StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,035
monitoringcluster-deploy0.3.05 of 11See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

8,183
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
library/docker:27-dindaa3df78ecf32
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

19,338
coder-logstream-kubecoder-logstream-kube0.0.151 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

885
autovpacontainerooVerified publisher0.4.21 of 1See more

autovpa containeroo 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

298
kube-ephemeral-container-exportercontainerooVerified publisher0.2.31 of 1See more

kube-ephemeral-container-exporter containeroo 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

298
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.38 of 34See more

csghub csghub 2.4.3

8 of the 34 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
opencsghq/lws:v0.6.1de15437db41b
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

11,335
csi-driver-ipfscsi-driver-ipfs0.2.03 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

3 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,629
ipfs-clustercsi-driver-ipfs0.2.01 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ipfs/kubo:v0.41.00661819c2e09
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

1,475
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0

Open the chart page →

1,306
dapr-agentsdapr-agents-devVerified publisher0.1.513 of 31See more

dapr-agents dapr-agents-dev 0.1.5

13 of the 31 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

22,193
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,095
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

1,994
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

3,176
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

4,509
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,945
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

734
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

3,470
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.23 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

3 of the 17 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

21,641
gatekeeperdoubanVerified publisher3.17.11 of 3See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,490
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

1,990
temporaldtrdnk-helm-chartsVerified publisher0.35.02 of 13See more

temporal dtrdnk-helm-charts 0.35.0

2 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
temporalio/server:1.22.4c0a44c26397b
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

20,205
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,437
bordysnixVerified publisher0.0.81 of 1See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
0xpolygon/bor:1.3.7396d3de26d8b
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0

Open the chart page →

1,365
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

6,678
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,284
eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher0.0.51 of 1See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

558
elastic-agentelasticVerified publisher9.5.31 of 2See more

elastic-agent elastic 9.5.3

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

753
kube-state-metricselasticVerified publisher6.1.01 of 1See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

753
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

2,237
kube-ecp-stackemqx-operator2.5.14 of 16See more

kube-ecp-stack emqx-operator 2.5.1

4 of the 16 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
quay.io/jetstack/cert-manager-webhook:v1.16.16edf44244b2a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

23,685
mariadb-operator-monitoringenixVerified publisher0.1.01 of 1See more

mariadb-operator-monitoring enix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

731
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

3,933
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

8,648
thanoseosc-lot-1Verified publisher0.2.01 of 1See more

thanos eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

834
thanos-bucketeosc-lot-1Verified publisher0.1.01 of 1See more

thanos-bucket eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

834
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

7,329
erpcethereum-helm-chartsVerified publisher0.0.41 of 1See more

erpc ethereum-helm-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

899
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

1,703
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,470
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,216
ingressmonitorcontrollerevilgn0me0.0.51 of 1See more

ingressmonitorcontroller evilgn0me 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

576
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

204
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

2,785
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.25 of 18See more

farm-observability farm-observability 0.27.2

5 of the 18 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/grafana:13.0.1-security-012d1f9ae67c17
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

13,255

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
prom/prometheus:v2.48.0b440bc0e8aa5
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
1
stashapp/stash-box:latesta534c8afdf39
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/admin-tools:1.22.0836af062af30
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/admin-tools:1.28cfde8170c92f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
temporalio/auto-setup:1.29.15b3502a3b685
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.26.21e2626efcbc1
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
1
temporalio/server:1.25.08a5798191dea
go.opentelemetry.io/otel/sdk@v1.27.0
1.43.0
1
temporalio/server:1.29.1c1e3326b2ce1
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
1
temporalio/server:1.22.0ddeebf8bad8f
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0
1
udhos/apiping:1.5.041ab9bae6f3b
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
udhos/secrets:1.0.6daa2b4eaac09
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1
udhos/snsping:1.2.96ae70677b6a3
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
venturenox/sagawise:latestc11d32f18718
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
1
xosphere/xonodepools:1.0.71458097b6f85
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
go.opentelemetry.io/otel/sdk@v1.20.0
1.43.0
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.