StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackkube-prometheus-stack-oci91.2.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.2.1

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

647
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
supabase/gotrue:v2.163.0ba4ddc594b0b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

23,123
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

10,775
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.21 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
go.opentelemetry.io/otel/sdk@v1.15.1
1.43.0

Open the chart page →

2,235
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

1,216
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,205
openstack-cinder-csicloud-provider-openstack2.36.52 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

3,604
hcloud-csihcloud2.23.03 of 6See more

hcloud-csi hcloud 2.23.0

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,630
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

23,228
kube-greenkube-green-officialOfficialVerified publisher0.7.11 of 1See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubegreen/kube-green:0.7.12dc0f0a6034c
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

493
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

14,893
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,039
astarte-operatorastarteOfficialVerified publisher26.5.21 of 1See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

695
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,897
emqx-operatoremqx-operator2.3.22 of 2See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

4,531
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethereum/client-go:stableb8ab3451a117
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

616
keptnlifecycle-toolkitOfficialVerified publisher0.11.02 of 3See more

keptn lifecycle-toolkit 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

1,927
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

265
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

817
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

769
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

16,210
truenas-csptruenas-cspVerified publisher1.2.43 of 11See more

truenas-csp truenas-csp 1.2.4

3 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

5,759
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

14,240
kubedbappscodeVerified publisher2026.7.102 of 8See more

kubedb appscode 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

4,016
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,984
celestia-appcelestia-labsVerified publisher0.5.01 of 3See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0

Open the chart page →

1,066
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,663
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,795
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

842
vclustermainVerified publisher0.17.01 of 10See more

vcluster main 0.17.0

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

11,552
policy-controllersigstoreVerified publisher0.10.71 of 2See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

911
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.11 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

5,468
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

2,316
uffizzi-appuffizzi-app1.3.02 of 14See more

uffizzi-app uffizzi-app 1.3.0

2 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

19,337
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

525
snapschedulerbackube-helm-chartsVerified publisher3.5.01 of 2See more

snapscheduler backube-helm-charts 3.5.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,224
coder-observabilitycoder-observabilityVerified publisher0.7.33 of 21See more

coder-observability coder-observability 0.7.3

3 of the 21 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
grafana/grafana:10.4.19a9043254ba16
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.04 of 10See more

cosmo cosmo-platform 0.20.0

4 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

28,839
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
go.opentelemetry.io/otel/sdk@v1.22.0
1.43.0

Open the chart page →

1,301
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,451
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,012
frp-operatorfrpVerified publisher1.0.41 of 1See more

frp-operator frp 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/frp-operator:v1.0.196b01d7e7025
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

368
frp-operatorfrp-operator1.9.01 of 1See more

frp-operator frp-operator 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/zufardhiyaulhaq/frp-operator:v0.11.0cd25ee354df2
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

528
hcloud-cloud-controller-managerhcloud1.37.01 of 1See more

hcloud-cloud-controller-manager hcloud 1.37.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

247
coreinstill-aiOfficialVerified publisher0.1.756 of 15See more

core instill-ai 0.1.75

6 of the 15 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
instill/artifact-backend:b28766ac4a393e601ed
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
instill/mgmt-backend:d0933d4ebe12f77a3f9
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
instill/model-backend:611f0f2e980125e5ba5
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
openfga/openfga:v1.9.25e94966c11df
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
temporalio/admin-tools:1.28cfde8170c92f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

30,816
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,145
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,157
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.02 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

11,582
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.11842975891182
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

3,295

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
prom/prometheus:v2.48.0b440bc0e8aa5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
stashapp/stash-box:latesta534c8afdf39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/admin-tools:1.22.0836af062af30
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/admin-tools:1.28cfde8170c92f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
temporalio/auto-setup:1.29.15b3502a3b685
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.26.21e2626efcbc1
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/server:1.25.08a5798191dea
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/server:1.29.1c1e3326b2ce1
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.22.0ddeebf8bad8f
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
udhos/apiping:1.5.041ab9bae6f3b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
udhos/secrets:1.0.6daa2b4eaac09
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
udhos/snsping:1.2.96ae70677b6a3
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
venturenox/sagawise:latestc11d32f18718
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
xosphere/xonodepools:1.0.71458097b6f85
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.