StackRadar

CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,306
of 18,108 indexed, latest versions
Container images
6,104
deployed by those charts
Fix available
1 of 1
affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,306 of 18,108 indexed charts deploy, on 6,104 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,104
OSV records
GO-2026-6604
Trending
Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,306 by stars
ChartLatestAffected imagesRadar Score
prometheus-json-exporterprometheus-communityOfficialVerified publisher0.20.11 of 1See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
stdlib@go1.23.6
1.26.9

Open the chart page →

1,252
prometheus-nginx-exporterprometheus-communityVerified publisher1.23.11 of 1See more

prometheus-nginx-exporter prometheus-community 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
nginx/nginx-prometheus-exporter:1.5.385666e7fde7e
stdlib@go1.26.6
1.26.9

Open the chart page →

243
prometheus-smartctl-exporterprometheus-communityVerified publisher0.17.11 of 1See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
stdlib@go1.23.7
1.26.9

Open the chart page →

1,803
prometheus-statsd-exporterprometheus-communityVerified publisher1.0.01 of 1See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.26.9

Open the chart page →

1,326
proxmox-cloud-controller-managerproxmox-ccm0.2.321 of 1See more

proxmox-cloud-controller-manager proxmox-ccm 0.2.32

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.16.1474dbfd3be5c
stdlib@go1.27.1
1.26.9

Open the chart page →

205
pvc-autoresizerpvc-autoresizerVerified publisher0.20.11 of 1See more

pvc-autoresizer pvc-autoresizer 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pvc-autoresizer:0.21.2d7885d57f6f9
stdlib@go1.25.14
1.26.9

Open the chart page →

214
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.26.9

Open the chart page →

1,952
argo-watchershini4iVerified publisher1.4.11 of 1See more

argo-watcher shini4i 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/shini4i/argo-watcher:v1.4.20faab179997f
stdlib@go1.27.1
1.26.9

Open the chart page →

205
fulciosigstoreVerified publisher2.11.45 of 6See more

fulcio sigstore 2.11.4

5 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
stdlib@go1.27.1
1.26.9
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned4d64dac937e2
stdlib@go1.25.0
1.26.9
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33e591f98e3899
stdlib@go1.25.0
1.26.9
ghcr.io/sigstore/scaffolding/createtree:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.9
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3324293fa1ed50
stdlib@go1.25.0
1.26.9

Open the chart page →

5,317
policy-controllersigstoreVerified publisher0.10.81 of 2See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
stdlib@go1.24.7
1.26.9

Open the chart page →

1,432
pubsubplus-hasolaceVerified publisher3.10.01 of 1See more

pubsubplus-ha solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest3c8a8b7fdcae
stdlib@go1.26.8
1.26.9

Open the chart page →

490
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
stdlib@go1.26.5
1.26.9

Open the chart page →

1,344
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
stdlib@go1.26.1
1.26.9
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
stdlib@go1.26.1
1.26.9

Open the chart page →

6,974
superstreamsuperstreamOfficialVerified publisher0.9.623 of 3See more

superstream superstream 0.9.62

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/nats:2.10.25-alpine3290c829aa05
stdlib@go1.23.5
1.26.9
natsio/nats-server-config-reloader:0.16.1bf97e5e9b9d2
stdlib@go1.23.3
1.26.9
natsio/prometheus-nats-exporter:0.16.054b0d7ff058e
stdlib@go1.23.4
1.26.9

Open the chart page →

5,084
topolvmtopolvmVerified publisher17.3.01 of 1See more

topolvm topolvm 17.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.42.0719ab11d974a
stdlib@go1.26.8
1.26.9

Open the chart page →

2,584
trivy-operator-polr-adaptertrivy-operator-polr-adapterVerified publisher0.11.51 of 1See more

trivy-operator-polr-adapter trivy-operator-polr-adapter 0.11.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/fjogeleit/trivy-operator-polr-adapter:0.11.537029b4d464f
stdlib@go1.26.4
1.26.9

Open the chart page →

327
uffizzi-appuffizzi-app1.3.08 of 14See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.9
uffizzi/uffizzi-cluster-operator:v1.4.514e528bbd926
stdlib@go1.19.13
1.26.9
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
stdlib@go1.20.10
1.26.9
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
stdlib@go1.20.10
1.26.9
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
stdlib@go1.20.10
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
stdlib@go1.20.10
1.26.9
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
stdlib@go1.21.3
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.9

Open the chart page →

26,480
vault-secrets-webhookvault-secrets-webhookVerified publisher1.23.11 of 1See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
stdlib@go1.26.4
1.26.9

Open the chart page →

851
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
stdlib@go1.25.9
1.26.9

Open the chart page →

2,788
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
stdlib@go1.26.3
1.26.9

Open the chart page →

1,287
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.9

Open the chart page →

15,008
nfs-server-provisionerwso21.1.01 of 1See more

nfs-server-provisioner wso2 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.9

Open the chart page →

4,108
yunikornyunikornVerified publisher1.10.03 of 3See more

yunikorn yunikorn 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
apache/yunikorn:scheduler-1.10.049fc54894fdf
stdlib@go1.26.7
1.26.9
apache/yunikorn:web-1.10.090e6a62a578a
stdlib@go1.26.7
1.26.9
apache/yunikorn:admission-1.10.095c6b951f38a
stdlib@go1.26.7
1.26.9

Open the chart page →

581
matrixzekker6Verified publisher3.32.01 of 4See more

matrix zekker6 3.32.0

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.162.06b84a7bbac36
stdlib@go1.24.4
1.26.9

Open the chart page →

6,174
eshoponabpabp-charts1.0.02 of 15See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.26.9
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.26.9

