StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

5,036
cert-managernicklasfrahm-cert-managerVerified publisher0.1.22 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,824
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

785
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

6,861
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,007
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,007
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,542
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

5,652
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

4,723
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,966
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

7,740
lensoci-ai-incubations0.1.145 of 16See more

lens oci-ai-incubations 0.1.14

5 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

17,085
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

967
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,580
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

6,083
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,252
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

240
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

260
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

5,056
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

852
harikubeopenshift0.16.32 of 3See more

harikube openshift 0.16.3

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/harikube/kubernetes:v1.36.22804aabd76d2
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,543
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,145
kubedb-certifiedopenshift2026.7.102 of 8See more

kubedb-certified openshift 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,048
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,091
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

8,634
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,579
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,821
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,213
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

72,154
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

5,136
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

5,410
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

725
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,980
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

3,660
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,978
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

2,367
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,159
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,029
pax-prometheuspaxtecnologia0.7.02 of 8See more

pax-prometheus paxtecnologia 0.7.0

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,826
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,326
pmm-ha-dependenciespercona1.0.03 of 4See more

pmm-ha-dependencies percona 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
altinity/metrics-exporter:0.25.46ecf67edfb71
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,449
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,717
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

1,681
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,527
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

7,149
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

6,695

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ethpandaops/forky:debian-latestc937f4ba737c
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
federid/webhook:0.1.0fbfb7c6510a7
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
fleetdm/fleet:v4.66.012e644b7f40e
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
fosrl/newt:1.10.4ccd2b0e9a049
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0
1
gdxbsv/traktor:0.0.17675693335054
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/harbor-core:v2.11.1c017dd84ee96
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
gotenberg/gotenberg:8.30206a6c708fc6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/agent:v0.44.23364714a2f64
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
grafana/agent:v0.40.3f6cbec9409be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
grafana/alloy:v1.4.306bdcbb51fc2
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/alloy:v1.1.1c3dac4e26471
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
1
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
grafana/beyla:1.3.336d07f8d276e
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0
1
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
grafana/grafana:13.0.10f86bada30d6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:11.2.2-security-01464eac539793
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/grafana:11.5.15781759b3d27
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
grafana/grafana:11.6.062d2b9d20a19
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
grafana/grafana:11.5.28b37a2f028f1
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
grafana/grafana:10.4.19a9043254ba16
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
grafana/grafana:11.1.3b23b588cf7cb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
1
grafana/grafana:11.3.1fa801ab6e1ae
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
grafana/loki:3.3.28af2de1abbdd
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.