CVE-2026-42505

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,327; of 17,821 indexed, latest versions
Container images: 5,001; deployed by those charts
Fix available: 1 of 1; affected package

Invoking Encrypted Client Hello privacy leak in crypto/tls

Carried by container images the latest versions of 4,327 of 17,821 indexed charts deploy, on 5,001 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.12	5,001

OSV records: GO-2026-5856
Also known as: BIT-golang-2026-42505

Charts affected

4,327 by stars

Chart

Latest

Affected images

Radar Score

deepflowkubesphere-stable

6.2.606

5 of 8 See more

deepflow kubesphere-stable 6.2.606

5 of the 8 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.25.12
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	stdlib@go1.18.10	1.25.12
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	stdlib@go1.19.1	1.25.12
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.25.12
grafana/grafana :9.5.2	39c849cebccc	stdlib@go1.20.4	1.25.12

Open the chart page →

18,503

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	stdlib@go1.26.1	1.25.12

Open the chart page →

1,329

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	stdlib@go1.19.13	1.25.12
kubeedge/edgemesh-server :latest	a437cf5ec0ae	stdlib@go1.17.11	1.25.12

Open the chart page →

4,136

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	stdlib@go1.21.6	1.25.12
inaccel/mkrt :latest	187fd448b6f2	stdlib@go1.21.5	1.25.12
inaccel/reef :latest	c967218739f3	stdlib@go1.21.6	1.25.12

Open the chart page →

5,785

iomeshkubesphere-stable

1.1.0

23 of 25 See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	stdlib@go1.20.3	1.25.12
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	stdlib@go1.20.3	1.25.12
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	stdlib@go1.16.7	1.25.12
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	stdlib@go1.17.3	1.25.12
iomesh/csi-provisioner :v3.0.0	f9508460b273	stdlib@go1.16.2	1.25.12
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.25.12
iomesh/deck :v0.1.0	a31e26b6ae22	stdlib@go1.21.10	1.25.12
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	stdlib@go1.21.10	1.25.12
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	stdlib@go1.13.1	1.25.12
iomesh/livenessprobe :v2.8.0	560f01510f99	stdlib@go1.18	1.25.12
iomesh/localpv-manager :v0.2.0	f13deacac3f4	stdlib@go1.20.3	1.25.12
iomesh/node-disk-exporter :1.8.0	f03148764f38	stdlib@go1.14.7	1.25.12
iomesh/node-disk-manager :1.8.0	002c4b92fd34	stdlib@go1.14.7	1.25.12
iomesh/node-disk-operator :1.8.0	f6c76380db34	stdlib@go1.14.7	1.25.12
iomesh/operator :v1.1.0	60081c9b2f52	stdlib@go1.21.4	1.25.12
iomesh/post-delete-hook :v1.1.0	eea5651f3270	stdlib@go1.21.4	1.25.12
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.25.12
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	stdlib@go1.19.7	1.25.12
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.25.12

Open the chart page →

49,073

IOMeshkubesphere-stable

1.2.0

23 of 25 See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	stdlib@go1.21.5	1.25.12
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	stdlib@go1.21.5	1.25.12
iomesh/csi-driver :v2.8.0	1a151f602451	stdlib@go1.21.11	1.25.12
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	stdlib@go1.17.3	1.25.12
iomesh/csi-provisioner :v3.0.0	f9508460b273	stdlib@go1.16.2	1.25.12
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.25.12
iomesh/deck :v0.2.0	282d6c419ed3	stdlib@go1.22.6	1.25.12
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	stdlib@go1.22.6	1.25.12
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	stdlib@go1.13.1	1.25.12
iomesh/livenessprobe :v2.8.0	560f01510f99	stdlib@go1.18	1.25.12
iomesh/localpv-manager :v0.2.0	f13deacac3f4	stdlib@go1.20.3	1.25.12
iomesh/node-disk-exporter :1.8.0	f03148764f38	stdlib@go1.14.7	1.25.12
iomesh/node-disk-manager :1.8.0-2	292ad270082e	stdlib@go1.14.7	1.25.12
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	stdlib@go1.14.7	1.25.12
iomesh/operator :v1.2.0	ba4dd6be7e59	stdlib@go1.21.4	1.25.12
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	stdlib@go1.21.4	1.25.12
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.25.12
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	stdlib@go1.19.7	1.25.12
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.25.12
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.25.12

