StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

5,036
cert-managernicklasfrahm-cert-managerVerified publisher0.1.22 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,824
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

785
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

6,861
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,007
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,007
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,542
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

5,652
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

4,723
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,966
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

7,740
lensoci-ai-incubations0.1.145 of 16See more

lens oci-ai-incubations 0.1.14

5 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

17,085
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

967
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,580
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

6,083
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,252
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

240
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

260
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

5,056
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

852
harikubeopenshift0.16.32 of 3See more

harikube openshift 0.16.3

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/harikube/kubernetes:v1.36.22804aabd76d2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,543
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,145
kubedb-certifiedopenshift2026.7.102 of 8See more

kubedb-certified openshift 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,048
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,091
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

8,634
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,579
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,821
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,213
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

72,154
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

5,136
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

5,410
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

725
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,980
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

3,660
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,978
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,367
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,159
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,029
pax-prometheuspaxtecnologia0.7.02 of 8See more

pax-prometheus paxtecnologia 0.7.0

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,826
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,326
pmm-ha-dependenciespercona1.0.03 of 4See more

pmm-ha-dependencies percona 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
altinity/metrics-exporter:0.25.46ecf67edfb71
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,449
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,717
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

1,681
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,527
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

7,149
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

6,695

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/sdk@v1.15.1
1.43.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.