CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,306; of 18,108 indexed, latest versions
Container images: 6,104; deployed by those charts
Fix available: 1 of 1; affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,306 of 18,108 indexed charts deploy, on 6,104 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,104

OSV records: GO-2026-6604
Trending: Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,306 by stars

Chart

Latest

Affected images

Radar Score

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.26.9

Open the chart page →

2,028

plane-cemakeplane

1.8.4

3 of 11 See more

plane-ce makeplane 1.8.4

3 of the 11 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.26.9
pgsty/mc :RELEASE.2026-09-16T00-00-00Z	cfc83108c3ab	stdlib@go1.27.1	1.26.9
pgsty/minio :RELEASE.2026-08-04T00-00-00Z	b6bfe7239bfc	stdlib@go1.26.5	1.26.9

Open the chart page →

4,762

milvusmilvus-helm

5.0.30

2 of 4 See more

milvus milvus-helm 5.0.30

2 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.25-r1	fededb2f2d63	stdlib@go1.24.10	1.26.9
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.26.9

Open the chart page →

13,221

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.26.9

Open the chart page →

1,069

opa-kube-mgmtopa-kube-mgmt

11.0.14

2 of 2 See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
openpolicyagent/kube-mgmt :11.0.14	758ff3fb4727	stdlib@go1.25.0	1.26.9
openpolicyagent/opa :1.19.0	852359995443	stdlib@go1.26.5	1.26.9

Open the chart page →

1,193

redis-operatorot-container-kit

0.27.0

1 of 1 See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.27.0	25799bf10231	stdlib@go1.25.14	1.26.9

Open the chart page →

291

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.26.9

Open the chart page →

5,653

s3-proxyoxyno-zeta

2.28.0

1 of 1 See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
oxynozeta/s3-proxy :5.1.1	21115040e224	stdlib@go1.27.0	1.26.9

Open the chart page →

425

spirespiffe

0.30.3

7 of 10 See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/oidc-discovery-provider :1.15.3	bb95f13c2b4e	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	stdlib@go1.24.0	1.26.9
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	stdlib@go1.25.3	1.26.9
ghcr.io/spiffe/spire-agent :1.15.3	41b0dcd8b258	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spire-controller-manager :0.8.0	19e418e9d7f2	stdlib@go1.27.1	1.26.9
ghcr.io/spiffe/spire-server :1.15.3	4082f30d3e0d	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.9

Open the chart page →

3,897

wireguardwireguard

0.32.0

1 of 3 See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-wireguard-mgr :main	c4febc0da1a4	stdlib@go1.27.1	1.26.9

Open the chart page →

413

altinity-clickhouse-operatoraltinity-clickhouse-operator

0.27.4

3 of 3 See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.27.4	c60c872fedd8	stdlib@go1.26.8	1.26.9
altinity/metrics-exporter :0.27.4	d257a72e6a6a	stdlib@go1.26.8	1.26.9
registry.k8s.io/kubectl :v1.36.3	6e4fce3c8365	stdlib@go1.26.5	1.26.9

Open the chart page →

842

bytebasebytebase

1.1.5

1 of 1 See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bytebase/bytebase :latest	0b3a44dfac3e	stdlib@go1.27.1	1.26.9

Open the chart page →

455

cert-manager-csi-drivercert-manager

0.16.0

3 of 3 See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	stdlib@go1.26.5	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.26.9

Open the chart page →

1,409

ansible-semaphorecloudhippie

15.3.2

1 of 1 See more

ansible-semaphore cloudhippie 15.3.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.16	3707a971a57f	stdlib@go1.23.3	1.26.9

Open the chart page →

1,848

etcdcloudpirates-etcd

0.8.9

1 of 1 See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gcr.io/etcd-development/etcd :v3.7.2	7c6c239825d0	stdlib@go1.26.8	1.26.9

