StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

9,847
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

7,300
argo-workflowsargo-helm-charts1.0.02 of 2See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,826
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

4,923
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

40,238
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,069
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

32,501
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,502
axonops-operatoraxonops-operator0.1.01 of 1See more

axonops-operator axonops-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/axonops/axonops-operator:0.1.0e0cdb993f0b1
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

296
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,191
sm-operatorbitwarden2.0.31 of 1See more

sm-operator bitwarden 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/sm-operator:2.1.0846624161f32
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

503
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

1,800
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

19,229
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,859
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

1,396
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,069
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,677
etcdcagriekinVerified publisher0.1.51 of 1See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.16d967d98a12dc
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

892
caninecanine0.1.102 of 7See more

canine canine 0.1.10

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

14,130
cert-managercanine1.15.32 of 4See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

2,880
oci-csi-drivercastaiVerified publisher1.13.81 of 7See more

oci-csi-driver castai 1.13.8

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,698
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
temporalio/admin-tools:1.26.237e2e33dbd7b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
temporalio/server:1.26.21e2626efcbc1
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.302 of 18See more

catalyst-agents catalyst-agents 0.1.30

2 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/tempo:2.5.0f0200a9bff6d
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

15,027
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

640
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,320
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,263
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,087
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

832
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,271
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,752
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,072
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

882
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

7,405
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

961
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

656
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

1,617
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
calico/kube-controllers:v3.28.1eadb3a25109a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.12 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

2 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

5,933
kamajiclastixVerified publisher0.0.0+latest1 of 4See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

11,995
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,744
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

247
hcloud-csi-mgmtcloudhippieVerified publisher2.10.01 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

582
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

18,293
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

656

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
2
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
2
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
quay.io/metallb/speaker:v0.16.116561e96531e
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
2
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
2
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
2
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
2
0xpolygon/bor:1.3.7396d3de26d8b
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
adyanth/cloudflare-operator6b168dc237d5
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
aerospike/aerospike-backup-service:3.5.1be40d709c583
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
aibrix/controller-manager:v0.7.076aabbbfda79
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
almasood/book-server:latest6ffac9b63cdf
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
alpine/k8s:1.31.137a319b15cfc9
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
alpine/k8s:1.32.47e1e7d5b7a96
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
alpine/k8s:1.31.49c4976d47656
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
alpine/k8s:1.32.3eec354133193
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
altinity/clickhouse-operator:0.23.34baec90b20cd
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
altinity/clickhouse-operator:0.23.774315beb57db
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
altinity/metrics-exporter:0.25.46ecf67edfb71
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
altinity/metrics-exporter:0.23.7a4d7ff0c727e
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
go.opentelemetry.io/otel/sdk@v1.17.0
1.43.0
1
apecloud/gemini-scheduler:0.1.15832d1a9097a
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
appwrite/appwrite:1.9.01aaa70127114
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
aquasec/trivy:0.69.3bcc376de8d77
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
artifacthub/hub:v1.19.0111918d8c399
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
artifacthub/scanner:v1.23.02d8365601f0e
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
artifacthub/scanner:v1.19.0323d026e78c3
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
artifacthub/tracker:v1.23.05368d21a6e5c
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
artifacthub/tracker:v1.19.06596c8c4d955
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
baserow/baserow:1.30.1df0c42eb67e8
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.