CVE-2026-42504

High

Advisory

Published 2 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,158; of 17,813 indexed, latest versions
Container images: 4,758; deployed by those charts
Fix available: 1 of 2; affected packages

Quadratic complexity in WordDecoder.DecodeHeader in mime

Carried by container images the latest versions of 4,158 of 17,813 indexed charts deploy, on 4,758 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+184 more	1.25.11	4,758

OSV records: DEBIAN-CVE-2026-42504 GO-2026-5038
Also known as: BIT-golang-2026-42504

Charts affected

4,158 by stars

Chart

Latest

Affected images

Radar Score

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	stdlib@go1.23.3	1.25.11
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	stdlib@go1.23.3	1.25.11
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	stdlib@go1.23.3	1.25.11

Open the chart page →

1,957

lightrun-helm-chartlightrun-helm-chart

3.52.0

1 of 9 See more

lightrun-helm-chart lightrun-helm-chart 3.52.0

1 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mysql :8.4.10	8dbcf531a03a	stdlib@go1.24.6	1.25.11

Open the chart page →

463

mattermost-operatormattermost

1.0.5

1 of 1 See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mattermost/mattermost-operator :v1.25.4	bac00a2bbd33	stdlib@go1.24.13	1.25.11

Open the chart page →

273

meshery-operatormeshery

1.0.70

1 of 2 See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	stdlib@go1.26.3	1.25.11

Open the chart page →

2,462

missing-container-metricsmissing-container-metrics

0.1.1

1 of 1 See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.25.11

Open the chart page →

2,419

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	stdlib@go1.22.4	1.25.11

Open the chart page →

1,358

system-upgrade-controllernimbolus

0.7.0

1 of 1 See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.18.0	9813f85653c8	stdlib@go1.25.3	1.25.11

Open the chart page →

318

olmolm

0.45.0

1 of 1 See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olm :v0.45.0	f228c7a6b8c5	stdlib@go1.26.3	1.25.11

Open the chart page →

448

ketoory

0.64.0

1 of 1 See more

979

oathkeeperory

0.64.0

1 of 1 See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
oryd/oathkeeper :v26.2.0	467329abde34	stdlib@go1.26.0	1.25.11

Open the chart page →

932

passboltpassbolt

2.1.1

3 of 6 See more

passbolt passbolt 2.1.1

3 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.25.11
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.11
library/mariadb :latest	d4fdec0510ad	stdlib@go1.24.6	1.25.11

Open the chart page →

13,270

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	stdlib@go1.26.1	1.25.11

Open the chart page →

944

rekorsigstore

1.8.6

6 of 9 See more

rekor sigstore 1.8.6

6 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.25.11
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.25.11
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	stdlib@go1.25.0	1.25.11
ghcr.io/sigstore/scaffolding/createtreedigest-pinned	e5232e8c9122	stdlib@go1.25.0	1.25.11
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	stdlib@go1.26.0	1.25.11
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	stdlib@go1.26.0	1.25.11

Open the chart page →

5,530

mssqlserver-2022simcube

1.2.3

1 of 1 See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2022-latest	4402d880dd4c	stdlib@go1.26.1	1.25.11

Open the chart page →

2,666

snyk-monitorsnyk

2.23.26

1 of 2 See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
snyk/kubernetes-monitor :2.23.26	fb5ad76ce84e	stdlib@go1.25.10	1.25.11

Open the chart page →

598

swo-k8s-collectorsolarwinds

5.3.0

2 of 3 See more

swo-k8s-collector solarwinds 5.3.0

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.9.0	26f82b148dfe	stdlib@go1.25.9	1.25.11
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	stdlib@go1.26.2	1.25.11

Open the chart page →

2,445

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.25.11

Open the chart page →

1,260

thehivestrangebee-helm

1.0.7

4 of 7 See more

thehive strangebee-helm 1.0.7

4 of the 7 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	stdlib@go1.24.6	1.25.11
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	stdlib@go1.25.0	1.25.11
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	stdlib@go1.24.6	1.25.11
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	stdlib@go1.24.6	1.25.11

Open the chart page →

16,535

truenas-csptruenas-csp

1.2.4

10 of 11 See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	stdlib@go1.25.10	1.25.11
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	stdlib@go1.26.3	1.25.11
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.11
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.11
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.11
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.11

Open the chart page →

6,027

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	stdlib@go1.20.14	1.25.11
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	stdlib@go1.19.13	1.25.11
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	stdlib@go1.21.9	1.25.11
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	stdlib@go1.21.9	1.25.11
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.25.11
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	stdlib@go1.22.2	1.25.11

