StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

3,675
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

744
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.71 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,085
kubecostmesosphere-stable0.37.53 of 9See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/thanos/thanos:v0.36.1e542959e1b36
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

17,693
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

107,811
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

997
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

1,346
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

13,521
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,046
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,055
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

28,534
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,494
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,619
valkey-operatorvalkeyVerified publisher0.6.01 of 1See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

134
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/otel/sdk@v1.15.1
1.43.0

Open the chart page →

1,344
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

3,218
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

1,819
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
temporalio/auto-setup:1.29.15b3502a3b685
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

14,914
cloudflare-operatorankra-chartsVerified publisher0.2.01 of 1See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
adyanth/cloudflare-operatordigest-pinned6b168dc237d5
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

493
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

14,917
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,366
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

5,299
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

3,620
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,222
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,276
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,297
astradnsastradnsVerified publisher0.2.92 of 2See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

2,613
btrfs-nfs-csibtrfs-nfs-csi0.4.03 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

3 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,183
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,533
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

1,799
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

12,562
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

1,067
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,024
grafanacloudposse0.2.61 of 1See more

grafana cloudposse 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

720
openstack-manila-csicloud-provider-openstack2.36.31 of 5See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

3,749
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
cluster-setupcluster-setup1.5.04 of 8See more

cluster-setup cluster-setup 1.5.0

4 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

10,037
istio-allcode4devsVerified publisher1.2.04 of 6See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
istio/pilot:1.24.2-distroless137e44e3d1d2
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,784
istio-control-planecode4devsVerified publisher1.0.02 of 3See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
istio/pilot:1.24.2-distroless137e44e3d1d2
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

2,360
maintenancecodewithemadVerified publisher0.1.61 of 1See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/caddy:2.9-alpineb4e3952384eb
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

1,469
chalk-operatorcrashoverride-helm-chartsVerified publisher0.1.11 of 1See more

chalk-operator crashoverride-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/chalk-operator:v0.1.128eee62e9bfa
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

368
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,345
cyphernetes-operatorcyphernetes-operatorVerified publisher0.1.01 of 1See more

cyphernetes-operator cyphernetes-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

498
aibrixdanchevVerified publisher0.7.02 of 5See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
aibrix/controller-manager:v0.7.076aabbbfda79
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
aibrix/gateway-plugins:v0.7.05b93ea4c753a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

5,274
dbrepodbrepo1.13.33 of 25See more

dbrepo dbrepo 1.13.3

3 of the 25 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

52,635
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,828
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,542

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
bitnamilegacy/kube-state-metrics:204a3044b384b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bonovoo/secrethor:1.1.2bb93b68fcd17
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
calico/kube-controllers:v3.28.08f04e4772a2b
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
calico/kube-controllers:v3.28.1eadb3a25109a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
casbin/casdoor:3.62.17729da148c61
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
casbin/casdoor:3.62.0e08231f16c00
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
cloudflare/cloudflared:2024.8.314d9c6b01b29
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
daprio/dashboard:0.15.04be696707bd1
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
daprio/injector:1.11.2763b9b70b0c8
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/operator:1.11.2c584428aa12d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/placement:1.11.2d8e1446da996
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/sentry:1.11.21f507c1a181b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
darthsim/imgproxy:v3.26476cb08c816a
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
datadog/agent:6aad9994de6a7
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
datawire/aes:3.11.195ec30b3c732
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
ddosify/alaz:v0.12.0ea602056d9ce
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
defactops/defactops-ui:1.0.16825cdf9ba706
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
devopsfaith/krakend:2.6.34c678c224f67
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
devopsfaith/krakend:2.7.09219cda867e2
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
dockerdaemon0901/rolldice:v14e5bfe179c7e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
dragonflyoss/scheduler:v2.1.49523785c77787
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
emqxecp/otelcol:2.5.04c31d9bec846
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ethereum/client-go:latest37575ec10fbc
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ethereum/client-go:stableb8ab3451a117
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ethpandaops/forky:debian-latestc937f4ba737c
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.