StackRadar

CVE-2026-42506

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,992
of 17,803 indexed, latest versions
Container images
3,667
deployed by those charts
Fix available
1 of 1
affected package

Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html

Carried by container images the latest versions of 2,992 of 17,803 indexed charts deploy, on 3,667 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,667
OSV records
GO-2026-5025

Charts affected

2,992 by stars
ChartLatestAffected imagesRadar Score
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
golang.org/x/net@v0.19.0
0.55.0

Open the chart page →

1,423
mattermost-chaos-enginemattermostVerified publisher0.2.01 of 1See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mattermost/mattermost-app-chaosengine:c153e436268954edd67
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
0.55.0

Open the chart page →

4,075
mattermost-push-proxymattermostVerified publisher0.14.31 of 1See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mattermost/mattermost-push-proxy:6.3.045c53061c74e
golang.org/x/net@v0.24.0
0.55.0

Open the chart page →

897
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

4,121
mayastormayastorVerified publisher2.12.112 of 31See more

mayastor mayastor 2.12.1

12 of the 31 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
golang.org/x/net@v0.37.0
0.55.0
grafana/loki:3.4.258a6c186ce78
golang.org/x/net@v0.34.0
0.55.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/net@v0.38.0
0.55.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/net@v0.29.0
0.55.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/net@v0.29.0
0.55.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/net@v0.37.0
0.55.0
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/net@v0.34.0
0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/net@v0.32.0
0.55.0
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
golang.org/x/net@v0.34.0
0.55.0
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
golang.org/x/net@v0.34.0
0.55.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
golang.org/x/net@v0.31.0
0.55.0
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
golang.org/x/net@v0.31.0
0.55.0

Open the chart page →

21,284
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

413
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

409
mdai-hubmdai-hubVerified publisher0.10.17 of 14See more

mdai-hub mdai-hub 0.10.1

7 of the 14 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/jkroepke/kube-webhook-certgen:1.8.38ce13c365c8e
golang.org/x/net@v0.54.0
0.55.0
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
golang.org/x/net@v0.51.0
0.55.0
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/net@v0.52.0
0.55.0
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/net@v0.52.0
0.55.0
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
golang.org/x/net@v0.53.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
golang.org/x/net@v0.52.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
golang.org/x/net@v0.51.0
0.55.0

Open the chart page →

4,832
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.55.0

Open the chart page →

7,337
pod-cleanupmediamarktsaturn1.2.11 of 1See more

pod-cleanup mediamarktsaturn 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

423
cameramedia-streaming-meshVerified publisher0.2.51 of 3See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/net@v0.0.0-20220526153639-5463443f8c37
0.55.0

Open the chart page →

18,692
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
golang.org/x/net@v0.10.0
0.55.0

Open the chart page →

3,724
ingressmedia-streaming-meshVerified publisher0.1.82 of 2See more

ingress media-streaming-mesh 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
golang.org/x/net@v0.8.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
golang.org/x/net@v0.7.0
0.55.0

Open the chart page →

3,302
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
golang.org/x/net@v0.33.0
0.55.0
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
golang.org/x/net@v0.33.0
0.55.0
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
golang.org/x/net@v0.26.0
0.55.0
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
golang.org/x/net@v0.26.0
0.55.0
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
golang.org/x/net@v0.20.0
0.55.0

Open the chart page →

11,582
msm-rtspmedia-streaming-meshVerified publisher0.0.21 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/net@v0.0.0-20220526153639-5463443f8c37
0.55.0

Open the chart page →

18,692
rtspmedia-streaming-meshVerified publisher0.0.141 of 2See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/net@v0.0.0-20220526153639-5463443f8c37
0.55.0

Open the chart page →

18,692
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
0.55.0

Open the chart page →

1,919
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.55.0

Open the chart page →

7,519
dex-k8s-authenticatormesosphere1.4.31 of 1See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mesosphere/dex-k8s-authenticator:v1.4.1-d2iqf3d9982cc2fd
golang.org/x/net@v0.13.0
0.55.0

Open the chart page →

1,019
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
0.55.0
weaveworks/flagger-loadtester:0.9.03cdac6928a63
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
0.55.0

Open the chart page →

6,049
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0

Open the chart page →

3,041
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
0.55.0

Open the chart page →

5,461
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

2,591
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
golang.org/x/net@v0.48.0
0.55.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

3,837
kafka-operatormesosphere0.20.21 of 2See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
golang.org/x/net@v0.0.0-20211029224645-99673261e6eb
0.55.0

