CVE-2026-42504

High

Advisory

Published 2 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,158; of 17,813 indexed, latest versions
Container images: 4,758; deployed by those charts
Fix available: 1 of 2; affected packages

Quadratic complexity in WordDecoder.DecodeHeader in mime

Carried by container images the latest versions of 4,158 of 17,813 indexed charts deploy, on 4,758 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+184 more	1.25.11	4,758

OSV records: DEBIAN-CVE-2026-42504 GO-2026-5038
Also known as: BIT-golang-2026-42504

Charts affected

4,158 by stars

Chart

Latest

Affected images

Radar Score

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	stdlib@go1.23.3	1.25.11
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	stdlib@go1.23.3	1.25.11
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	stdlib@go1.23.3	1.25.11

Open the chart page →

1,957

lightrun-helm-chartlightrun-helm-chart

3.52.0

1 of 9 See more

lightrun-helm-chart lightrun-helm-chart 3.52.0

1 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mysql :8.4.10	8dbcf531a03a	stdlib@go1.24.6	1.25.11

Open the chart page →

463

mattermost-operatormattermost

1.0.5

1 of 1 See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mattermost/mattermost-operator :v1.25.4	bac00a2bbd33	stdlib@go1.24.13	1.25.11

Open the chart page →

273

meshery-operatormeshery

1.0.70

1 of 2 See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	stdlib@go1.26.3	1.25.11

Open the chart page →

2,462

missing-container-metricsmissing-container-metrics

0.1.1

1 of 1 See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.25.11

Open the chart page →

2,419

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	stdlib@go1.22.4	1.25.11

Open the chart page →

1,358

system-upgrade-controllernimbolus

0.7.0

1 of 1 See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.18.0	9813f85653c8	stdlib@go1.25.3	1.25.11

Open the chart page →

318

olmolm

0.45.0

1 of 1 See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olm :v0.45.0	f228c7a6b8c5	stdlib@go1.26.3	1.25.11

Open the chart page →

448

ketoory

0.64.0

1 of 1 See more

979

oathkeeperory

0.64.0

1 of 1 See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
oryd/oathkeeper :v26.2.0	467329abde34	stdlib@go1.26.0	1.25.11

Open the chart page →

932

passboltpassbolt

2.1.1

3 of 6 See more

passbolt passbolt 2.1.1

3 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.25.11
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.11
library/mariadb :latest	d4fdec0510ad	stdlib@go1.24.6	1.25.11

Open the chart page →

13,270

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	stdlib@go1.26.1	1.25.11

Open the chart page →

944

rekorsigstore

1.8.6

6 of 9 See more

rekor sigstore 1.8.6

6 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.25.11
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.25.11
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	stdlib@go1.25.0	1.25.11
ghcr.io/sigstore/scaffolding/createtreedigest-pinned	e5232e8c9122	stdlib@go1.25.0	1.25.11
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	stdlib@go1.26.0	1.25.11
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	stdlib@go1.26.0	1.25.11

Open the chart page →

5,530

mssqlserver-2022simcube

1.2.3

1 of 1 See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2022-latest	4402d880dd4c	stdlib@go1.26.1	1.25.11

Open the chart page →

2,666

snyk-monitorsnyk

2.23.26

1 of 2 See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
snyk/kubernetes-monitor :2.23.26	fb5ad76ce84e	stdlib@go1.25.10	1.25.11

Open the chart page →

598

swo-k8s-collectorsolarwinds

5.3.0

2 of 3 See more

swo-k8s-collector solarwinds 5.3.0

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.9.0	26f82b148dfe	stdlib@go1.25.9	1.25.11
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	stdlib@go1.26.2	1.25.11

Open the chart page →

2,445

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.25.11

Open the chart page →

1,260

thehivestrangebee-helm

1.0.7

4 of 7 See more

thehive strangebee-helm 1.0.7

4 of the 7 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	stdlib@go1.24.6	1.25.11
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	stdlib@go1.25.0	1.25.11
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	stdlib@go1.24.6	1.25.11
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	stdlib@go1.24.6	1.25.11

Open the chart page →

16,535

truenas-csptruenas-csp

1.2.4

10 of 11 See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	stdlib@go1.25.10	1.25.11
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.11
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.11
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.11

Open the chart page →

6,027

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	stdlib@go1.20.14	1.25.11
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	stdlib@go1.19.13	1.25.11
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	stdlib@go1.21.9	1.25.11
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.25.11
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	stdlib@go1.22.2	1.25.11

