Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	stdlib@go1.23.1	1.25.12
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	stdlib@go1.23.4	1.25.12
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	stdlib@go1.23.6	1.25.12

Open the chart page →

9,630

management-portalradar-base

1.7.0

1 of 1 See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	stdlib@go1.26.2	1.25.12

Open the chart page →

3,245

nginx-gateway-fabricradar-base

2.6.6

1 of 1 See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	stdlib@go1.26.4	1.25.12

Open the chart page →

132

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	stdlib@go1.24.4	1.25.12

Open the chart page →

512

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	stdlib@go1.23.7	1.25.12

Open the chart page →

1,837

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	stdlib@go1.23.4	1.25.12

Open the chart page →

2,197

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	stdlib@go1.23.2	1.25.12

Open the chart page →

1,578

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	stdlib@go1.24.4	1.25.12

Open the chart page →

512

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	stdlib@go1.23.12	1.25.12

Open the chart page →

412

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	stdlib@go1.23.12	1.25.12

Open the chart page →

412

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	stdlib@go1.26.4	1.25.12

Open the chart page →

1,954

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,279

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	stdlib@go1.21.5	1.25.12

Open the chart page →

1,301

rawfile-localpvrawfile

0.15.3

5 of 6 See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.12

Open the chart page →

2,800

aws-ec2-runtime-checkerrayselfs-charts

0.1.4

1 of 1 See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
rayselfs/aws-ec2-runtime-checker :v0.1.5	562e5b2f81ce	stdlib@go1.24.11	1.25.12

Open the chart page →

292

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	stdlib@go1.25.3	1.25.12

Open the chart page →

767

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	stdlib@go1.15.8	1.25.12

Open the chart page →

3,746

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,279

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.25.12

Open the chart page →

3,570

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.25.12

Open the chart page →

4,978

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.25.12

Open the chart page →

15,304

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.25.12

Open the chart page →

15,304

etherpadredhat-cop

0.0.8

1 of 1 See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
etherpad/etherpad :latest	6020e7b57f4b	stdlib@go1.26.4	1.25.12

Open the chart page →

915

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	stdlib@go1.15.14	1.25.12

Open the chart page →

11,450

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	stdlib@go1.21.3	1.25.12

Open the chart page →

16,392

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	stdlib@go1.16	1.25.12

Open the chart page →

29,589

redirectorredirector

0.0.3

1 of 1 See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/chilledornaments/redirector :latest	94d48447d967	stdlib@go1.26.4	1.25.12

Open the chart page →

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.25.12

Open the chart page →

1,908

redis-enforce-expireredis-enforce-expire

1.0.0

1 of 1 See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
udhos/redis-enforce-expire :1.0.0	615b6a7d742e	stdlib@go1.26.1	1.25.12

Open the chart page →

1,297

registry-credsregistry-creds

0.2.3

1 of 1 See more

registry-creds registry-creds 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/alexellis/registry-creds :0.3.2-rc1	f5c72501e559	stdlib@go1.19.5	1.25.12

Open the chart page →

1,043

regorego

0.1.3

1 of 1 See more

2,970

longhornrelease-longhorn

1.12.0

3 of 3 See more

longhorn release-longhorn 1.12.0

3 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.0	fd245bae2e82	stdlib@go1.25.10	1.25.12
longhornio/longhorn-share-manager :v1.12.0	cb9d6863e4c6	stdlib@go1.26.3	1.25.12
longhornio/longhorn-ui :v1.12.0	3870d52a2b0a	stdlib@go1.25.10	1.25.12

Open the chart page →

1,614

relfinder-reformedrelfinderreformed

2.0.0

1 of 2 See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.25.12

Open the chart page →

6,361

reporting-chartreporting-application

0.1.0

1 of 1 See more

reporting-chart reporting-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.25.12

Open the chart page →

1,585

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
reportportal/migrations :5.7.0	da5d8e1395fe	stdlib@go1.13.6	1.25.12
reportportal/service-index :5.0.11	2b27a2d7a87d	stdlib@go1.17.1	1.25.12

Open the chart page →

25,721

resource-manager-operatorresource-manager-operator

0.1.0

1 of 1 See more

resource-manager-operator resource-manager-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	stdlib@go1.19	1.25.12

Open the chart page →

1,624

redminerestic-pvc-backup

0.2.6

1 of 1 See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.25.12

Open the chart page →

4,330

restic-pvc-backuprestic-pvc-backup

0.2.1

2 of 2 See more

restic-pvc-backup restic-pvc-backup 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ngosang/restic-exporter :2.1.2	a8f9cfa30162	stdlib@go1.26.4	1.25.12
restic/restic :0.19.1	136600b6ff68	stdlib@go1.26.4	1.25.12