Open the chart page →

1,884
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.55.0

Open the chart page →

2,111
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0

Open the chart page →

12,062
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
0.55.0

Open the chart page →

3,151
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.55.0

Open the chart page →

3,151
kube-prometheus-stackmesosphere87.16.02 of 7See more

kube-prometheus-stack mesosphere 87.16.0

2 of the 7 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
0.55.0
grafana/grafana:13.1.0121a7a9ece6d
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

7,457
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.55.0

Open the chart page →

5,699
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.55.0

Open the chart page →

2,317
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.55.0

Open the chart page →

2,806
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

10,508
prometheus-operatormesosphere12.11.135 of 8See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
golang.org/x/net@v0.47.0
0.55.0
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
0.55.0
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

11,703
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d
0.55.0

Open the chart page →

3,349
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
0.55.0
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
0.55.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
0.55.0
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
0.55.0

Open the chart page →

14,109
cert-manager-setupmesosphere-stable0.2.104 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/net@v0.5.0
0.55.0
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/net@v0.5.0
0.55.0
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/net@v0.5.0
0.55.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/net@v0.5.0
0.55.0

Open the chart page →

7,201
cosimesosphere-stable0.2.21 of 1See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

305
dexmesosphere-stable2.14.13 of 5See more

dex mesosphere-stable 2.14.1

3 of the 5 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
0.55.0
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
golang.org/x/net@v0.11.0
0.55.0
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
golang.org/x/net@v0.25.0
0.55.0

Open the chart page →

19,285
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0

Open the chart page →

3,041
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
0.55.0

Open the chart page →

3,613
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
0.55.0

Open the chart page →

5,461
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
golang.org/x/net@v0.37.0
0.55.0

Open the chart page →

3,342
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
golang.org/x/net@v0.37.0
0.55.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

4,665
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
golang.org/x/net@v0.8.0
0.55.0

Open the chart page →

1,242
karmamesosphere-stable2.0.31 of 1See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.70d417abe7ddb5
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0

Open the chart page →

1,966
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
golang.org/x/net@v0.7.0
0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
golang.org/x/net@v0.7.0
0.55.0

Open the chart page →

7,528
kommandermesosphere-stable0.39.218 of 29See more

kommander mesosphere-stable 0.39.2

18 of the 29 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.55.0
mesosphere/karma:v0.55-d2iq-proxy4693bb4e0814
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.55.0
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
0.55.0
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
0.55.0
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
0.55.0
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0
prom/prometheus:v2.19.2cd134bd4fca0
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
0.55.0
thanosio/thanos:v0.19.088276fcd1491
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0
thanosio/thanos:v0.15.0b12d5c31bf5a
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.55.0
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
0.55.0
quay.io/thanos/thanos:v0.17.1e362f02ed304
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
0.55.0

Open the chart page →

68,432
kube-prometheus-stackmesosphere-stable75.9.16 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

6 of the 7 container images this version deploys carry CVE-2026-42506.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
0.55.0
grafana/grafana:12.0.2b5b59bfc7561
golang.org/x/net@v0.40.0
0.55.0
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
golang.org/x/net@v0.40.0
0.55.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/net@v0.37.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
golang.org/x/net@v0.41.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

