StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,468
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,217
ingressmonitorcontrollerevilgn0me0.0.51 of 1See more

ingressmonitorcontroller evilgn0me 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

204
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,824
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.25 of 18See more

farm-observability farm-observability 0.27.2

5 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/grafana:13.0.1-security-012d1f9ae67c17
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

13,336
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

749
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

5,340
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

8,831
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

5,684
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,474
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,212
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,679
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,679
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

369
glassflow-etlglassflowVerified publisher0.5.213 of 16See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

12,072
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

763
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,605
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

7,662
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,376
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

19,291
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,290
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,071
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

47,117
prometheusgpg-dev29.2.13 of 6See more

prometheus gpg-dev 29.2.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,261
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

1,275
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,553
grafana-cloud-onboardinggrafana0.4.72 of 5See more

grafana-cloud-onboarding grafana 0.4.7

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,657
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,357
pyroscope-monitoringgrafana0.1.13 of 6See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

8,226
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,589
routergroundcover1.12.3592 of 7See more

router groundcover 1.12.359

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

6,038
hcp-terraform-operatorhashicorpVerified publisher2.12.11 of 2See more

hcp-terraform-operator hashicorp 2.12.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

678
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

848
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.03 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

3 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
prom/prometheus:v2.48.1a67e5e402ff5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,461
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,451
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,597
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

7,010
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

9,422
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

29,852
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

5,916
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

25,099
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,025

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.