Open the chart page →

46,763

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.25.12
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	stdlib@go1.15.6	1.25.12

Open the chart page →

91,532

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	stdlib@go1.16.8	1.25.12

Open the chart page →

1,595

ccm-qingcloudkubesphere-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.12

Open the chart page →

1,540

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.25.12

Open the chart page →

2,445

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	stdlib@go1.16	1.25.12
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	stdlib@go1.14.4	1.25.12
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	stdlib@go1.16	1.25.12
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	stdlib@go1.16	1.25.12
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	stdlib@go1.15	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	stdlib@go1.16.2	1.25.12

Open the chart page →

18,554

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	stdlib@go1.16	1.25.12
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	stdlib@go1.16	1.25.12
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.25.12
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	stdlib@go1.16	1.25.12
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	stdlib@go1.15	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	stdlib@go1.16.2	1.25.12

Open the chart page →

12,450

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.25.12

Open the chart page →

2,832

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.25.12

Open the chart page →

9,652

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	stdlib@go1.15.6	1.25.12
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	stdlib@go1.15.10	1.25.12
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	stdlib@go1.15.6	1.25.12
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	stdlib@go1.15.10	1.25.12
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	stdlib@go1.15.6	1.25.12
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	stdlib@go1.15.10	1.25.12
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	stdlib@go1.15.6	1.25.12
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	stdlib@go1.15.6	1.25.12

Open the chart page →

25,927

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	stdlib@go1.15.15	1.25.12
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	stdlib@go1.16.9	1.25.12

Open the chart page →

4,339

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	stdlib@go1.15.15	1.25.12

Open the chart page →

2,793

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	stdlib@go1.15	1.25.12

Open the chart page →

2,221

kubestellar-consolekubestellar-console

0.3.42

2 of 2 See more

kubestellar-console kubestellar-console 0.3.42

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	stdlib@go1.20.4	1.25.12
ghcr.io/kubestellar/console :v0.3.42	89610ec0cbda	stdlib@go1.26.3	1.25.12

Open the chart page →

4,393

kubestellar-uikubestellarui

0.1.1

2 of 4 See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.25.12
mavrick1/kubestellar-b :latest	45ca0429a1d4	stdlib@go1.20.3	1.25.12

Open the chart page →

5,072

terraform-controllerkubevela

0.8.0

1 of 1 See more

terraform-controller kubevela 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oamdev/terraform-controller :v0.8.0	70447f4d360a	stdlib@go1.16.4	1.25.12

Open the chart page →

3,820

vector-controllerkubevela

0.2.3

2 of 2 See more

vector-controller kubevela 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	stdlib@go1.17.11	1.25.12
oamdev/vector-controller :v0.2.3	9dd8be44ffc9	stdlib@go1.17.13	1.25.12

Open the chart page →

4,820

vela-prismkubevela

1.6.0

3 of 3 See more

vela-prism kubevela 1.6.0

3 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway :v1.4.0	dc97164c4c1f	stdlib@go1.17.10	1.25.12
oamdev/kube-webhook-certgen :v2.3	31e0892f3583	stdlib@go1.16.9	1.25.12
oamdev/vela-prism :v1.6.0	6db6a937647d	stdlib@go1.19.3	1.25.12

Open the chart page →

6,107

vela-workflowkubevela

0.7.2

1 of 1 See more

vela-workflow kubevela 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	stdlib@go1.17.11	1.25.12

Open the chart page →

1,435

forkliftkubevirt-forklift

0.3.0

1 of 2 See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/kubev2v/forklift-operator :release-2.12	68657c36c086	stdlib@go1.26.3	1.25.12

