StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

749
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

8,902
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

5,684
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,474
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,212
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,677
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

8,677
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

11,961
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

5,295
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

369
glassflow-etlglassflowVerified publisher0.5.213 of 16See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

12,056
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

763
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,587
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

7,659
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,376
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

19,229
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,288
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,071
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

49,025
prometheusgpg-dev29.2.13 of 6See more

prometheus gpg-dev 29.2.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,261
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

1,274
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,546
grafana-cloud-onboardinggrafana0.4.72 of 5See more

grafana-cloud-onboarding grafana 0.4.7

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,637
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.13 of 6See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

8,188
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,590
routergroundcover1.12.3572 of 7See more

router groundcover 1.12.357

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

6,009
hcp-terraform-operatorhashicorpVerified publisher2.12.11 of 2See more

hcp-terraform-operator hashicorp 2.12.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

678
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

848
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.03 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

3 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
prom/prometheus:v2.48.1a67e5e402ff5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,460
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,451
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,594
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

6,952
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

29,817
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

6,012
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

25,017
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,124
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,614
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

4,441
cac-systemhuangchengwu-helm-chart0.1.03 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

11,186
jaegerhuseyinbabalVerified publisher0.1.01 of 3See more

jaeger huseyinbabal 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,477
monitoring-stackict-platformVerified publisher0.4.03 of 13See more

monitoring-stack ict-platform 0.4.0

3 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

9,573
ilum-jupyterhubilumVerified publisher4.3.11 of 6See more

ilum-jupyterhub ilum 4.3.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

1,835

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
bitnamilegacy/kube-state-metrics:204a3044b384b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
bonovoo/secrethor:1.1.2bb93b68fcd17
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
calico/kube-controllers:v3.28.08f04e4772a2b
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
calico/kube-controllers:v3.28.1eadb3a25109a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
casbin/casdoor:3.62.17729da148c61
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
casbin/casdoor:3.62.0e08231f16c00
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
cloudflare/cloudflared:2024.8.314d9c6b01b29
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
daprio/dashboard:0.15.04be696707bd1
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
daprio/injector:1.11.2763b9b70b0c8
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/operator:1.11.2c584428aa12d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/placement:1.11.2d8e1446da996
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
daprio/sentry:1.11.21f507c1a181b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
darthsim/imgproxy:v3.26476cb08c816a
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
datadog/agent:6aad9994de6a7
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
datawire/aes:3.11.195ec30b3c732
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
ddosify/alaz:v0.12.0ea602056d9ce
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
defactops/defactops-ui:1.0.16825cdf9ba706
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
devopsfaith/krakend:2.6.34c678c224f67
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
devopsfaith/krakend:2.7.09219cda867e2
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
dockerdaemon0901/rolldice:v14e5bfe179c7e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
dragonflyoss/scheduler:v2.1.49523785c77787
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
emqxecp/otelcol:2.5.04c31d9bec846
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
ethereum/client-go:latest37575ec10fbc
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ethereum/client-go:stableb8ab3451a117
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
ethpandaops/forky:debian-latestc937f4ba737c
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.