StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,787 indexed, latest versions
Container images
711
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,787 indexed charts deploy, on 711 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0711
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

744
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.71 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,085
kubecostmesosphere-stable0.37.53 of 9See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/thanos/thanos:v0.36.1e542959e1b36
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

17,693
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

107,811
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

997
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

1,346
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

13,521
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,046
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,055
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

28,534
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,494
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,619
valkey-operatorvalkeyVerified publisher0.6.01 of 1See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

134
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/sdk@v1.15.1
1.43.0

Open the chart page →

1,344
argo-cdwenerme10.9.11See more

argo-cd wenerme 10.9.1

1 container image this version deploys carries CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

1,819
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
temporalio/auto-setup:1.29.15b3502a3b685
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

14,914
cloudflare-operatorankra-chartsVerified publisher0.2.01 of 1See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
adyanth/cloudflare-operatordigest-pinned6b168dc237d5
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

493
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

14,917
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,366
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

5,299
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

3,620
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,222
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,276
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,297
astradnsastradnsVerified publisher0.2.92 of 2See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

2,613
btrfs-nfs-csibtrfs-nfs-csi0.4.03 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

3 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,183
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,533
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

1,799
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

12,562
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,067
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,024
grafanacloudposse0.2.61 of 1See more

grafana cloudposse 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

720
openstack-manila-csicloud-provider-openstack2.36.31 of 5See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

3,749
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
cluster-setupcluster-setup1.5.04 of 8See more

cluster-setup cluster-setup 1.5.0

4 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

10,037
istio-allcode4devsVerified publisher1.2.04 of 6See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
istio/pilot:1.24.2-distroless137e44e3d1d2
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,784
istio-control-planecode4devsVerified publisher1.0.02 of 3See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
istio/pilot:1.24.2-distroless137e44e3d1d2
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

2,360
maintenancecodewithemadVerified publisher0.1.61 of 1See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/caddy:2.9-alpineb4e3952384eb
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

1,469
chalk-operatorcrashoverride-helm-chartsVerified publisher0.1.11 of 1See more

chalk-operator crashoverride-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/chalk-operator:v0.1.128eee62e9bfa
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

368
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,345
cyphernetes-operatorcyphernetes-operatorVerified publisher0.1.01 of 1See more

cyphernetes-operator cyphernetes-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

498
aibrixdanchevVerified publisher0.7.02 of 5See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
aibrix/controller-manager:v0.7.076aabbbfda79
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
aibrix/gateway-plugins:v0.7.05b93ea4c753a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

5,274
dbrepodbrepo1.13.33 of 25See more

dbrepo dbrepo 1.13.3

3 of the 25 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

52,635
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,828
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,542
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
dragonflyoss/scheduler:v2.1.49523785c77787
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

18,376

Container images carrying it

711 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.