StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,787 indexed, latest versions
Container images
711
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,787 indexed charts deploy, on 711 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0711
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-demoopentelemetry-helmVerified publisher0.41.12 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

2 of the 34 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.611See more

opik opik 2.2.61

1 container image this version deploys carries CVE-2026-39883.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

—
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-api:0.1.045f2620337af
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

2,278
osc-bsu-csi-driverosc-bsu-csi-driverVerified publisher2.2.02 of 6See more

osc-bsu-csi-driver osc-bsu-csi-driver 2.2.0

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,335
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,883
go-kube-downscalerpy-kube-downscalerVerified publisher1.3.41 of 1See more

go-kube-downscaler py-kube-downscaler 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

220
jobs-managerraczylo-comVerified publisher0.1.151 of 1See more

jobs-manager raczylo-com 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

487
kube-images-syncraczylo-comVerified publisher0.5.571 of 1See more

kube-images-sync raczylo-com 0.5.57

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

401
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

11,869
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,654
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,143
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

38,107
secrethorsecrethor1.1.21 of 1See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bonovoo/secrethor:1.1.2bb93b68fcd17
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

514
wireguardslybase-wireguardVerified publisher2.0.61 of 1See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

436
smallest-self-hostsmallest-self-hostVerified publisher0.2.23 of 12See more

smallest-self-host smallest-self-host 0.2.2

3 of the 12 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

7,685
artifact-hubsoftonic1.19.03 of 8See more

artifact-hub softonic 1.19.0

3 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
artifacthub/hub:v1.19.0111918d8c399
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
artifacthub/scanner:v1.19.0323d026e78c3
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
artifacthub/tracker:v1.19.06596c8c4d955
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,022
stackradar-scannerstackradarVerified publisher0.3.01 of 1See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

1,209
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

4,661
stornxstornxVerified publisher1.1.15 of 9See more

stornx stornx 1.1.1

5 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
quay.io/kiali/kiali:v2.23.07652b1285f50
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

11,574
stunner-gateway-operatorstunner1.1.02 of 2See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.1.02f8114477ba6
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,292
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

18,075
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

839
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

3,165
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,020
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

4,460
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,289
kube-prometheus-stackwenerme91.4.01See more

kube-prometheus-stack wenerme 91.4.0

1 container image this version deploys carries CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

—
cloudflare-zero-trust-operatorzelic-io0.7.11 of 1See more

cloudflare-zero-trust-operator zelic-io 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/bojanzelic/cloudflare-zero-trust-operator:0.7.1f4b2dbc19a78
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

10,323
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

1,828
aerospike-backup-serviceaerospike-helmVerified publisher2.0.131 of 1See more

aerospike-backup-service aerospike-helm 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
aerospike/aerospike-backup-service:3.5.1be40d709c583
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

628
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

12,473
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

13,613
akto-hybrid-redactakto1.44.61See more

akto-hybrid-redact akto 1.44.6

1 container image this version deploys carries CVE-2026-39883.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

—
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

6,397
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

11,285
akto-testing-db-layerakto1.42.171See more

akto-testing-db-layer akto 1.42.17

1 container image this version deploys carries CVE-2026-39883.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

—
wireguardalexpressoVerified publisher0.1.31 of 2See more

wireguard alexpresso 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
linuxserver/wireguard:latestbf03578ef731
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

780
book-serveral-masood-helm-charts0.1.01 of 1See more

book-server al-masood-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
almasood/book-server:latest6ffac9b63cdf
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

480
flux-suspension-exporteralpineworks0.1.11 of 1See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

557
flux-suspensions-exporteralpineworks0.1.01 of 1See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

557
ipalpineworks0.1.21 of 1See more

ip alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

534
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

4,497
katalog-agentalpineworks0.1.21 of 1See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-agent:v1.0.48f50bd568c2b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

575
versitygw-webhook-pulsar-proxyalpineworks0.1.11 of 1See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

893
amorphieamorphie0.1.24 of 18See more

amorphie amorphie 0.1.2

4 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
daprio/injector:1.11.2763b9b70b0c8
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
daprio/operator:1.11.2c584428aa12d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
daprio/placement:1.11.2d8e1446da996
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
daprio/sentry:1.11.21f507c1a181b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

28,131
sliding-sync-proxyananace-chartsVerified publisher0.2.131 of 2See more

sliding-sync-proxy ananace-charts 0.2.13

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,592
cert-manager-webhook-inwxandibraeuVerified publisher0.9.01 of 1See more

cert-manager-webhook-inwx andibraeu 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/andibraeu/cert-manager-webhook-inwx:v0.9.0f015e745983e
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

592

Container images carrying it

711 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/crashappsec/chalk-operator:v0.1.128eee62e9bfa
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.