StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

4,440
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

20,299
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,242
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,113
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,330
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

32,893
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,312
kltlifecycle-toolkitOfficialVerified publisher0.2.61 of 4See more

klt lifecycle-toolkit 0.2.6

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
go.opentelemetry.io/otel/sdk@v1.17.0
1.43.0

Open the chart page →

4,659
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

1,116
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.31 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,037
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.43 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

3 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,933
liqo-upgrade-operatorliqo-upgrade-operatorVerified publisher0.1.01 of 1See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

368
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,524
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,155
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,101
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,020
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

32,893
central-hostpath-mapperloftVerified publisher0.2.91 of 1See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

917
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,269
vcluster-hpmloftVerified publisher0.2.71 of 1See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

826
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,507
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

9,021
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

23,255
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,002
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,786
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

24,488
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,767
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,592
mayastormayastorVerified publisher2.12.14 of 31See more

mayastor mayastor 2.12.1

4 of the 31 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

21,178
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

4,746
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,572
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

3,817
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

6,763
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

11,690
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

3,322
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

4,644
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

9,543
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

3,714
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

1,594
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,348
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

721
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,135
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

7,056
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,755
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,732
netbirdnetbird1.9.03 of 4See more

netbird netbird 1.9.0

3 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
netbirdio/relay:0.46.0d32f82514a24
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
netbirdio/signal:0.46.0e8f392611152
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

6,367

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.