Open the chart page →

14,375

filebrowserutkuozdemir

1.0.0

1 of 1 See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.25.11

Open the chart page →

3,076

vsphere-csivsphere-tmm

3.8.1

7 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	stdlib@go1.24.4	1.25.11
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	stdlib@go1.24.4	1.25.11
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.11
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	stdlib@go1.21.5	1.25.11
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.25.11
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	stdlib@go1.23.1	1.25.11

Open the chart page →

3,960

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	stdlib@go1.14.12	1.25.11

Open the chart page →

6,270

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	stdlib@go1.19.10	1.25.11
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	stdlib@go1.19.10	1.25.11

Open the chart page →

2,860

agonesagones

1.60.0

1 of 5 See more

agones agones 1.60.0

1 of the 5 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.4	9ccd82364762	stdlib@go1.25.9	1.25.11

Open the chart page →

1,117

kubedbappscode

2026.7.10

2 of 8 See more

kubedb appscode 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	stdlib@go1.24.13	1.25.11
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	stdlib@go1.25.10	1.25.11

Open the chart page →

4,502

cloudflaredartur9010

1.0.9

3 of 3 See more

cloudflared artur9010 1.0.9

3 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	stdlib@go1.24.13	1.25.11
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	stdlib@go1.26.1	1.25.11
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	stdlib@go1.26.1	1.25.11

Open the chart page →

3,023

bambooatlassian-data-center

2.0.15

1 of 2 See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
atlassian/bamboo :12.1.11	4af4bb6c8d46	stdlib@go1.22.2	1.25.11

Open the chart page →

33,391

baserowbaserow-chart

1.0.56

3 of 6 See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	stdlib@go1.21.12	1.25.11
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	stdlib@go1.21.10	1.25.11
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.25.11

Open the chart page →

17,791

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	stdlib@go1.17.13	1.25.11
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	stdlib@go1.19.9	1.25.11

Open the chart page →

3,356

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	stdlib@go1.23.6	1.25.11

Open the chart page →

1,077

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	stdlib@go1.16.7	1.25.11

Open the chart page →

3,088

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	stdlib@go1.15.5	1.25.11
library/traefik :2.5.4	7d0228d19042	stdlib@go1.17.3	1.25.11

Open the chart page →

132,171

openstack-cloud-controller-managercloud-provider-openstack

2.36.5

1 of 1 See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	stdlib@go1.26.2	1.25.11

Open the chart page →

512

immudbcodenotary

1.9.7

1 of 1 See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
codenotary/immudb :1.9.7	7c85d7cc4f22	stdlib@go1.18.10	1.25.11

Open the chart page →

1,254

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	stdlib@go1.23.12	1.25.11

Open the chart page →

1,713

dolibarrcowboysysop

9.0.3

2 of 3 See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	stdlib@go1.23.7	1.25.11
wait4x/wait4x :3.3.1	4dcd86307de1	stdlib@go1.24.3	1.25.11

Open the chart page →

9,598

csi-wekafsplugincsi-wekafs

0.6.2-0

1 of 6 See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.25.11

Open the chart page →

2,832

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	stdlib@go1.21.4	1.25.11
quay.io/jupyterhub/k8s-image-awaiter :3.2.1	f65b644ed6db	stdlib@go1.18.10	1.25.11
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	stdlib@go1.20.11	1.25.11

Open the chart page →

14,290

seafiledatamate

0.6.0

5 of 6 See more

seafile datamate 0.6.0

5 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	stdlib@go1.21.7	1.25.11
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	stdlib@go1.22.6	1.25.11
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	stdlib@go1.22.5	1.25.11
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	stdlib@go1.21.6	1.25.11
datamate/seafile-professional :11.0.20	2dd66b722464	stdlib@go1.21.4	1.25.11

Open the chart page →

77,779

k8s-event-loggerdeliveryhero

1.4.0

1 of 1 See more

k8s-event-logger deliveryhero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.7	0234bdec4626	stdlib@go1.24.13	1.25.11

Open the chart page →

273

drone-runner-dockerdrone

0.7.0

2 of 3 See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
drone/drone-runner-docker :1.8.1	137e79c5e23c	stdlib@go1.16.15	1.25.11
library/docker :20-dind	af96c680a7e1	stdlib@go1.19.7	1.25.11

Open the chart page →

5,693

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	stdlib@go1.21.6	1.25.11

Open the chart page →

1,988

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	stdlib@go1.24.12	1.25.11

Open the chart page →

1,792

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	stdlib@go1.15.1	1.25.11

Open the chart page →

3,280

lndfold

0.3.15

3 of 4 See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.16.4-beta-c	287129953689	stdlib@go1.21.0	1.25.11
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	stdlib@go1.13.12	1.25.11
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	stdlib@go1.14.12	1.25.11