Open the chart page →

14,375

filebrowserutkuozdemir

1.0.0

1 of 1 See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.25.11

Open the chart page →

3,076

vsphere-csivsphere-tmm

3.8.1

7 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	stdlib@go1.24.4	1.25.11
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	stdlib@go1.24.4	1.25.11
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.11
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.11
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	stdlib@go1.21.5	1.25.11
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.25.11
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	stdlib@go1.23.1	1.25.11

Open the chart page →

3,960

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	stdlib@go1.14.12	1.25.11

Open the chart page →

6,270

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	stdlib@go1.19.10	1.25.11
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	stdlib@go1.19.10	1.25.11

Open the chart page →

2,860

agonesagones

1.60.0

1 of 5 See more

agones agones 1.60.0

1 of the 5 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.4	9ccd82364762	stdlib@go1.25.9	1.25.11

Open the chart page →

1,117

kubedbappscode

2026.7.10

2 of 8 See more

kubedb appscode 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	stdlib@go1.24.13	1.25.11
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	stdlib@go1.25.10	1.25.11

Open the chart page →

4,502

cloudflaredartur9010

1.0.9

3 of 3 See more

cloudflared artur9010 1.0.9

3 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	stdlib@go1.24.13	1.25.11
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	stdlib@go1.26.1	1.25.11
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	stdlib@go1.26.1	1.25.11

Open the chart page →

3,023

bambooatlassian-data-center

2.0.15

1 of 2 See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
atlassian/bamboo :12.1.11	4af4bb6c8d46	stdlib@go1.22.2	1.25.11

Open the chart page →

33,391

baserowbaserow-chart

1.0.56

3 of 6 See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	stdlib@go1.21.12	1.25.11
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	stdlib@go1.21.10	1.25.11
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.25.11

Open the chart page →

17,791

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	stdlib@go1.17.13	1.25.11
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	stdlib@go1.19.9	1.25.11

Open the chart page →

3,356

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	stdlib@go1.23.6	1.25.11

Open the chart page →

1,077

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	stdlib@go1.16.7	1.25.11

Open the chart page →

3,088

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	stdlib@go1.15.5	1.25.11
library/traefik :2.5.4	7d0228d19042	stdlib@go1.17.3	1.25.11

Open the chart page →

132,171

openstack-cloud-controller-managercloud-provider-openstack

2.36.5

1 of 1 See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager :v1.36.0	e354e40db2d0	stdlib@go1.26.2	1.25.11

Open the chart page →

512

immudbcodenotary

1.9.7

1 of 1 See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
codenotary/immudb :1.9.7	7c85d7cc4f22	stdlib@go1.18.10	1.25.11

Open the chart page →

1,254

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	stdlib@go1.23.12	1.25.11

Open the chart page →

1,713

dolibarrcowboysysop

9.0.3

2 of 3 See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	stdlib@go1.23.7	1.25.11
wait4x/wait4x :3.3.1	4dcd86307de1	stdlib@go1.24.3	1.25.11

Open the chart page →

9,598

csi-wekafsplugincsi-wekafs

0.6.2-0

1 of 6 See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.25.11

Open the chart page →

2,832

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	stdlib@go1.21.4	1.25.11
quay.io/jupyterhub/k8s-image-awaiter :3.2.1	f65b644ed6db	stdlib@go1.18.10	1.25.11
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	stdlib@go1.20.11	1.25.11

Open the chart page →

14,290

seafiledatamate

0.6.0

5 of 6 See more

seafile datamate 0.6.0

5 of the 6 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	stdlib@go1.21.7	1.25.11
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	stdlib@go1.22.6	1.25.11
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	stdlib@go1.22.5	1.25.11
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	stdlib@go1.21.6	1.25.11
datamate/seafile-professional :11.0.20	2dd66b722464	stdlib@go1.21.4	1.25.11

Open the chart page →

77,779

k8s-event-loggerdeliveryhero

1.4.0

1 of 1 See more

k8s-event-logger deliveryhero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.7	0234bdec4626	stdlib@go1.24.13	1.25.11

Open the chart page →

273

drone-runner-dockerdrone

0.7.0

2 of 3 See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
drone/drone-runner-docker :1.8.1	137e79c5e23c	stdlib@go1.16.15	1.25.11
library/docker :20-dind	af96c680a7e1	stdlib@go1.19.7	1.25.11