Open the chart page →

1,462

kube-wordpress-mysqlkube-wordpress-mysql

0.1.0

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.25.12

Open the chart page →

8,944

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	stdlib@go1.20.2	1.25.12

Open the chart page →

1,816

kubiya-runnerkubiya-helm-charts

0.9.4

8 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

8 of the 9 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	stdlib@go1.22.7	1.25.12
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.12
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	stdlib@go1.23.12	1.25.12
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	stdlib@go1.22.10	1.25.12
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	stdlib@go1.25.1	1.25.12
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	stdlib@go1.21.5	1.25.12
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	stdlib@go1.23.12	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.25.12

Open the chart page →

20,417

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	stdlib@go1.23.12	1.25.12
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	stdlib@go1.23.12	1.25.12

Open the chart page →

1,762

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	stdlib@go1.20.14	1.25.12

Open the chart page →

3,489

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	stdlib@go1.24.13	1.25.12

Open the chart page →

980

kusionkusionstack

0.14.1

2 of 3 See more

kusion kusionstack 0.14.1

2 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	stdlib@go1.22.10	1.25.12
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

63,783

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	stdlib@go1.19.13	1.25.12

Open the chart page →

1,882

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	stdlib@go1.20.7	1.25.12

Open the chart page →

2,524

azure-key-vault-helperkvalitetsit

2.0.2

1 of 1 See more

azure-key-vault-helper kvalitetsit 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/go-loop :1.1.0	d07f449d75ed	stdlib@go1.25.1	1.25.12

Open the chart page →

307

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	stdlib@go1.22.5	1.25.12

Open the chart page →

1,320

kitarguskvalitetsit

0.0.0-2026-03-09-091234-10013c4

1 of 1 See more

kitargus kvalitetsit 0.0.0-2026-03-09-091234-10013c4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/kitargus :2026-03-09-091234-10013c4	c5cde2d9371c	stdlib@go1.25.8	1.25.12

Open the chart page →

962

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.25.12

Open the chart page →

1,519

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	stdlib@go1.14.1	1.25.12

Open the chart page →

16,735

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	stdlib@go1.19.5	1.25.12
kvalitetsit/metadoc-web :main	f57e7553f5bd	stdlib@go1.16	1.25.12

Open the chart page →

4,036

myra-cert-manager-webhookkvalitetsit

1.2.1

1 of 1 See more

myra-cert-manager-webhook kvalitetsit 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/myra-cert-manager-webhook :1.2.1	84ab59a1434e	stdlib@go1.26.4	1.25.12

Open the chart page →

178

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.25.12

Open the chart page →

2,064

oauth2-proxy-injectorkvalitetsit

1.5.0

1 of 1 See more

oauth2-proxy-injector kvalitetsit 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/oauth2-proxy-injector :1.5.0	0c906908d632	stdlib@go1.26.3	1.25.12

Open the chart page →

301

openidkvalitetsit

1.7.2

1 of 2 See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	stdlib@go1.25.7	1.25.12

Open the chart page →

592

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	stdlib@go1.19.3	1.25.12

Open the chart page →

7,864

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	stdlib@go1.13.10	1.25.12

Open the chart page →

8,546

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	stdlib@go1.14	1.25.12

Open the chart page →

26,563

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	stdlib@go1.24.3	1.25.12

Open the chart page →

2,281

everest-lakefs-csi-driverlakefs

1.3.0

2 of 3 See more

everest-lakefs-csi-driver lakefs 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.16.0-eksbuild.3	592d7034d6c7	stdlib@go1.26.1	1.25.12
public.ecr.aws/csi-components/livenessprobe :v2.18.0-eksbuild.3	8e307f4e5820	stdlib@go1.26.1	1.25.12

