623 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,884 |
| entehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,254 |
| ghosthelmforgeVerified publisher | 1.2.7 | 2 of 3See more | 2,485 |
| gophishhelmforgeVerified publisher | 0.1.5 | 1 of 1See more | 2,819 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,076 |
| immichhelmforgeVerified publisher | 1.2.8 | 1 of 5See more | 11,122 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,498 |
| komgahelmforgeVerified publisher | 1.4.15 | 1 of 1See more | 2,288 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 3 of 3See more | 2,863 |
| medikeephelmforgeVerified publisher | 2.0.1 | 2 of 3See more | 5,430 |
| memoshelmforgeVerified publisher | 2.0.0 | 1 of 2See more | 799 |
| metabasehelmforgeVerified publisher | 1.2.29 | 1 of 3See more | 1,676 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 2 of 4See more | 9,771 |
| minecrafthelmforgeVerified publisher | 1.5.4 | 1 of 1See more | 4,129 |
| mongodbhelmforgeVerified publisher | 1.8.1 | 1 of 1See more | 965 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,206 |
| mysqlhelmforgeVerified publisher | 2.0.3 | 1 of 1See more | 463 |
| netboxhelmforgeVerified publisher | 2.0.1 | 1 of 4See more | 4,347 |
| nextcloudhelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 7,211 |
| olivetinhelmforgeVerified publisher | 1.2.2 | 1 of 2See more | 273 |
| opencuthelmforgeVerified publisher | 1.1.9 | 1 of 5See more | 3,772 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,560 |
| pimcorehelmforgeVerified publisher | 2.0.1 | 1 of 6See more | 3,212 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 3,071 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 6,068 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,084 |
| supersethelmforgeVerified publisher | 1.3.6 | 2 of 5See more | 5,784 |
| twentyhelmforgeVerified publisher | 1.0.1 | 1 of 5See more | 3,649 |
| uptime-kumahelmforgeVerified publisher | 1.5.13 | 1 of 1See more | 30,326 |
| wallabaghelmforgeVerified publisher | 1.3.6 | 2 of 3See more | 2,784 |
Container images carrying it
4,539 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 7dcddc01f13b | stdlib | 1.25.10 | 89 |
| library/ | 4ef4dbc939d6 | stdlib | 1.25.10 | 69 |
| library/ | 4bc6bc963e6d | stdlib | 1.25.10 | 22 |
| library/ | d3e1620b530c | stdlib | 1.25.10 | 17 |
| library/ | b3b90af2a655 | stdlib | 1.25.10 | 16 |
| library/ | cf78e76683b9 | stdlib | 1.25.10 | 16 |
| minio/ | 14cea493d9a3 | stdlib | 1.25.10 | 16 |
| jimmidyson/ | 904d08e9f701 | stdlib | 1.25.10 | 14 |
| codeurjc/ | 9fb4c11e6a49 | stdlib | 1.25.10 | 13 |
| jenkins/ | c1e4c349365f | stdlib | 1.25.10 | 13 |
| library/ | 18cfe3ef5e68 | stdlib | 1.25.10 | 13 |
| ghcr.io/ | 0b26892cec94 | stdlib | 1.25.10 | 13 |
| grafana/ | f772d434e8fa | stdlib | 1.25.10 | 12 |
| library/ | f1c3376c26f2 | stdlib | 1.25.10 | 12 |
| registry.k8s.io/ | 1545919b72e3 | stdlib | 1.25.10 | 12 |
| library/ | dd9b303aed4f | stdlib | 1.25.10 | 11 |
| library/ | 5211c51171f5 | stdlib | 1.25.10 | 11 |
| library/ | fc77d54cacef | stdlib | 1.25.10 | 11 |
| library/ | fe0737ba566a | stdlib | 1.25.10 | 11 |
| jwilder/ | f94fb59fb4f6 | stdlib | 1.25.10 | 10 |
| library/ | 8e70544b6c76 | stdlib | 1.25.10 | 10 |
| library/ | 67f41722b7a8 | stdlib | 1.25.10 | 10 |
| quay.io/ | 4032c6d5bfd7 | stdlib | 1.25.10 | 9 |
| library/ | e582c0bc7766 | stdlib | 1.25.10 | 8 |
| prom/ | a684e7c830a4 | stdlib | 1.25.10 | 8 |
| quay.io/ | 1dce27c494a1 | stdlib | 1.25.10 | 8 |
| quay.io/ | e13b6ed5cb92 | stdlib | 1.25.10 | 8 |
| quay.io/ | cf66a6bbd573 | stdlib | 1.25.10 | 8 |
| library/ | 156f0b253fd6 | stdlib | 1.25.10 | 7 |
| osixia/ | 18742e9c449c | stdlib | 1.25.10 | 7 |
| wurstmeister/ | 2d4bbf9cc83d | stdlib | 1.25.10 | 7 |
| ghcr.io/ | 76d28575b71c | stdlib | 1.25.10 | 7 |
| ghcr.io/ | aa810a36942c | stdlib | 1.25.10 | 7 |
| quay.io/ | 993e8c454a7e | stdlib | 1.25.10 | 7 |
| quay.io/ | 4ec6df40fdb9 | stdlib | 1.25.10 | 7 |
| registry.k8s.io/ | 11f199f6bec4 | stdlib | 1.25.10 | 7 |
| registry.k8s.io/ | ab482308a492 | stdlib | 1.25.10 | 7 |
| registry.k8s.io/ | 589e525cddef | stdlib | 1.25.10 | 7 |
| registry.k8s.io/ | 5e7cbb63fd49 | stdlib | 1.25.10 | 7 |
| bitnamilegacy/ | 42319decb591 | stdlib | 1.25.10 | 6 |
| bitnamilegacy/ | 25bf63f3caf7 | stdlib | 1.25.10 | 6 |
| clastix/ | 22918a06c253 | stdlib | 1.25.10 | 6 |
| grafana/ | d72946c8e5d5 | stdlib | 1.25.10 | 6 |
| library/ | ce66c7be32a0 | stdlib | 1.25.10 | 6 |
| library/ | 257388edf9c8 | stdlib | 1.25.10 | 6 |
| library/ | 9b1d34adbce1 | stdlib | 1.25.10 | 6 |
| library/ | a02db8cac496 | stdlib | 1.25.10 | 6 |
| library/ | a3d8aaa63ed8 | stdlib | 1.25.10 | 6 |
| minio/ | a7fe349ef4bd | stdlib | 1.25.10 | 6 |
| quay.io/ | c8958d9533c7 | stdlib | 1.25.10 | 6 |