StackRadar

CVE-2026-42504

High

Advisory

Published 2 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,065
of 17,790 indexed, latest versions
Container images
4,681
deployed by those charts
Fix available
1 of 2
affected packages

Quadratic complexity in WordDecoder.DecodeHeader in mime

Carried by container images the latest versions of 4,065 of 17,790 indexed charts deploy, on 4,681 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+182 more1.25.114,681
OSV records
DEBIAN-CVE-2026-42504GO-2026-5038
Also known as
BIT-golang-2026-42504

Charts affected

4,065 by stars
ChartLatestAffected imagesRadar Score
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.34 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
stdlib@go1.24.7
1.25.11
natsio/nats-box:0.18.0abdc9f9f0120
stdlib@go1.24.3
1.25.11
natsio/nats-server-config-reloader:0.19.181edf32a3680
stdlib@go1.24.5
1.25.11
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
stdlib@go1.24.3
1.25.11

Open the chart page →

6,120
oadaoadaVerified publisher5.0.51 of 11See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
stdlib@go1.19.3
1.25.11

Open the chart page →

13,329
transfer.shobeoneVerified publisher1.0.51 of 1See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
stdlib@go1.20.11
1.25.11

Open the chart page →

1,178
oci-native-ingress-controlleroci-native-ingress-controller1.0.01 of 1See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
amaanx86/oci-native-ingress-controller:masterd7206ac7a319
stdlib@go1.23.7
1.25.11

Open the chart page →

434
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.25.11

Open the chart page →

502
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.25.11

Open the chart page →

5,299
kruiseopenkruise1.9.12 of 2See more

kruise openkruise 1.9.1

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.25.11
openkruise/kruise-manager:v1.9.1f81ae78a36a4
stdlib@go1.23.9
1.25.11

Open the chart page →

1,503
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
stdlib@go1.25.0
1.25.11

Open the chart page →

1,059
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
stdlib@go1.25.7
1.25.11

Open the chart page →

5,849
openstack-kamaji-clusteropenstack-kamaji-clusterVerified publisher0.2.41 of 1See more

openstack-kamaji-cluster openstack-kamaji-cluster 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
stdlib@go1.24.7
1.25.11

Open the chart page →

763
opentelemetry-demoopentelemetry-helmVerified publisher0.41.24 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

4 of the 34 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
stdlib@go1.25.7
1.25.11
jaegertracing/jaeger:2.19.0ede4864215be
stdlib@go1.26.3
1.25.11
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.11
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
stdlib@go1.25.10
1.25.11

Open the chart page →

22,916
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
stdlib@go1.23.7
1.25.11

Open the chart page →

6,936
opikopikOfficialVerified publisher2.2.646 of 13See more

opik opik 2.2.64

6 of the 13 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
stdlib@go1.25.5
1.25.11
altinity/clickhouse-operator:0.27.1a802b3a19d20
stdlib@go1.26.3
1.25.11
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.25.11
library/mysql:8.4.2ac80b6e09e5b
stdlib@go1.18.2
1.25.11
library/zookeeper:3.9.4dfa9ba46d14b
stdlib@go1.18.1
1.25.11
ghcr.io/comet-ml/opik/opik-python-backend:2.2.64272d92a59e8a
stdlib@go1.26.3
1.25.11

Open the chart page →

14,444
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
stdlib@go1.24.13
1.25.11
shaowenchen/ops-server:latest315444f703f4
stdlib@go1.24.9
1.25.11

Open the chart page →

9,101
orbitalregorbitalregVerified publisher0.3.02 of 4See more

orbitalreg orbitalreg 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.11
orbitalreg/orbitalreg-api:0.1.045f2620337af
stdlib@go1.22.12
1.25.11

