StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,468
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,217
ingressmonitorcontrollerevilgn0me0.0.51 of 1See more

ingressmonitorcontroller evilgn0me 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

204
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,824
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.25 of 18See more

farm-observability farm-observability 0.27.2

5 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/grafana:13.0.1-security-012d1f9ae67c17
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

13,336
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

749
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

5,340
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

8,831
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

5,684
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,474
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,212
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,679
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,679
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

369
glassflow-etlglassflowVerified publisher0.5.213 of 16See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

12,072
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

763
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,605
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

7,662
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,376
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

19,291
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,290
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,071
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

47,117
prometheusgpg-dev29.2.13 of 6See more

prometheus gpg-dev 29.2.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,261
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

1,275
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,553
grafana-cloud-onboardinggrafana0.4.72 of 5See more

grafana-cloud-onboarding grafana 0.4.7

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,657
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,357
pyroscope-monitoringgrafana0.1.13 of 6See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

8,226
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,589
routergroundcover1.12.3592 of 7See more

router groundcover 1.12.359

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

6,038
hcp-terraform-operatorhashicorpVerified publisher2.12.11 of 2See more

hcp-terraform-operator hashicorp 2.12.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

678
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

848
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.03 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

3 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
prom/prometheus:v2.48.1a67e5e402ff5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,461
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,451
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,597
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

7,010
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

9,422
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

29,852
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

5,916
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

25,099
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,025

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/borchero/switchboard:0.7.454a193b757da
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.61df70104803cb
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/crashappsec/chalk-operator:v0.1.128eee62e9bfa
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.