StackRadar

CVE-2026-41178

Unscored

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
499
of 17,781 indexed, latest versions
Container images
465
deployed by those charts
Fix available
1 of 1
affected package

Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel

Carried by container images the latest versions of 499 of 17,781 indexed charts deploy, on 465 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.41.0, v1.43.01.42.0465
OSV records
GO-2026-5158
Also known as
GHSA-5wrp-cwcj-q835

Charts affected

499 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher90.2.02 of 6See more

kube-prometheus-stack prometheus-community 90.2.0

2 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

740
prometheusprometheus-communityOfficialVerified publisher29.29.01 of 6See more

prometheus prometheus-community 29.29.0

1 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

458
harborharborOfficialVerified publisher1.19.24 of 8See more

harbor harbor 1.19.2

4 of the 8 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
go.opentelemetry.io/otel@v1.43.0
1.42.0
goharbor/harbor-jobservice:v2.15.2f71a4452a095
go.opentelemetry.io/otel@v1.43.0
1.42.0
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
go.opentelemetry.io/otel@v1.43.0
1.42.0
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,650
gitlab-runnergitlabVerified publisher0.92.11 of 1See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

904
velerovmware-tanzu12.1.01 of 1See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
velero/velero:v1.18.111459094b1b2
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,331
rancherrancher-stable2.15.12 of 2See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.opentelemetry.io/otel@v1.43.0
1.42.0
rancher/shell:v0.8.1f293af9c635f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,456
argo-workflowsargoOfficialVerified publisher2.0.61 of 3See more

argo-workflows argo 2.0.6

1 of the 3 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.394a031823f2a
go.opentelemetry.io/otel@v1.41.0
1.42.0

Open the chart page →

259
kedakedacore2.20.23 of 3See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
go.opentelemetry.io/otel@v1.43.0
1.42.0
ghcr.io/kedacore/keda-admission-webhooks:2.20.241f74102aba7
go.opentelemetry.io/otel@v1.43.0
1.42.0
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

873
kube-state-metricsprometheus-communityVerified publisher8.4.21 of 1See more

kube-state-metrics prometheus-community 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

82
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,100
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

569
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

30,159
falcofalcosecurity9.1.03 of 3See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
go.opentelemetry.io/otel@v1.43.0
1.42.0
falcosecurity/falco-driver-loader:0.44.17df783d5269a
go.opentelemetry.io/otel@v1.43.0
1.42.0
falcosecurity/falcoctl:0.13.00eeb79adc580
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

5,227
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,135
grafanagrafana-communityVerified publisher13.2.41 of 1See more

grafana grafana-community 13.2.4

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

431
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.12 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,889
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

330
vpafairwinds-stableVerified publisher5.0.13 of 4See more

vpa fairwinds-stable 5.0.1

3 of the 4 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,233
opencostopencostOfficialVerified publisher2.5.311 of 2See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
go.opentelemetry.io/otel@v1.41.0
1.42.0

Open the chart page →

265
flux2fluxcd-community2.19.04 of 7See more

flux2 fluxcd-community 2.19.0

4 of the 7 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
go.opentelemetry.io/otel@v1.41.0
1.42.0
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
go.opentelemetry.io/otel@v1.43.0
1.42.0
ghcr.io/fluxcd/image-automation-controller:v1.2.26b0b16ab2115
go.opentelemetry.io/otel@v1.43.0
1.42.0
ghcr.io/fluxcd/image-reflector-controller:v1.2.227e6bad1dac5
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

2,951
netboxnetboxOfficialVerified publisher8.3.741 of 5See more

netbox netbox 8.3.74

1 of the 5 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
rancher/kubectl:v1.36.206c7a7a97727
go.opentelemetry.io/otel@v1.41.0
1.42.0

Open the chart page →

1,015
snapshot-controllerpiraeus-chartsVerified publisher5.2.01 of 1See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

228
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

4,061
csi-driver-nfscsi-driver-nfsVerified publisher4.13.45 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

5 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel@v1.41.0
1.42.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

3,324
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,891
codercoder-v2OfficialVerified publisher2.37.11 of 1See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.10c6994bb4c5a
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