Open the chart page →

2,286
kubernetes-dashboard-proxyosc0.7.23 of 4See more

kubernetes-dashboard-proxy osc 0.7.2

3 of the 4 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.7.02e500d29e9d5
stdlib@go1.19
1.25.11
kubernetesui/metrics-scraper:v1.0.876049887f07a
stdlib@go1.18.2
1.25.11
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
stdlib@go1.16
1.25.11

Open the chart page →

6,012
osc-bsu-csi-driverosc-bsu-csi-driverVerified publisher2.2.05 of 6See more

osc-bsu-csi-driver osc-bsu-csi-driver 2.2.0

5 of the 6 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.25.11
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
stdlib@go1.24.6
1.25.11
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.25.11
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.25.11

Open the chart page →

2,370
hlf-caowkin2.1.02 of 2See more

hlf-ca owkin 2.1.0

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
stdlib@go1.15.7
1.25.11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.25.11

Open the chart page →

3,431
hlf-ordowkin3.1.01 of 1See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.2.137294e05209b
stdlib@go1.14.4
1.25.11

Open the chart page →

3,357
hlf-peerowkin5.1.01 of 1See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.2.1bf4995c86af6
stdlib@go1.14.4
1.25.11

Open the chart page →

3,695
prometheus-cachethqoxyno-zetaVerified publisher1.1.11 of 1See more

prometheus-cachethq oxyno-zeta 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
oxynozeta/prometheus-cachethq:1.1.131f11669d597
stdlib@go1.15.1
1.25.11

Open the chart page →

1,713
ngrok-operatorpaganuzzi0.0.21 of 1See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
stdlib@go1.15.12
1.25.11

Open the chart page →

2,811
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
stdlib@go1.26.3
1.25.11

Open the chart page →

3,715
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
stdlib@go1.24.4
1.25.11

Open the chart page →

8,553
pardus-nginx-nodeportpardus-charts0.5.01 of 1See more

pardus-nginx-nodeport pardus-charts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
uderelier19/pardus-nginx:25-nodeport8ab640b44e3f
stdlib@go1.24.4
1.25.11

Open the chart page →

320
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
stdlib@go1.20.5
1.25.11

Open the chart page →

6,918
patch-operatorpatch-operator0.1.112 of 2See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
stdlib@go1.15.15
1.25.11
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
stdlib@go1.21.9
1.25.11

Open the chart page →

7,840
pbuf-registrypbuf-registry0.4.12 of 2See more

pbuf-registry pbuf-registry 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/postgres:18.1-alpine3.2144d837eb4c2e
stdlib@go1.24.6
1.25.11
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
stdlib@go1.25.5
1.25.11

Open the chart page →

1,948
pdf-editor-helmpdf-editor-web1.0.02 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-backend-rotate316e203b8bf5
stdlib@go1.18.7
1.25.11
dipugodocker/pdf-editor:1.0-backend-merge70b07544a604
stdlib@go1.18.7
1.25.11

Open the chart page →

4,206
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
stdlib@go1.24.4
1.25.11

Open the chart page →

7,128
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
stdlib@go1.26.2
1.25.11

Open the chart page →

825
pgbouncerpgbouncer-helm0.6.01 of 2See more

pgbouncer pgbouncer-helm 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
apache/airflow:airflow-pgbouncer-exporter-2025.03.05-0.18.0adf7260c2c5f
stdlib@go1.23.7
1.25.11

Open the chart page →

471
spirephilips-labsVerified publisher0.12.25 of 6See more

spire philips-labs 0.12.2

5 of the 6 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-csi-driver:0.2.34144101005b2
stdlib@go1.20.1
1.25.11
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
stdlib@go1.20.1
1.25.11
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
stdlib@go1.20.1
1.25.11
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
stdlib@go1.20.1
1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2a13bff2ed69a
stdlib@go1.19
1.25.11

Open the chart page →

7,269
full-housephilmtd1.3.11 of 1See more

full-house philmtd 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
philmtd/full-house:1.9.0d68a6bb8a2bf
stdlib@go1.26.3
1.25.11

