CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,360
- of 18,104 indexed, latest versions
- Container images
- 6,205
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,360 of 18,104 indexed charts deploy, on 6,205 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,205 |
- OSV records
- GO-2026-6604
- Trending
- Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,360 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kubemacpoolkubemacpoolVerified publisher | 0.3.0 | 1 of 1See more | 2,350 |
| kube-netlagkube-netlagVerified publisher | 1.1.0 | 1 of 1See more | 2,072 |
| kube-node-readykube-node-ready | 0.5.0 | 1 of 1See more | 1,001 |
| kubensynckubensync | 0.14.1 | 1 of 1See more | 215 |
| apm-serverkube-opsVerified publisher | 0.1.2 | 1 of 1See more | 8,431 |
| lokikube-opsVerified publisher | 1.7.3 | 1 of 1See more | 3,875 |
| promtailkube-opsVerified publisher | 1.5.1 | 1 of 2See more | 5,743 |
| kube-ovnkube-ovn-test | 1.14.0 | 1 of 1See more | 6,096 |
| kuberay-apiserverkuberay-operator | 1.7.1 | 2 of 2See more | 778 |
| kuberecordkuberecordVerified publisher | 0.5.0 | 1 of 1See more | 446 |
| kubereportkubereport | 1.1.0 | 1 of 1See more | 1,752 |
| adguard-homekubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 1,064 |
| cloudflaredkubernetes-homelab-helm-chartsVerified publisher | 0.1.1 | 1 of 1See more | 2,045 |
| firefly-iiikubernetes-homelab-helm-chartsVerified publisher | 0.1.3 | 1 of 3See more | 5,372 |
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.2.3 | 2 of 2See more | 4,197 |
| navidromekubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 1,335 |
| pocket-idkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 2,018 |
| portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 1,982 |
| qbittorrent-exporterkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 675 |
| scrutinykubernetes-homelab-helm-chartsVerified publisher | 0.2.2 | 2 of 3See more | 6,964 |
| syncthingkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 1,647 |
| tor-proxykubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 1,891 |
| umamikubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 2,939 |
| uptime-kumakubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 7,949 |
| kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher | 1.5.0 | 1 of 2See more | 42,139 |
| kubernetes-nmstatekubernetes-nmstateVerified publisher | 0.87.0 | 1 of 1See more | 847 |
| brudi-operatorkubernetes-replicator | 0.2.3 | 1 of 1See more | 4,398 |
| harbor-operatorkubernetes-replicator | 1.6.3 | 1 of 1See more | 1,818 |
| kube-httpcachekubernetes-replicator | 0.9.1 | 1 of 1See more | 5,468 |
| kubernetes-secret-generatorkubernetes-replicator | 3.4.1 | 1 of 1See more | 1,400 |
| servicegatewaykubernetes-replicator | 2.3.3 | 1 of 1See more | 1,270 |
| kubernetesweeklykubernetesweekly | 2.1.0 | 1 of 1See more | 2,519 |
| kube-secrets-exporterkube-secrets-exporter | 0.1.0 | 1 of 1See more | 1,111 |
| api-serverkubeshop | 0.11.16 | 1 of 2See more | 3,391 |
| kusk-gatewaykubeshop | 0.0.65 | 1 of 2See more | 2,455 |
| kusk-gateway-apikubeshop | 0.1.28 | 2 of 2See more | 3,945 |
| testkube-apikubeshop | 2.1.162 | 1 of 2See more | 2,202 |
| testkube-logskubeshop | 0.2.2 | 1 of 1See more | 2,046 |
| testkube-operatorkubeshop | 2.1.154 | 2 of 3See more | 2,021 |
| testkube-runnerkubeshop | 2.14.1 | 1 of 1See more | 222 |
| tracetestkubeshop | 0.3.39 | 1 of 2See more | 2,158 |