Open the chart page →

5,693

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	stdlib@go1.21.6	1.25.11

Open the chart page →

1,988

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	stdlib@go1.24.12	1.25.11

Open the chart page →

1,792

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	stdlib@go1.15.1	1.25.11

Open the chart page →

3,280

lndfold

0.3.15

3 of 4 See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.16.4-beta-c	287129953689	stdlib@go1.21.0	1.25.11
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	stdlib@go1.13.12	1.25.11
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	stdlib@go1.14.12	1.25.11

Open the chart page →

8,858

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
jwilder/dockerize :v0.10.0	839cd6793d19	stdlib@go1.25.6	1.25.11
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	stdlib@go1.23.3	1.25.11

Open the chart page →

57,241

glpiglpi-conteiner

0.1.0

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mariadb :latest	d4fdec0510ad	stdlib@go1.24.6	1.25.11

Open the chart page →

11,437

mariadbgroundhog2k

4.44.0

1 of 1 See more

mariadb groundhog2k 4.44.0

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mariadb :11.8.4	6b848cb24fbb	stdlib@go1.24.6	1.25.11

Open the chart page →

2,973

mongodbgroundhog2k

0.8.3

1 of 1 See more

mongodb groundhog2k 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-42504.

Container image	Digest	Package	Fixed in
library/mongo :8.3.11	5d7043a4ffe0	stdlib@go1.24.6	1.25.11

Open the chart page →

935

Container images carrying it

4,758 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	stdlib@go1.22.3	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	stdlib@go1.24.6	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	stdlib@go1.17.10	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.75.1	a7cc63108511	stdlib@go1.22.4	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.88.0	b4f51de53357	stdlib@go1.25.5	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	stdlib@go1.17.6	1.25.11	1
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	stdlib@go1.19.3	1.25.11	1
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	stdlib@go1.23.3	1.25.11	1
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	stdlib@go1.19.2	1.25.11	1
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	stdlib@go1.18.4	1.25.11	1
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	stdlib@go1.23.6	1.25.11	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	stdlib@go1.24.5	1.25.11	1
quay.io/prometheus/prometheus :v3.2.1	6927e0919a14	stdlib@go1.23.6	1.25.11	1
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	stdlib@go1.17.8	1.25.11	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	stdlib@go1.24.3	1.25.11	1
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	stdlib@go1.17.8	1.25.11	1
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	stdlib@go1.26.2	1.25.11	1
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	stdlib@go1.26.2	1.25.11	1
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	stdlib@go1.22.5	1.25.11	1
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	stdlib@go1.24.1	1.25.11	1
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	stdlib@go1.20.4	1.25.11	1
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	stdlib@go1.26.3	1.25.11	1
quay.io/prometheus/statsd-exporter :v0.27.2	9ed70604d941	stdlib@go1.22.8	1.25.11	1
quay.io/prometheus/statsd-exporter :v0.22.8	f53cca722a03	stdlib@go1.18.6	1.25.11	1
quay.io/rabbitmqoperator/messaging-topology-operator :1.18.1	f97c36882244	stdlib@go1.24.6	1.25.11	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	stdlib@go1.25.5	1.25.11	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	stdlib@go1.20.8	1.25.11	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	stdlib@go1.19.13	1.25.11	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	stdlib@go1.21.9	1.25.11	1
quay.io/redhat-developer/servicebinding-operator	16286ac84ddd	stdlib@go1.20.6	1.25.11	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	stdlib@go1.23.9	1.25.11	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	stdlib@go1.16	1.25.11	1
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	stdlib@go1.16.7	1.25.11	1
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	stdlib@go1.18	1.25.11	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	stdlib@go1.21.0	1.25.11	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	stdlib@go1.18.1	1.25.11	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	stdlib@go1.18.1	1.25.11	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	stdlib@go1.18.1	1.25.11	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	stdlib@go1.18.1	1.25.11	1
quay.io/spotahome/redis-operator :latest	8c772955184e	stdlib@go1.20.7	1.25.11	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	stdlib@go1.25.4	1.25.11	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	stdlib@go1.20.5	1.25.11	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	stdlib@go1.25.3	1.25.11	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	stdlib@go1.15	1.25.11	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	stdlib@go1.21.13	1.25.11	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	stdlib@go1.15.2	1.25.11	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.25.11	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	stdlib@go1.13.15	1.25.11	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	stdlib@go1.13.8	1.25.11	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.25.11	1