Open the chart page →

238

rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operator

0.6.19

2 of 2 See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.19

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/rabbitmq/cluster-operator :2.23.0	9236fb4f559b	stdlib@go1.27.1	1.26.9
ghcr.io/rabbitmq/messaging-topology-operator :1.20.3	f377d3c3e221	stdlib@go1.27.1	1.26.9

Open the chart page →

419

zookeepercloudpirates-zookeeper

0.15.2

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.6	d0ae1665a1e8	stdlib@go1.18.1	1.26.9

Open the chart page →

3,651

vertical-pod-autoscalercluster-autoscaler

0.13.0

4 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.13.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.8.0	3d94f53e4c5a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.8.0	e743e3a7e58a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.8.0	1d0229e52f90	stdlib@go1.26.8	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	stdlib@go1.21.3	1.26.9

Open the chart page →

2,099

codefreshcodefresh-onprem

2.12.22

6 See more

codefresh codefresh-onprem 2.12.22

6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	stdlib@go1.25.0	1.26.9
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	stdlib@go1.21.12	1.26.9
bitnamilegacy/nats :2.11.8-debian-12-r0	fa0cfba6034a	stdlib@go1.24.6	1.26.9
ghcr.io/helm/chartmuseum :v0.16.6	48bc27743c08	stdlib@go1.25.13	1.26.9
quay.io/codefresh/dind :3.0.25	0885ab519dac	stdlib@go1.26.5	1.26.9
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	stdlib@go1.23.8	1.26.9

Open the chart page →

—

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/projectcontour/contour :v1.33.7	d88264ed084a	stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64	1.26.9

Open the chart page →

1,907

couchbase-operatorcouchbase

2.93.0

2 of 2 See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
couchbase/admission-controller :2.9.3	bf2d2e87e45f	stdlib@go1.26.5	1.26.9
couchbase/operator :2.9.3	69a385b49e1f	stdlib@go1.26.5	1.26.9

Open the chart page →

1,382

dash0-operatordash0-operator

0.157.0

1 of 1 See more

dash0-operator dash0-operator 0.157.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/dash0hq/operator-controller :0.157.0	2103617548e2	stdlib@go1.27.1	1.26.9

Open the chart page →

212

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	stdlib@go1.19.6	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	stdlib@go1.19.5	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	stdlib@go1.19.7	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	stdlib@go1.19.8	1.26.9

Open the chart page →

11,105

eck-exporterenix

1.14.0

1 of 1 See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

314

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.26.9
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.26.9

Open the chart page →

8,860

memcachedkubelauncher

0.1.33

1 of 1 See more

memcached kubelauncher 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/memcacheddigest-pinned	91f2066d2aa4	stdlib@go1.26.7	1.26.9

Open the chart page →

701

mysqlkubelauncher

0.4.6

1 of 1 See more

mysql kubelauncher 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/mysqldigest-pinned	b25f98e6a86f	stdlib@go1.26.7	1.26.9

Open the chart page →

685

postgresqlkubelauncher

0.5.0

1 of 1 See more

postgresql kubelauncher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/postgresqldigest-pinned	db2369c4dd90	stdlib@go1.26.7	1.26.9

Open the chart page →

782

kubernetes-replicatorkubernetes-replicator

2.12.4

1 of 1 See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.12.4	5dc9fc5ff59a	stdlib@go1.24.13	1.26.9

Open the chart page →

667

lakefslakefs

1.12.43

1 of 1 See more

lakefs lakefs 1.12.43

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
treeverse/lakefs :1.88.0	237a17c6b2d8	stdlib@go1.26.8	1.26.9

Open the chart page →

483

multi-juicermulti-juicer

10.3.1

1 of 1 See more

multi-juicer multi-juicer 10.3.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/juice-shop/multi-juicer/multi-juicer :v10.3.1	de4f0de62e8b	stdlib@go1.26.7	1.26.9