Open the chart page →

8,858

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
jwilder/dockerize :v0.10.0	839cd6793d19	stdlib@go1.25.6	1.25.11
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	stdlib@go1.23.3	1.25.11

Open the chart page →

57,241

glpiglpi-conteiner

0.1.0

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mariadb :latest	d4fdec0510ad	stdlib@go1.24.6	1.25.11

Open the chart page →

11,437

mariadbgroundhog2k

4.44.0

1 of 1 See more

mariadb groundhog2k 4.44.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mariadb :11.8.4	6b848cb24fbb	stdlib@go1.24.6	1.25.11

Open the chart page →

2,973

mongodbgroundhog2k

0.8.3

1 of 1 See more

mongodb groundhog2k 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mongo :8.3.11	5d7043a4ffe0	stdlib@go1.24.6	1.25.11

Open the chart page →

935

Container images carrying it

4,758 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	stdlib@go1.23.4	1.25.11	1
public.ecr.aws/aktosecurity/mirror-api-logging :k8s_ebpf_core_imp	d94ce715f051	stdlib@go1.25.9	1.25.11	1
public.ecr.aws/aws-containers/retail-store-sample-catalog :1.3.0	b654b266fa32	stdlib@go1.24.6	1.25.11	1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.25.11	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.25.11	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	stdlib@go1.25.8	1.25.11	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	stdlib@go1.19.3	1.25.11	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	stdlib@go1.19.3	1.25.11	1
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.11	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	stdlib@go1.24.3	1.25.11	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	stdlib@go1.15.3	1.25.11	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	stdlib@go1.15.12	1.25.11	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	stdlib@go1.18.8	1.25.11	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	stdlib@go1.15.8	1.25.11	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	stdlib@go1.23.9	1.25.11	1
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	stdlib@go1.25.1	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	stdlib@go1.23.11	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	stdlib@go1.23.12	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.46.0	0bbb5f5ddf71	stdlib@go1.25.9	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	stdlib@go1.23.12	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer :1.27.0	86957bbeeff5	stdlib@go1.23.12	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	stdlib@go1.23.11	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	stdlib@go1.23.7	1.25.11	1
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	stdlib@go1.23.11	1.25.11	1
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.16.0-eksbuild.3	592d7034d6c7	stdlib@go1.26.1	1.25.11	1
public.ecr.aws/csi-components/livenessprobe :v2.18.0-eksbuild.3	8e307f4e5820	stdlib@go1.26.1	1.25.11	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	stdlib@go1.24.9	1.25.11	1
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	stdlib@go1.20	1.25.11	1
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	stdlib@go1.22.5	1.25.11	1
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	stdlib@go1.26.3	1.25.11	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	stdlib@go1.22.12	1.25.11	1
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	stdlib@go1.23.5	1.25.11	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	stdlib@go1.20.12	1.25.11	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	stdlib@go1.26.3	1.25.11	1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller :3.5.3-20260205	bf9db911deed	stdlib@go1.25.7	1.25.11	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	stdlib@go1.17.13	1.25.11	1
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	stdlib@go1.25.7	1.25.11	1
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	stdlib@go1.26.3	1.25.11	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	stdlib@go1.15.15	1.25.11	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	stdlib@go1.14.9	1.25.11	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent :v3.0.1	d75b6da94913	stdlib@go1.26.2	1.25.11	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	stdlib@go1.25.9	1.25.11	1
public.ecr.aws/k4y9r6y5/kratos :v25.4.0	e8014c6c58b6	stdlib@go1.25.2	1.25.11	1
public.ecr.aws/karpenter/controller :1.9.0	30a506c64fbb	stdlib@go1.25.7	1.25.11	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	stdlib@go1.19.3	1.25.11	1
public.ecr.aws/karpenter/controller :1.1.1	fe383abf1dbc	stdlib@go1.23.2	1.25.11	1
public.ecr.aws/kyos/evicted-pod-reaper :1.0.0	b9d047442ce2	stdlib@go1.24.6	1.25.11	1
public.ecr.aws/lumigo/lumigo-kubernetes-operator :69	491c39346b19	stdlib@go1.23.12	1.25.11	1
public.ecr.aws/lumigo/lumigo-kubernetes-rbac-proxy :69	6c2f0585cd6c	stdlib@go1.22.12	1.25.11	1