StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

9,847
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

7,300
argo-workflowsargo-helm-charts1.0.02 of 2See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,826
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

4,923
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

40,238
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,069
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

32,501
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,502
axonops-operatoraxonops-operator0.1.01 of 1See more

axonops-operator axonops-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/axonops/axonops-operator:0.1.0e0cdb993f0b1
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

296
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,191
sm-operatorbitwarden2.0.31 of 1See more

sm-operator bitwarden 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/sm-operator:2.1.0846624161f32
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

503
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

1,800
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

19,229
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,859
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

1,396
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,069
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,677
etcdcagriekinVerified publisher0.1.51 of 1See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.16d967d98a12dc
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

892
caninecanine0.1.102 of 7See more

canine canine 0.1.10

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

14,130
cert-managercanine1.15.32 of 4See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

2,880
oci-csi-drivercastaiVerified publisher1.13.81 of 7See more

oci-csi-driver castai 1.13.8

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,698
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
temporalio/admin-tools:1.26.237e2e33dbd7b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
temporalio/server:1.26.21e2626efcbc1
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.302 of 18See more

catalyst-agents catalyst-agents 0.1.30

2 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

15,027
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

640
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,320
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,263
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,087
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

832
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,271
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,752
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,072
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

882
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

7,405
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

961
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

656
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

1,617
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
calico/kube-controllers:v3.28.1eadb3a25109a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.12 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

2 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

5,933
kamajiclastixVerified publisher0.0.0+latest1 of 4See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

11,995
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,744
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

247
hcloud-csi-mgmtcloudhippieVerified publisher2.10.01 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

582
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

18,293
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

656

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:11.1.4886b56d5534e
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
2
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
2
grafana/grafana:11.4.0d8ea37798ccc
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
2
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
2
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
2
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
2
ipfs/kubo:v0.33.21a30f5ed8579
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
2
istio/install-cni:1.24.2-distrolessaef4825e110f
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
2
istio/pilot:1.24.2-distroless137e44e3d1d2
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
2
oryd/kratos:v1.3.1fe2428f103a6
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
2
polyaxon/polyaxon-operator:2.16.42716f552b301
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
2
prom/prometheus:v2.52.05c435642ca4d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
2
prom/prometheus:v2.48.1a67e5e402ff5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
2
rookout/controller:latest4451a6f6b8ec
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
2
rookout/data-on-prem:latest51c0fce64467
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
2
temporalio/server:1.22.4c0a44c26397b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
2
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
2
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
2
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
2
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
2
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
2
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
2
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
2
ghcr.io/opencost/opencost:1.121.2de2784434527
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.