| cloudnative-pgkube-site-follower | 0.23.0 | 1 of 1See more | 1,455 |
| kubeskoopkubeskoop | 1.0.2 | 2 of 2See more | 5,604 |
| apisix-dashboardkubesphereVerified publisher | 0.3.0 | 1 of 1See more | 3,715 |
| apisix-ingress-controllerkubesphereVerified publisher | 0.8.0 | 1 of 2See more | 3,636 |
| fluentbit-operatorkubesphereVerified publisher | 0.1.0 | 1 of 2See more | 4,127 |
| gitlabkubesphereVerified publisher | 4.2.3 | 6 of 17See more | 50,723 |
| harborkubesphereVerified publisher | 1.9.3 | 7 of 11See more | 25,667 |
| pvc-autoresizerkubesphereVerified publisher | 0.1.0 | 1 of 1See more | 2,643 |
| storageclass-accessorkubesphereVerified publisher | 0.1.0 | 1 of 1See more | 2,590 |
Container images carrying it
6,205 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| alazidis/ | 0e8c84152201 | stdlib | 1.26.9 | 2 |
| alpine/ | 832b1cd1a271 | stdlib | 1.26.9 | 2 |
| alpine/ | 048f8d9c8cc7 | stdlib | 1.26.9 | 2 |
| alpine/ | b421c2e9419e | stdlib | 1.26.9 | 2 |
| alpine/ | 9ccd82364762 | stdlib | 1.26.9 | 2 |
| alpine/ | ec8f734b0a10 | stdlib | 1.26.9 | 2 |
| altinity/ | cd9252644ce0 | stdlib | 1.26.9 | 2 |
| altinity/ | db7dde971407 | stdlib | 1.26.9 | 2 |
| altinity/ | 85b4fdbae053 | stdlib | 1.26.9 | 2 |
| altinity/ | df3d57215356 | stdlib | 1.26.9 | 2 |
| amazon/ | b55277652ea8 | stdlib | 1.26.9 | 2 |
| amazon/ | c9b14856fd22 | stdlib | 1.26.9 | 2 |
| apache/ | 3a4422656592 | stdlib | 1.26.9 | 2 |
| apache/ | 641237e0299b | stdlib | 1.26.9 | 2 |
| apache/ | 67d50e4deff4 | stdlib | 1.26.9 | 2 |
| apache/ | afe59523a6c8 | stdlib | 1.26.9 | 2 |
| apecloud/ | 94041b080510 | stdlib | 1.26.9 | 2 |
| apecloud/ | 8c8451abf728 | stdlib | 1.26.9 | 2 |
| aquasec/ | ea3e33bc3c4e | stdlib | 1.26.9 | 2 |
| assistiot/ | ad8f72108636 | stdlib | 1.26.9 | 2 |
| ayushsobti/ | 4c94e8f8924e | stdlib | 1.26.9 | 2 |
| binwiederhier/ | 4a7d0f0adc6d | stdlib | 1.26.9 | 2 |
| binwiederhier/ | 4c599cf08189 | stdlib | 1.26.9 | 2 |
| bitnami/ | 27e3b3fe7123 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 00176a47afa0 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | d17df1f9d745 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | a0a972324d93 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 33ce23601fc9 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 4fe2bd7b4036 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 7e7ebb082031 | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 5927ff3702df | stdlib | 1.26.9 | 2 |
| bitnamilegacy/ | 10ed1ea3c8d1 | stdlib | 1.26.9 | 2 |
| bitnami/ | 33a5a129cadc | stdlib | 1.26.9 | 2 |
| bitnamisecure/ | 72ae5bd9715f | stdlib | 1.26.9 | 2 |
| bitpoke/ | f44fa86ab27e | stdlib | 1.26.9 | 2 |
| bitpoke/ | d86560c75bed | stdlib | 1.26.9 | 2 |
| bloomberg/ | f7c60d319150 | stdlib | 1.26.9 | 2 |
| burningalchemist/ | 6c554722facc | stdlib | 1.26.9 | 2 |
| cagriekin/ | 111ccc617ce7 | stdlib | 1.26.9 | 2 |
| casbin/ | 7729da148c61 | stdlib | 1.26.9 | 2 |
| cesanta/ | 4d16885f3d4c | stdlib | 1.26.9 | 2 |
| chankh/ | 963c44c7f8b1 | stdlib | 1.26.9 | 2 |
| chrislusf/ | db095fe8a8d6 | stdlib | 1.26.9 | 2 |
| clickhouse/ | ed9640bfff07 | stdlib | 1.26.9 | 2 |
| cloudflare/ | 61f608cd1123 | stdlib | 1.26.9 | 2 |
| cloudflare/ | 6d91c121b803 | stdlib | 1.26.9 | 2 |
| containersol/ | a914972d19ad | stdlib | 1.26.9 | 2 |
| coredns/ | 9b9128672209 | stdlib | 1.26.9 | 2 |
| crate/ | b8d89fa5d19b | stdlib | 1.26.9 | 2 |
| cs3org/ | 3b57a34a7dfd | stdlib | 1.26.9 | 2 |