Open the chart page →

230

coreneuvectorcharts

2.11.2

3 of 5 See more

core neuvectorcharts 2.11.2

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
neuvector/controller :5.6.2	824e29cf32c5	stdlib@go1.26.8	1.26.9
neuvector/enforcer :5.6.2	72e1deee40fb	stdlib@go1.27.0	1.26.9
neuvector/scanner :6	d9e8b2ee8d69	stdlib@go1.27.1	1.26.9

Open the chart page →

1,341

diunnicholaswilde

1.0.0

1 of 1 See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/diun :4.19.0	c94e32b888e4	stdlib@go1.16.5	1.26.9

Open the chart page →

4,950

openclawopenclaw

1.110.1

2 of 2 See more

openclaw openclaw 1.110.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.57.0	6bac628b3d82	stdlib@go1.26.7	1.26.9
registry.gitlab.com/xrow-public/helm-openclaw/openclaw :1.110.1	51e6f187064f	stdlib@go1.26.4	1.26.9

Open the chart page →

3,151

prometheus-stackdriver-exporterprometheus-community

5.2.0

1 of 1 See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prometheuscommunity/stackdriver-exporter :v0.19.0	c0a0cbf76570	stdlib@go1.26.4	1.26.9

Open the chart page →

635

questdbquestdb

1.0.27

1 of 2 See more

questdb questdb 1.0.27

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
questdb/questdb :10.0.1	67eaed863ebb	stdlib@go1.25.14	1.26.9

Open the chart page →

163

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	stdlib@go1.22.4	1.26.9

Open the chart page →

1,721

spegelspegel

0.7.4

1 of 1 See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/spegel-org/spegeldigest-pinned	26c60b05e08a	stdlib@go1.26.5	1.26.9

Open the chart page →

498

supabasetokens-studio

1.0.0

3 of 14 See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	stdlib@go1.23.2	1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
supabase/gotrue :v2.163.0	ba4ddc594b0b	stdlib@go1.22.3	1.26.9

Open the chart page →

26,712

woodpeckerwoodpecker-ci

3.7.5

2 of 2 See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
woodpeckerci/woodpecker-agent :v3.19.0	f85f163e0949	stdlib@go1.27.1	1.26.9
woodpeckerci/woodpecker-server :v3.19.0	6ca167a3c58b	stdlib@go1.27.1	1.26.9

Open the chart page →

406

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	stdlib@go1.22.2	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.9

Open the chart page →

3,548

renterdartur9010

1.4.4

2 of 2 See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.26.9
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.26.9

Open the chart page →

9,944

nsqbeeinventor

1.3.0

1 of 1 See more

1,374

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	stdlib@go1.17.1	1.26.9

Open the chart page →

4,307

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	stdlib@go1.14.3	1.26.9
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	stdlib@go1.13.11	1.26.9
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	stdlib@go1.14.3	1.26.9

Open the chart page →

17,469

cloudflare-ddnscloudflare

1.0.3

1 of 1 See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/cloudflare-ddns :latest	aeb75d1605f4	stdlib@go1.23.12	1.26.9

Open the chart page →

674

timescaledbcloudpirates-timescaledb

0.13.12

1 of 1 See more

timescaledb cloudpirates-timescaledb 0.13.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
timescale/timescaledb :2.30.2-pg17	b346edcdb51a	stdlib@go1.24.6	1.26.9

Open the chart page →

1,136

openstack-cinder-csicloud-provider-openstack

2.37.0

6 See more

openstack-cinder-csi cloud-provider-openstack 2.37.0

6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	stdlib@go1.24.2	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	stdlib@go1.24.6	1.26.9

Open the chart page →

—

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

5 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure :v1.8.2	519f3891316a	stdlib@go1.27.1	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.14.0	6cb172e3de7e	stdlib@go1.26.5	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	stdlib@go1.25.7	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	stdlib@go1.26.3	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	stdlib@go1.26.3	1.26.9