187
mesherymesheryOfficialVerified publisher1.0.691 of 1See more

meshery meshery 1.0.69

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest9b68e81d392e
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,407
signozsignoz0.141.12 of 5See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
signoz/signoz:v0.141.1c10fa03e103c
go.opentelemetry.io/otel@v1.43.0
1.42.0
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

7,568
prometheus-mongodb-exporterprometheus-communityVerified publisher3.22.01 of 1See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
percona/mongodb_exporter:0.53.00214e482b2cd
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

231
rancherrancher-latest2.15.12 of 2See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.opentelemetry.io/otel@v1.43.0
1.42.0
rancher/shell:v0.8.1f293af9c635f
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,456
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.4.02 of 3See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
kubeshark/hub:v53.46d3f22525a0e
go.opentelemetry.io/otel@v1.43.0
1.42.0
kubeshark/worker:v53.4b226490dfa11
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

825
secrets-store-csi-driversecret-store-csi-driver1.6.11 of 4See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

1 of the 4 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1cdacfdbe8966
go.opentelemetry.io/otel@v1.41.0
1.42.0

Open the chart page →

1,766
kube-image-keeperenixVerified publisher2.3.11 of 1See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/enix/kube-image-keeper:2.3.1d3ccf28495c3
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

63
pxc-operatorpercona1.20.11 of 1See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

392
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

22,002
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,135
oktetooktetoOfficialVerified publisher0.0.0-2026-08-032 of 10See more

okteto okteto 0.0.0-2026-08-03

2 of the 10 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-08-03244f87e8c52d
go.opentelemetry.io/otel@v1.43.0
1.42.0
ghcr.io/okteto/okteto:3.22.0-beta.1e787b6bce27d
go.opentelemetry.io/otel@v1.41.0
1.42.0

Open the chart page →

5,750
hydraory0.64.01 of 2See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,156
proxmox-csi-pluginproxmox-csi0.5.124 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.12

4 of the 7 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel@v1.41.0
1.42.0
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,766
thanosthanos-communityOfficialVerified publisher0.43.01 of 1See more

thanos thanos-community 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

196
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,346
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
concourse/concourse:8.3.040a143ce5873
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

2,022
node-feature-discoverynode-feature-discoveryOfficialVerified publisher0.19.01 of 1See more

node-feature-discovery node-feature-discovery 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

207
csi-driver-smbcsi-driver-smbVerified publisher1.20.34 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

4 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.opentelemetry.io/otel@v1.41.0
1.42.0
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

2,945
hpe-csi-driverhpe-storageVerified publisher3.3.05 of 14See more

hpe-csi-driver hpe-storage 3.3.0

5 of the 14 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/hpestorage/volume-group-snapshotter:v1.1.0b26660528928
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
go.opentelemetry.io/otel@v1.43.0
1.42.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.opentelemetry.io/otel@v1.41.0
1.42.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

1,615
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

717
open-feature-operatoropen-feature-operatorOfficialVerified publisher0.9.31 of 1See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

128
kubescape-operatorkubescape1.40.43 of 6See more

kubescape-operator kubescape 1.40.4

3 of the 6 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
go.opentelemetry.io/otel@v1.43.0
1.42.0
quay.io/kubescape/operator:v0.2.16901b2694425e9
go.opentelemetry.io/otel@v1.43.0
1.42.0
quay.io/kubescape/storage:v0.0.33101f2b053ace1
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

920
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.121 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.12

1 of the 2 container images this version deploys carry CVE-2026-41178.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
go.opentelemetry.io/otel@v1.43.0
1.42.0

Open the chart page →

601

Container images carrying it

465 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1cdacfdbe8966
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/kubectl:v1.35.64d8c68e8c2bf
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.k8s.io/kubectl:v1.36.2b0d792e0d8df
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.k8s.io/kubectl:v1.36.1d08f476d04d0
go.opentelemetry.io/otel@v1.41.0
1.42.0
1
registry.k8s.io/provider-os/cinder-csi-plugin:v1.36.078adaeb154c7
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
go.opentelemetry.io/otel@v1.43.0
1.42.0
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
go.opentelemetry.io/otel@v1.43.0
1.42.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.