StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0
dragonflyoss/scheduler:v2.1.49523785c77787
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

18,376
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
otel/opentelemetry-collector-contrib:0.89.0995f17004231
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

31,510
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

3,048
ext-postgres-operatorext-postgres-operatorVerified publisher3.0.01 of 1See more

ext-postgres-operator ext-postgres-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

386
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,064
fqdn-controllerfqdn-controllerOfficialVerified publisher0.3.01 of 1See more

fqdn-controller fqdn-controller 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/konsole-is/fqdn-controller:0.3.08d5d41ab22aa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

70
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,463
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,190
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

15,562
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
temporalio/server:1.25.08a5798191dea
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

16,346
go-hello-world-chartgo-hello-worldVerified publisher1.8.31 of 1See more

go-hello-world-chart go-hello-world 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

742
gomenhashaigomenhashaiOfficialVerified publisher1.3.41 of 1See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

628
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

3,518
armada-operatorgresearch0.7.01 of 2See more

armada-operator gresearch 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

1,567
terraform-cloud-operatorhashicorpVerified publisher2.5.01 of 2See more

terraform-cloud-operator hashicorp 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,463
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,476
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

4,196
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.42 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

6,095
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

4,300
idle-reaperidle-reaperVerified publisher0.1.41 of 1See more

idle-reaper idle-reaper 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/b100to/idle-reaper:0.1.447b4a0e091f0
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

134
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

2,416
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,273
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.329 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

9 of the 17 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

15,418
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

5,789
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

507
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

12,019
cert-managerkubeblocksVerified publisher1.17.22 of 4See more

cert-manager kubeblocks 1.17.2

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

2,900
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

4,141
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

24,690
kube-vip-cloud-providerkube-vip0.2.101 of 1See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

791
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.02 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.22 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

2 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0

Open the chart page →

6,872
ingress-annotatorkuossOfficialVerified publisher0.3.01 of 1See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kuoss/ingress-annotator:v0.3.0ae179f65d869
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

480
authz-pdplabs64io-helm-chartsVerified publisher0.6.01 of 1See more

authz-pdp labs64io-helm-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

800
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,113
lgtmlgtmVerified publisher0.24.01 of 9See more

lgtm lgtm 0.24.0

1 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.2.0-distroless08e6ab6d67a5
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,008
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

5,576
keptn-lifecycle-operatorlifecycle-toolkitVerified publisher0.6.01 of 1See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

595
keptn-metrics-operatorlifecycle-toolkitVerified publisher0.5.01 of 1See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

825
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

4,389
go-hello-worldloafoe0.14.01 of 1See more

go-hello-world loafoe 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

672
lynqlynqVerified publisher1.1.221 of 1See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

621
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

4,942
metadata-injectormetadata-injector-operator0.0.11 of 1See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

561
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

4,137
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

1,293
kruiseopenkruise1.9.11 of 2See more

kruise openkruise 1.9.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.9.1f81ae78a36a4
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,495

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
prom/prometheus:v2.48.0b440bc0e8aa5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
stashapp/stash-box:latesta534c8afdf39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/admin-tools:1.22.0836af062af30
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/admin-tools:1.28cfde8170c92f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
temporalio/auto-setup:1.29.15b3502a3b685
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.26.21e2626efcbc1
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/server:1.25.08a5798191dea
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/server:1.29.1c1e3326b2ce1
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.22.0ddeebf8bad8f
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
udhos/apiping:1.5.041ab9bae6f3b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
udhos/secrets:1.0.6daa2b4eaac09
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
udhos/snsping:1.2.96ae70677b6a3
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
venturenox/sagawise:latestc11d32f18718
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
xosphere/xonodepools:1.0.71458097b6f85
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.