Open the chart page →

117
chadbotphntom0.2.31 of 1See more

chadbot phntom 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
phntom/chadbot:0.2.397c28e4178ad
stdlib@go1.21.5
1.25.11

Open the chart page →

1,103
chartmuseumphntom4.0.201 of 1See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
phntom/chartmuseum:v0.16.053883b65d9b7
stdlib@go1.19.3
1.25.11

Open the chart page →

2,948
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.11

Open the chart page →

3,032
phpipamphpipam-helmVerified publisher1.0.121 of 3See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/mysql:8.0.40d58ac93387f6
stdlib@go1.18.2
1.25.11

Open the chart page →

3,778
pipelinewise-operatorpipelinewise-operatorVerified publisher0.5.11 of 1See more

pipelinewise-operator pipelinewise-operator 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
dirathea/pipelinewise-operator:v0.5.08d4c9f773ae1
stdlib@go1.15.8
1.25.11

Open the chart page →

2,121
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
stdlib@go1.24.6
1.25.11

Open the chart page →

5,204
podtracepodtraceOfficialVerified publisher0.14.81 of 2See more

podtrace podtrace 0.14.8

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
alpine/k8s:1.37.0b421c2e9419e
stdlib@go1.24.0
1.25.11

Open the chart page →

598
secrets-store-csi-driver-provider-awsportefaix-hub0.4.01 of 1See more

secrets-store-csi-driver-provider-aws portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Open the chart page →

2,212
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
stdlib@go1.14.4
1.25.11

Open the chart page →

32,033
postfix-exporterpostfix-exporterVerified publisher0.2.01 of 1See more

postfix-exporter postfix-exporter 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/hsn723/postfix_exporter:0.20.0b7da7c554018
stdlib@go1.26.2
1.25.11

Open the chart page →

419
postgres-backuppostgres-backup0.3.02 of 2See more

postgres-backup postgres-backup 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.25.11
nerzhul/mc-arm64:2020.10.034215df511f31
stdlib@go1.15.2
1.25.11

Open the chart page →

5,468
postgresqlpostgresqlVerified publisher0.3.172 of 2See more

postgresql postgresql 0.3.17

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/postgres:18.6-alpined3e1620b530c
stdlib@go1.24.6
1.25.11
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
stdlib@go1.24.6
1.25.11

Open the chart page →

1,268
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.25.11

Open the chart page →

1,649
rethinkdbpozetron1.1.91 of 1See more

rethinkdb pozetron 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
pozetroninc/rethinkdb-cluster:v2.4.16b06a098f994
stdlib@go1.16.9
1.25.11

Open the chart page →

2,912
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
stdlib@go1.25.3
1.25.11

Open the chart page →

2,498
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
stdlib@go1.25.6
1.25.11