10,239

Container images carrying it

3,667 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
adyanth/cloudflare-operator6b168dc237d5
golang.org/x/net@v0.39.0
0.55.0
1
aerokube/moon:1.9.17da76ca51220d
golang.org/x/net@v0.25.0
0.55.0
1
aerokube/moon-api:1.9.176b6323e75785
golang.org/x/net@v0.25.0
0.55.0
1
aerokube/selenoid-ui:1.10.113f3e299509fd
golang.org/x/net@v0.10.0
0.55.0
1
aerospike/aerospike-backup-service:3.5.1be40d709c583
golang.org/x/net@v0.50.0
0.55.0
1
aerospike/aerospike-kubernetes-operator:4.5.070a9eeb991b8
golang.org/x/net@v0.54.0
0.55.0
1
afgane/galaxy-k8s-monitor:latest457173db5640
golang.org/x/net@v0.30.0
0.55.0
1
aibrix/controller-manager:v0.7.076aabbbfda79
golang.org/x/net@v0.34.0
0.55.0
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
golang.org/x/net@v0.34.0
0.55.0
1
airbyte/minio:RELEASE.2023-11-20T22-40-07Zfdae972eaf0e
golang.org/x/net@v0.17.0
0.55.0
1
airbyte/pod-sweeper:1.5.198d2c39d512e
golang.org/x/net@v0.26.0
0.55.0
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
golang.org/x/net@v0.40.0
0.55.0
1
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
golang.org/x/net@v0.38.0
0.55.0
1
alazidis/stornx:1.1.1602d4f7f090c
golang.org/x/net@v0.47.0
0.55.0
1
alcounit/browser-controller:v1.0.093b7cdbab14b
golang.org/x/net@v0.47.0
0.55.0
1
alcounit/browser-service:v0.0.94bd10defc324
golang.org/x/net@v0.47.0
0.55.0
1
alcounit/browser-ui:v0.0.96a977c92ef27
golang.org/x/net@v0.47.0
0.55.0
1
alcounit/selenosis:v2.1.1d01a9dbbd943
golang.org/x/net@v0.47.0
0.55.0
1
alex6021710/ai-scale-auth:latest6c7a47e470c3
golang.org/x/net@v0.0.0-20211104170005-ce137452f963
0.55.0
1
alex6021710/ai-scale-doer:latest31e533cf7cd3
golang.org/x/net@v0.0.0-20211104170005-ce137452f963
0.55.0
1
alex6021710/ai-scale-migrator:latest744b8a924f35
golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e
0.55.0
1
alex6021710/ai-scale-provider:latest5837d9b30cc7
golang.org/x/net@v0.0.0-20211104170005-ce137452f963
0.55.0
1
alex6021710/ai-scale-saver:latestf73e8d60fd03
golang.org/x/net@v0.0.0-20211105192438-b53810dc28af
0.55.0
1
almasood/book-server:latest6ffac9b63cdf
golang.org/x/net@v0.38.0
0.55.0
1
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
0.55.0
1
alpine/git:2.36.366b210a97bc0
golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2
0.55.0
1
alpine/git:v2.49.1c0280cf95723
golang.org/x/net@v0.45.0
0.55.0
1
alpine/helm105741fa6621
golang.org/x/net@v0.23.0
0.55.0
1
alpine/helm:4.1.0905a068da431
golang.org/x/net@v0.48.0
0.55.0
1
alpine/k8s:1.22.600ac10bcb759
golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d
0.55.0
1
alpine/k8s:1.27.321b24e6bf801
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.55.0
1
alpine/k8s:1.36.244ef4942e171
golang.org/x/net@v0.53.0
0.55.0
1
alpine/k8s:1.31.106dbe6f391eda
golang.org/x/net@v0.19.0
0.55.0
1
alpine/k8s:1.31.137a319b15cfc9
golang.org/x/net@v0.43.0
0.55.0
1
alpine/k8s:1.32.47e1e7d5b7a96
golang.org/x/net@v0.34.0
0.55.0
1
alpine/k8s:1.31.49c4976d47656
golang.org/x/net@v0.31.0
0.55.0
1
alpine/k8s:1.18.16a41efe02a041
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0
1
alpine/k8s:1.37.0b421c2e9419e
golang.org/x/net@v0.38.0
0.55.0
1
alpine/k8s:1.35.6b7a12c5ddf26
golang.org/x/net@v0.54.0
0.55.0
1
alpine/k8s:1.30.0bd01dae02676
golang.org/x/net@v0.23.0
0.55.0
1
alpine/k8s:1.30.2cd560fce90f7
golang.org/x/net@v0.9.0
0.55.0
1
alpine/k8s:1.35.5d870622d0040
golang.org/x/net@v0.48.0
0.55.0
1
alpine/k8s:1.28.13e5c0b053fed7
golang.org/x/net@v0.12.0
0.55.0
1
alpine/k8s:1.32.3eec354133193
golang.org/x/net@v0.37.0
0.55.0
1
alpine/k8s:1.28.2fc059f056ad0
golang.org/x/net@v0.9.0
0.55.0
1
alpine/kubectl:1.36.01ee9df6316d4
golang.org/x/net@v0.49.0
0.55.0
1
alpine/kubectl:1.33.32c59a3f0726c
golang.org/x/net@v0.38.0
0.55.0
1
alpine/kubectl:1.35.0862d86046bbc
golang.org/x/net@v0.47.0
0.55.0
1
alpine/kubectl:1.35.3c4a11ae9a1cb
golang.org/x/net@v0.47.0
0.55.0
1
altinity/clickhouse-operator:0.25.41d6f18dbd599
golang.org/x/net@v0.38.0
0.55.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.