StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,787 indexed, latest versions
Container images
711
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,787 indexed charts deploy, on 711 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0711
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.31 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,037
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.43 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

3 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,932
liqo-upgrade-operatorliqo-upgrade-operatorVerified publisher0.1.01 of 1See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

368
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,507
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,155
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,101
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,020
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,510
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

33,242
central-hostpath-mapperloftVerified publisher0.2.91 of 1See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

917
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,269
vcluster-hpmloftVerified publisher0.2.71 of 1See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

826
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,467
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

8,938
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

23,613
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,001
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,774
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

24,400
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,767
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,592
mayastormayastorVerified publisher2.12.14 of 31See more

mayastor mayastor 2.12.1

4 of the 31 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

21,064
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

4,742
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

3,777
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

11,689
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

3,283
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

3,713
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

1,594
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,309
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

720
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,132
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

7,184
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,819
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,796
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

5,034
cert-managernicklasfrahm-cert-managerVerified publisher0.1.22 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,824
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

785
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

6,854
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,006
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

4,674
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,966

Container images carrying it

711 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
federid/webhook:0.1.0fbfb7c6510a7
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
fleetdm/fleet:v4.66.012e644b7f40e
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
fosrl/newt:1.10.4ccd2b0e9a049
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
gdxbsv/traktor:0.0.17675693335054
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/harbor-core:v2.11.1c017dd84ee96
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
gotenberg/gotenberg:8.30206a6c708fc6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/agent:v0.44.23364714a2f64
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
grafana/agent:v0.40.3f6cbec9409be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
grafana/alloy:v1.4.306bdcbb51fc2
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
grafana/beyla:1.3.336d07f8d276e
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:11.2.2-security-01464eac539793
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/grafana:11.5.15781759b3d27
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
grafana/grafana:11.6.062d2b9d20a19
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/grafana:11.5.28b37a2f028f1
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
grafana/grafana:10.4.19a9043254ba16
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
grafana/grafana:11.1.3b23b588cf7cb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/loki:3.3.28af2de1abbdd
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.