StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
717
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 717 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0726
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

717 by stars
ChartLatestAffected imagesRadar Score
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

4,440
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

20,299
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,242
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,113
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,330
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

32,893
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,312
kltlifecycle-toolkitOfficialVerified publisher0.2.61 of 4See more

klt lifecycle-toolkit 0.2.6

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
go.opentelemetry.io/otel/sdk@v1.17.0
1.43.0

Open the chart page →

4,659
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

1,116
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.31 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,037
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.43 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

3 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,933
liqo-upgrade-operatorliqo-upgrade-operatorVerified publisher0.1.01 of 1See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

368
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,524
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

2,155
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,101
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,020
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

32,893
central-hostpath-mapperloftVerified publisher0.2.91 of 1See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

917
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

3,225
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,269
vcluster-hpmloftVerified publisher0.2.71 of 1See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

826
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,507
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

9,021
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

23,255
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,002
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

9,786
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

24,488
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,767
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
go.opentelemetry.io/otel/sdk@v1.18.0
1.43.0

Open the chart page →

1,592
mayastormayastorVerified publisher2.12.14 of 31See more

mayastor mayastor 2.12.1

4 of the 31 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

21,178
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

4,746
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,572
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

3,817
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

6,763
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

11,690
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

3,322
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

4,644
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

9,543
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

3,714
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

1,594
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

7,348
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

721
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,135
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

7,056
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,755
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,732
netbirdnetbird1.9.03 of 4See more

netbird netbird 1.9.0

3 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
netbirdio/relay:0.46.0d32f82514a24
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
netbirdio/signal:0.46.0e8f392611152
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

6,367

Container images carrying it

726 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
grafana/tempo:2.6.0f55a8a1937ff
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
hashicorp/consul:1.17.0712fe02d2f84
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
hashicorp/consul:1.15.3ddff34041c5c
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
hashicorp/terraform:1.9.7b77efab1a448
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
hashicorp/vault:1.19.0bbb7f98dc67d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
huacnlee/gobackup:v3.1.1560be93229a5
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
instill/api-gateway:9bfdc88b53eaa51c523
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
instill/artifact-backend:b28766ac4a393e601ed
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
instill/model-backend:611f0f2e980125e5ba5
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ipfs/kubo:v0.41.00661819c2e09
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
1
ipfs/kubo:v0.24.0e3de33bd746b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
istio/pilot:1.29.1f8b0e412ac4a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
jaegertracing/all-in-one:1.53.060e65bfffe1f
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1
jaegertracing/all-in-one:1.55f6b5d09073f1
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
jaegertracing/jaeger-operator:1.61.03f036ec60e61
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
kong/gateway-operator:1.603510967482b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
kubegreen/kube-green:0.7.12dc0f0a6034c
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
kubeshop/tracetest:v1.7.173d7e3a2db43
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
l7mp/stunner-auth-server:1.1.02f8114477ba6
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
layer5/meshery:stable-latest78a8be21bef3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
library/caddy:2.9-alpineb4e3952384eb
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
library/docker:27-cli851f91d24121
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
library/docker:27-dindaa3df78ecf32
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
library/docker:26.1-dinddd43b430341a
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.