Open the chart page →

5,192

paperless-ngxfmjstudios

0.2.8

3 of 5 See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
gotenberg/gotenberg :8.0.1	cf0b9a7ca3cf	stdlib@go1.21.5	1.26.9
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.26.9

Open the chart page →

35,316

Container images carrying it

6,104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	stdlib@go1.24.6	1.26.9	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	stdlib@go1.24.7	1.26.9	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	stdlib@go1.24.4	1.26.9	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	stdlib@go1.26.1	1.26.9	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	stdlib@go1.26.1	1.26.9	1
ghcr.io/okteto/backend :0.0.0-2026-08-31	6171cb2b2a72	stdlib@go1.25.12	1.26.9	1
ghcr.io/okteto/buildkit :0.0.0-2026-08-03 :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31	14527ca5d2a9	stdlib@go1.25.7	1.26.9	1
ghcr.io/okteto/daemon :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31	c6e716a3fbbe	stdlib@go1.26.5	1.26.9	1
ghcr.io/okteto/ingress-nginx-chroot :0.0.0-2026-08-31	d6730eb9831b	stdlib@go1.26.6	1.26.9	1
ghcr.io/okteto/okteto :3.23.0-beta.1	a0483d47ba04	stdlib@go1.26.6	1.26.9	1
ghcr.io/okteto/registry :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31	69131511501f	stdlib@go1.26.5	1.26.9	1
ghcr.io/okteto/reloader :0.0.0-2026-08-03 :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31	04a3fce657c4	stdlib@go1.26.4	1.26.9	1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller :0.2.3	0aec31e36d95	stdlib@go1.23.7	1.26.9	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	stdlib@go1.22.0	1.26.9	1
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	stdlib@go1.26.3	1.26.9	1
ghcr.io/onedr0p/exportarr :v1.6.1	60cf3d44aa0b	stdlib@go1.21.6	1.26.9	1
ghcr.io/openappsec/smartsync :latest	580d68c50cc7	stdlib@go1.18.10	1.26.9	1
ghcr.io/openappsec/smartsync-shared-files :latest	30c1daa0b33e	stdlib@go1.18.10	1.26.9	1
ghcr.io/openccu/openccu :3.89.11.20260919	3cfcb30e1921	stdlib@go1.26.6	1.26.9	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	stdlib@go1.20.4	1.26.9	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	stdlib@go1.21.6	1.26.9	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	stdlib@go1.21.6	1.26.9	1
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	stdlib@go1.24.12	1.26.9	1
ghcr.io/opendatacube/explorer :latest	7c25578068cd	stdlib@go1.25.0	1.26.9	1
ghcr.io/opendatacube/ows :latest	f591c9d96c0f	stdlib@go1.26.2	1.26.9	1
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	stdlib@go1.23.4	1.26.9	1
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	stdlib@go1.26.3	1.26.9	1
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.26.9	1
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.26.9	1
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.26.9	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	stdlib@go1.23.8	1.26.9	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	stdlib@go1.26.4	1.26.9	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.9	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.5.10	e9245a0bca88	stdlib@go1.26.7	1.26.9	1
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	stdlib@go1.25.6	1.26.9	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	stdlib@go1.24.4	1.26.9	1
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.26.9	1
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	stdlib@go1.18.5	1.26.9	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.26.9	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.26.9	1
ghcr.io/open-feature/flagd :v0.16.0	32234e63c1d0	stdlib@go1.25.10	1.26.9	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	stdlib@go1.22.5	1.26.9	1
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	stdlib@go1.25.14	1.26.9	1
ghcr.io/openkube-hub/kubeuser-controller :0.1.2	27cc7b4dfa0a	stdlib@go1.26.8	1.26.9	1
ghcr.io/openlit/openlit :1.24.0	2434560e8f0e	stdlib@go1.25.8	1.26.9	1
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	stdlib@go1.24.13	1.26.9	1