StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,750
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

247
hcloud-csi-mgmtcloudhippieVerified publisher2.10.01 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

583
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

18,256
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

656
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,036
monitoringcluster-deploy0.3.05 of 11See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

8,185
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
library/docker:27-dindaa3df78ecf32
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

19,380
coder-logstream-kubecoder-logstream-kube0.0.151 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

885
autovpacontainerooVerified publisher0.4.21 of 1See more

autovpa containeroo 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

298
kube-ephemeral-container-exportercontainerooVerified publisher0.2.31 of 1See more

kube-ephemeral-container-exporter containeroo 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

298
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.38 of 34See more

csghub csghub 2.4.3

8 of the 34 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
opencsghq/lws:v0.6.1de15437db41b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

59,131
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

11,402
csi-driver-ipfscsi-driver-ipfs0.2.03 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,630
ipfs-clustercsi-driver-ipfs0.2.01 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ipfs/kubo:v0.41.00661819c2e09
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

1,475
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,306
dapr-agentsdapr-agents-devVerified publisher0.1.513 of 31See more

dapr-agents dapr-agents-dev 0.1.5

13 of the 31 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

22,223
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,096
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,994
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,189
eg-edge-stackdatawire0.0.12 of 7See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ambassador/aes-authsvc:v4.0.0-preview.12a4598b03a6a
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
ambassador/aes-wafsvc:v4.0.0-preview.15fc571509b8c
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

15,781
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

4,353
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,952
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

734
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

3,470
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.23 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

3 of the 17 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

21,455
gatekeeperdoubanVerified publisher3.17.11 of 3See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,492
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,990
temporaldtrdnk-helm-chartsVerified publisher0.35.02 of 13See more

temporal dtrdnk-helm-charts 0.35.0

2 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
temporalio/server:1.22.4c0a44c26397b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

20,204
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,442
bordysnixVerified publisher0.0.81 of 1See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
0xpolygon/bor:1.3.7396d3de26d8b
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

1,365
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

6,678
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,284
eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher0.0.51 of 1See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

558
elastic-agentelasticVerified publisher9.5.31 of 2See more

elastic-agent elastic 9.5.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

753
kube-state-metricselasticVerified publisher6.1.01 of 1See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

753
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,237
kube-ecp-stackemqx-operator2.5.14 of 16See more

kube-ecp-stack emqx-operator 2.5.1

4 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.16.16edf44244b2a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

22,845
mariadb-operator-monitoringenixVerified publisher0.1.01 of 1See more

mariadb-operator-monitoring enix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

731
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

3,946
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

8,648
thanoseosc-lot-1Verified publisher0.2.01 of 1See more

thanos eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

834
thanos-bucketeosc-lot-1Verified publisher0.1.01 of 1See more

thanos-bucket eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

834
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

7,366
erpcethereum-helm-chartsVerified publisher0.0.41 of 1See more

erpc ethereum-helm-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

899
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

1,715

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/borchero/switchboard:0.7.454a193b757da
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.61df70104803cb
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/crashappsec/chalk-operator:v0.1.128eee62e9bfa
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.