Open the chart page →

866

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	stdlib@go1.23.4	1.25.12

Open the chart page →

1,347

Container images carrying it

5,001 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	stdlib@go1.21.5	1.25.12	1
ghcr.io/shift/domain_exporter :v0.1.13	47e27690a816	stdlib@go1.17.8	1.25.12	1
ghcr.io/shopware/shopware-operator :1.8.1	87db0eda7a03	stdlib@go1.26.0	1.25.12	1
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.25.12	1
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	stdlib@go1.26.2	1.25.12	1
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	stdlib@go1.23.0	1.25.12	1
ghcr.io/sigstore/policy-controller/policy-controller	0bcd60beb93f	stdlib@go1.24.7	1.25.12	1
ghcr.io/sigstore/rekor-tiles/gcp :v2.2.1	e401cfe033c9	stdlib@go1.26.3	1.25.12	1
ghcr.io/sigstore/scaffolding/server	ae8eb69c7b70	stdlib@go1.25.0	1.25.12	1
ghcr.io/sigstore/sigstore-probers/prober :v1.0.1	d1e914e6d6b9	stdlib@go1.26.0	1.25.12	1
ghcr.io/sigstore/timestamp-server :v2.1.0	8637f0482ed1	stdlib@go1.25.1	1.25.12	1
ghcr.io/sikalabs/hello-world-server :latest	cf8538bf6489	stdlib@go1.26.2	1.25.12	1
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	stdlib@go1.22.0	1.25.12	1
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	stdlib@go1.26.0	1.25.12	1
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	stdlib@go1.26.4	1.25.12	1
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	stdlib@go1.26.1	1.25.12	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	stdlib@go1.22.2	1.25.12	1
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	stdlib@go1.17.2	1.25.12	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	stdlib@go1.24.4	1.25.12	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	stdlib@go1.24.4	1.25.12	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	stdlib@go1.25.7	1.25.12	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	stdlib@go1.25.7	1.25.12	1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	stdlib@go1.25.7	1.25.12	1
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	stdlib@go1.20.1	1.25.12	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	stdlib@go1.20.1	1.25.12	1
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	stdlib@go1.20.1	1.25.12	1
ghcr.io/spiffe/spire-ha-agent :0.5.0	307cf2d05afe	stdlib@go1.25.0	1.25.12	1
ghcr.io/spiffe/spire-identity-exchange-server :v0.5.0	239bc70c1988	stdlib@go1.26.0	1.25.12	1
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	stdlib@go1.20.1	1.25.12	1
ghcr.io/squat/generic-device-plugin :0.2.0	66c8d5c270eb	stdlib@go1.26.1	1.25.12	1
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	stdlib@go1.26.2	1.25.12	1
ghcr.io/sredevopsorg/ghost-on-kubernetes :main	06adb21bfdfc	stdlib@go1.26.4	1.25.12	1
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	stdlib@go1.24.13	1.25.12	1
ghcr.io/stakater/reloader :v1.4.19	0530cf462fa3	stdlib@go1.26.4	1.25.12	1
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	stdlib@go1.24.4	1.25.12	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	stdlib@go1.25.3	1.25.12	1
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	stdlib@go1.25.3	1.25.12	1
ghcr.io/stashed/stash-crd-installer :v0.32.0	c6f2a844b5dd	stdlib@go1.20.8	1.25.12	1
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	stdlib@go1.25.5	1.25.12	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	stdlib@go1.25.5	1.25.12	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	stdlib@go1.20.7	1.25.12	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	stdlib@go1.17.9	1.25.12	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	stdlib@go1.23.12	1.25.12	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	stdlib@go1.17.13	1.25.12	1
ghcr.io/stenic/well-known :1.11.0	ae85f257a10f	stdlib@go1.24.13	1.25.12	1
ghcr.io/storax/kubedoom :0.6.0	851ba8c80b93	stdlib@go1.17.6	1.25.12	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	stdlib@go1.22.1	1.25.12	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	stdlib@go1.18.5	1.25.12	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	stdlib@go1.24.10	1.25.12	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	stdlib@go1.24.5	1.25.12	1