Open the chart page →

2,139

Container images carrying it

4,681 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
deluan/navidrome:0.49.311a24da08977
stdlib@go1.19.5
1.25.11
1
deluan/navidrome:0.50.02cf4442b0099
stdlib@go1.21.0
1.25.11
1
deluan/navidrome:0.43.04e9ae3bff6aa
stdlib@go1.16.4
1.25.11
1
deluan/navidrome:0.61.29fa40b3d8dec
stdlib@go1.25.9
1.25.11
1
denniswitt/yas3p:0.2.488a235619af6
stdlib@go1.26.1
1.25.11
1
devopsfaith/krakend:2.6.34c678c224f67
stdlib@go1.22.3
1.25.11
1
devopsfaith/krakend:2.7.09219cda867e2
stdlib@go1.22.5
1.25.11
1
devopstales/trivy-operator:2.575136aa7a26e
stdlib@go1.18.10
1.25.11
1
devsecurely/cview-issuer:0.0.42eecd4314e933
stdlib@go1.25.10
1.25.11
1
devspacecloud/manager:0.3.349c397413f7b
stdlib@go1.13.8
1.25.11
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
stdlib@go1.21.6
1.25.11
1
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
stdlib@go1.16.7
1.25.11
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
stdlib@go1.22.12
1.25.11
1
dgraph/ratel:v25.0.34cae1ff95027
stdlib@go1.23.10
1.25.11
1
digitalocean/do-operator:v0.1.65e5deb4db76e
stdlib@go1.18.10
1.25.11
1
dipugodocker/pdf-editor:1.0-backend-rotate316e203b8bf5
stdlib@go1.18.7
1.25.11
1
dipugodocker/pdf-editor:1.0-backend-merge70b07544a604
stdlib@go1.18.7
1.25.11
1
dirathea/pipelinewise-operator:v0.5.08d4c9f773ae1
stdlib@go1.15.8
1.25.11
1
directus/directus:12.0.29c8470ea465c
stdlib@go1.23.12
1.25.11
1
directus/directus:11.1.0e3c8bb975350
stdlib@go1.20.7
1.25.11
1
distribution/distribution:3.1.1bca24727f400
stdlib@go1.25.9
1.25.11
1
distribution/distribution:2.8.3f84b2078238f
stdlib@go1.20.8
1.25.11
1
djjudas21/nova-exporter:0.0.10e9094580885c
stdlib@go1.24.4
1.25.11
1
djkormo/adcs-issuer:2.1.29f34e87e7586
stdlib@go1.22.6
1.25.11
1
dnsforge/xteve:latest4d9a685c8c28
stdlib@go1.16.2
1.25.11
1
dobtc/bitcoin:25.1a870f7cb1105
stdlib@go1.19.8
1.25.11
1
dockerdaemon0901/rolldice:v14e5bfe179c7e
stdlib@go1.21.0
1.25.11
1
documenso/documenso:v1.8.17f16a9449f18
stdlib@go1.20.12
1.25.11
1
dollarshaveclub/furan2:master14a257836529
stdlib@go1.17.2
1.25.11
1
dollarshaveclub/thermite:0.0.31663cbf25fcfe
stdlib@go1.17.1
1.25.11
1
donetick/donetick:v0.1.79a1cc21dd5a37
stdlib@go1.24.13
1.25.11
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
stdlib@go1.19.12
1.25.11
1
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
stdlib@go1.19.10
1.25.11
1
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
stdlib@go1.19.10
1.25.11
1
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
stdlib@go1.19.9
1.25.11
1
dongjiang1989/lxcfs-webhook:latestc1f19557bdcb
stdlib@go1.26.0
1.25.11
1
dongjiang1989/ns-node-affinity:latest451f7823723c
stdlib@go1.18.5
1.25.11
1
dongjiang1989/pingmesh-agent:latest355fa4be8e97
stdlib@go1.22.9
1.25.11
1
dongjiang1989/pingmesh-agent:v1.2.2c82de0272da0
stdlib@go1.22.9
1.25.11
1
doorcloud/apim-operator:v3.0.44e6ef8d72c3e
stdlib@go1.22.12
1.25.11
1
dossif/redminebot:0.2.296dcd2c0e9f2
stdlib@go1.17.13
1.25.11
1
douz/overlord:latestf2bc7fc068c1
stdlib@go1.14.5
1.25.11
1
dragonflyoss/client:v0.1.82edf3e921f4e0
stdlib@go1.21.5
1.25.11
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
stdlib@go1.21.1
1.25.11
1
dragonflyoss/scheduler:v2.1.49523785c77787
stdlib@go1.21.1
1.25.11
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
stdlib@go1.26.2
1.25.11
1
drone/drone:2.28.255897c8fb22d
stdlib@go1.24.13
1.25.11
1
drone/drone-runner-docker:1.8.1137e79c5e23c
stdlib@go1.16.15
1.25.11
1
drone/kubernetes-secrets:latest206df2280ecf
stdlib@go1.13.15
1.25.11
1
drorivry4/rego:lateste035d49b15ca
stdlib@go1.22.0
1.25.11
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.