Open the chart page →

958

retromretsamedoc

2026.2.5

1 of 1 See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	stdlib@go1.20.12	1.25.12

Open the chart page →

7,168

spoolmanretsamedoc

26.9.0

1 of 1 See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.25.12

Open the chart page →

1,848

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	stdlib@go1.13.10	1.25.12

Open the chart page →

7,502

claude-relayrevolution1

0.1.37

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	stdlib@go1.20.12	1.25.12

Open the chart page →

4,816

istio-fortiorgnu

1.0.3

1 of 1 See more

istio-fortio rgnu 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
fortio/fortio :latest_release	fc8221136fe2	stdlib@go1.23.9	1.25.12

Open the chart page →

547

whoamirgnu

1.0.0

1 of 1 See more

whoami rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.25.12

Open the chart page →

1,230

security-sample-chartrimusz

0.2.1

1 of 3 See more

security-sample-chart rimusz 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.25.12

Open the chart page →

1,348

backup-maker-controllerriotkit-org

0.1.2

1 of 1 See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	stdlib@go1.19.4	1.25.12

Open the chart page →

1,576

Container images carrying it

4,943 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.25.12	1
arunvelsriram/utils :latest	655ad18fd8d6	stdlib@go1.23.8	1.25.12	1
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.25.12	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	stdlib@go1.14.12	1.25.12	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	stdlib@go1.18.2	1.25.12	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	stdlib@go1.17.13	1.25.12	1
assistiot/distributed_broker :1.0.0	33e02dad168f	stdlib@go1.17.13	1.25.12	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	stdlib@go1.17.13	1.25.12	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.25.12	1
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.25.12	1
assistiot/logging_auditing :1.0.0	790dbb198e86	stdlib@go1.17.13	1.25.12	1
assistiot/open_api_backend :1.1.2	30812ba93555	stdlib@go1.18.6	1.25.12	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.22.1	1.25.12	1
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	stdlib@go1.24.13	1.25.12	1
atlassian/bamboo :12.1.11	4af4bb6c8d46	stdlib@go1.22.2	1.25.12	1
atlassian/bamboo-agent-base :12.1.11	51c2d7274eef	stdlib@go1.22.2	1.25.12	1
automatischio/automatisch :0.15.0	3bace7a12d5f	stdlib@go1.23.8	1.25.12	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	stdlib@go1.22.5	1.25.12	1
aveshasystems/spiffe-csi-driver :0.2.7	53fc6d009e04	stdlib@go1.22.2	1.25.12	1
b3log/siyuan :v3.1.25	95c0d129bc19	stdlib@go1.24.1	1.25.12	1
baserow/backend :1.31.1	e0b3c8130b91	stdlib@go1.19.8	1.25.12	1
baserow/baserow :1.30.1	df0c42eb67e8	stdlib@go1.21.5	1.25.12	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	stdlib@go1.17.8	1.25.12	1
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.25.12	1
bedag/goblackhole :0.2.0	447a88598f4c	stdlib@go1.16.6	1.25.12	1
beopenit/door-agent :v3.0.5	d24c323fe7c3	stdlib@go1.23.12	1.25.12	1
beopenit/door-cd-operator :v3.0.4	d3999cb8d026	stdlib@go1.23.9	1.25.12	1
beopenit/door-helm :v3.0.1	b4d9f9bee224	stdlib@go1.19.13	1.25.12	1
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	stdlib@go1.18.10	1.25.12	1
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	stdlib@go1.26.4	1.25.12	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	stdlib@go1.23.5	1.25.12	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	stdlib@go1.17.6	1.25.12	1
bicarus/mx-notifier :1.1.8	bed688d16762	stdlib@go1.17.6	1.25.12	1
bicarus/wg-access-server :v0.8.2	06cab48e9334	stdlib@go1.19.3	1.25.12	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.25.12	1
binrc/headcni :1.0.10	e199c334b957	stdlib@go1.22.10	1.25.12	1
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	stdlib@go1.22.2	1.25.12	1
binwiederhier/ntfy :v2.6.2	83e2e43d9956	stdlib@go1.20.5	1.25.12	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	stdlib@go1.25.0	1.25.12	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	stdlib@go1.21.8	1.25.12	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	stdlib@go1.21.7	1.25.12	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	stdlib@go1.23.9	1.25.12	1
bitnamilegacy/git :latest	4b08d0c5af8d	stdlib@go1.23.10	1.25.12	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	stdlib@go1.23.4	1.25.12	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.25.12	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.19.6	1.25.12	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.25.12	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	stdlib@go1.17	1.25.12	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.25.12	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	stdlib@go1.21.10	1.25.12	1