StackRadar

CVE-2026-39883

High

Advisory

Published 8 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
706
of 17,781 indexed, latest versions
Container images
715
deployed by those charts
Fix available
1 of 1
affected package

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

Carried by container images the latest versions of 706 of 17,781 indexed charts deploy, on 715 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.15.0, v1.15.1, v1.16.0, v1.17.0+26 more1.43.0715
OSV records
GHSA-hfvc-g4fc-pqhx
Also known as
GO-2026-5426

Charts affected

706 by stars
ChartLatestAffected imagesRadar Score
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

1,384
infisical-pki-issuerinfisical-charts1.0.01 of 1See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

566
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/influxdb:latestf75e48af0598
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,333
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

1,836
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,122
opencloudjacobcolvinVerified publisher0.2.32 of 13See more

opencloud jacobcolvin 0.2.3

2 of the 13 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

45,239
newtjeffrescVerified publisher0.2.11 of 1See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
fosrl/newt:1.10.4ccd2b0e9a049
go.opentelemetry.io/otel/sdk@v1.41.0
1.43.0

Open the chart page →

1,097
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,336
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
go.opentelemetry.io/otel/sdk@v1.23.1
1.43.0

Open the chart page →

3,999
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

887
daily-restartjuniorjpdj0.1.691 of 1See more

daily-restart juniorjpdj 0.1.69

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

458
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

953
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

359
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,893
thanosk8sonlabVerified publisher1.1.71 of 1See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

592
kagentkagent0.10.12 of 6See more

kagent kagent 0.10.1

2 of the 6 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

2,900
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

2,034
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

1,459
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
go.opentelemetry.io/otel/sdk@v1.42.0
1.43.0

Open the chart page →

32,509
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0

Open the chart page →

12,062
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
quay.io/metallb/speaker:v0.16.116561e96531e
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

2,127
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

3,199
calicokubeblocksVerified publisher3.28.01 of 3See more

calico kubeblocks 3.28.0

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
calico/kube-controllers:v3.28.08f04e4772a2b
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

3,288
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
go.opentelemetry.io/otel/sdk@v1.25.0
1.43.0

Open the chart page →

1,412
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/otel/sdk@v1.16.0
1.43.0

Open the chart page →

3,561
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0

Open the chart page →

1,131
spiderpoolkubeblocksVerified publisher1.2.02 of 4See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0

Open the chart page →

8,378
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

2,742
kube-botblocker-operatorkube-botblockerVerified publisher0.2.21 of 2See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/gustavojst/kube-botblocker:0.2.04de059bb32ac
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

493
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

390
hdfs-operatorkubedoopVerified publisher0.4.01 of 1See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0

Open the chart page →

390
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0

Open the chart page →

4,341
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

4,940
kuberecordkuberecordVerified publisher0.4.01 of 1See more

kuberecord kuberecord 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/kuberecord/kuberecord:v0.4.02a19792ad2ec
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0

Open the chart page →

176
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

1,437
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

6,356
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

3,417
testkube-operatorkubeshop2.1.1541 of 3See more

testkube-operator kubeshop 2.1.154

1 of the 3 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0

Open the chart page →

1,003
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
go.opentelemetry.io/otel/sdk@v1.19.0
1.43.0

Open the chart page →

1,554
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0

Open the chart page →

1,308
minio-gatewaykubesphere-testVerified publisher0.1.01 of 1See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0

Open the chart page →

1,069
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

20,204
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0

Open the chart page →

1,242
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.43.0

Open the chart page →

2,113
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,330
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0

Open the chart page →

33,242
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0

Open the chart page →

1,312
kltlifecycle-toolkitOfficialVerified publisher0.2.61 of 4See more

klt lifecycle-toolkit 0.2.6

1 of the 4 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
go.opentelemetry.io/otel/sdk@v1.17.0
1.43.0

Open the chart page →

4,658
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-39883.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
go.opentelemetry.io/otel/sdk@v1.23.0
1.43.0

Open the chart page →

1,116

Container images carrying it

715 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
16
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
12
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
8
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
7
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
5
keelhq/keel:latest73714afb4443
go.opentelemetry.io/otel/sdk@v1.32.0
1.43.0
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
5
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
4
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
4
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
4
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
4
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
4
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/otel/sdk@v1.15.0
1.43.0
4
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
3
grafana/grafana:11.0.00dc5a246ab16
go.opentelemetry.io/otel/sdk@v1.24.0
1.43.0
3
grafana/grafana:11.3.0a0f881232a6f
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
3
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
3
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
3
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
3
oryd/hydra:v2.2.02c93beb5e5f2
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
3
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.43.0
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.43.0
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
3
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
go.opentelemetry.io/otel/sdk@v1.29.0
1.43.0
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel/sdk@v1.40.0
1.43.0
3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.43.0
3
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.43.0
3
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
3
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel/sdk@v1.39.0
1.43.0
2
bitnamilegacy/etcd:latest99b408c15272
go.opentelemetry.io/otel/sdk@v1.34.0
1.43.0
2
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel/sdk@v1.37.0
1.43.0
2
devopsfaith/krakend:latestf8bdaa8a1a43
go.opentelemetry.io/otel/sdk@v1.28.0
1.43.0
2
grafana/alloy:v1.8.17790f6f7fbd8
go.opentelemetry.io/otel/sdk@v1.35.0
1.43.0
2
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
2
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.43.0
2
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/sdk@v1.38.0
1.43.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.