Open the chart page →

24,196
moon2aerokube2.8.23 of 3See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.9
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.9
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.9

Open the chart page →

603
microgatewayairlock-microgatewayOfficialVerified publisher5.2.01 of 1See more

microgateway airlock-microgateway 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/airlock/microgateway-operatordigest-pinned48518d704307
stdlib@go1.27.1
1.26.9

Open the chart page →

201
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
stdlib@go1.18.2
1.26.9

Open the chart page →

4,801
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
stdlib@go1.24.2
1.26.9

Open the chart page →

1,859
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.100809fb02162f151
stdlib@go1.26.7
1.26.9

Open the chart page →

975
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.26.9

Open the chart page →

5,089
aperture-controlleraperture2.34.04 of 5See more

aperture-controller aperture 2.34.0

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
fluxninja/aperture-operator:2.34.0356d7aa86632
stdlib@go1.21.5
1.26.9
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.9
quay.io/prometheus/prometheus:v2.33.591100b06e86d
stdlib@go1.17.8
1.26.9

Open the chart page →

7,641
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.9

Open the chart page →

4,372
limesurveyarea-42Verified publisher0.3.1001 of 2See more

limesurvey area-42 0.3.100

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.9

Open the chart page →

5,558
artifact-controllerartifact-controllerOfficialVerified publisher0.9.11 of 1See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.9

Open the chart page →

201
athens-proxyathens-chartsOfficialVerified publisher0.18.01 of 1See more

athens-proxy athens-charts 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gomods/athens:v0.19.2e1abe3005673
stdlib@go1.26.8
1.26.9

Open the chart page →

904
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.26.9

Open the chart page →

10,363
prometheusaveshaVerified publisher19.3.04 of 4See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.9
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.9
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.9

Open the chart page →

8,720
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.26.9

Open the chart page →

3,484
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
stdlib@go1.25.8
1.26.9

Open the chart page →

920
snapschedulerbackube-helm-chartsVerified publisher3.5.02 of 2See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.9

Open the chart page →

2,262
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.9

Open the chart page →

2,613
yatai-deploymentbentomlVerified publisher1.1.211 of 2See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.9

Open the chart page →

1,865
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
stdlib@go1.25.1
1.26.9

Open the chart page →

2,151
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
stdlib@go1.19.12
1.26.9

Open the chart page →

70,859
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.9

Open the chart page →

2,608
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
stdlib@go1.19.9
1.26.9

Open the chart page →

2,415
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
stdlib@go1.26.5
1.26.9
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
stdlib@go1.26.5
1.26.9

Open the chart page →

15,871
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
stdlib@go1.26.4
1.26.9

Open the chart page →

576
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
stdlib@go1.17.11
1.26.9
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
stdlib@go1.17.11
1.26.9
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
stdlib@go1.17.11
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
stdlib@go1.17.11
1.26.9

Open the chart page →

11,768

Container images carrying it

6,104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
stdlib@go1.24.13
1.26.9
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
stdlib@go1.25.11
1.26.9
1
ghcr.io/opensoha/soha:v0.1.9a5e8e9f7a41d
stdlib@go1.26.6
1.26.9
1
ghcr.io/opensoha/soha-agent:v0.1.970d66a0df909
stdlib@go1.26.6
1.26.9
1
ghcr.io/opensoha/soha-operator:0.1.15d07d5c5a684
stdlib@go1.26.6
1.26.9
1
ghcr.io/openstack-exporter/openstack-exporter:1.7.0e5146a7dd515
stdlib@go1.18.10
1.26.9
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
stdlib@go1.22.8
1.26.9
1
ghcr.io/open-telemetry/demo:3.1.0-cart17c881cf29af
stdlib@go1.26.8
1.26.9
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
stdlib@go1.22.8
1.26.9
1
ghcr.io/open-telemetry/demo:3.1.0-opamp-server3b6c6220bf9c
stdlib@go1.27.1
1.26.9
1
ghcr.io/open-telemetry/demo:3.1.0-product-catalog7578cbf65fa4
stdlib@go1.27.1
1.26.9
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
stdlib@go1.21.5
1.26.9
1
ghcr.io/open-telemetry/demo:3.1.0-checkoutd4448ff54129
stdlib@go1.26.8
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.14.00b063b9ec47e
stdlib@go1.27.0
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
stdlib@go1.25.9
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.159.02ceb3b541295
stdlib@go1.26.8
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
stdlib@go1.25.8
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
stdlib@go1.24.6
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
stdlib@go1.25.6
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.150.089490ef63b72
stdlib@go1.26.2
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.124.08936271cf56a
stdlib@go1.24.2
1.26.9
1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.160.0df98ddd322a6
stdlib@go1.26.8
1.26.9
1
ghcr.io/open-webui/open-terminal:0.14.0-slimba7a67129bba
stdlib@go1.24.4
1.26.9
1
ghcr.io/opnpulse/perses:v2026.4.247f540d844c54
stdlib@go1.25.14
1.26.9
1
ghcr.io/opnpulse/prom-label-proxy:v2026.9.2247afd6372838
stdlib@go1.25.14
1.26.9
1
ghcr.io/opnpulse/tenant-operator:v0.0.38fe9b4157ed2
stdlib@go1.25.14
1.26.9
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
stdlib@go1.26.2
1.26.9
1
ghcr.io/orkspace/orkestra:0.7.1863356a41fbef
stdlib@go1.26.6
1.26.9
1
ghcr.io/orkspace/orkestra-cc:0.7.18ebb9654ac4d2
stdlib@go1.26.6
1.26.9
1
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
stdlib@go1.21.12
1.26.9
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.26.9
1
ghcr.io/oxidecomputer/cluster-api-provider-oxide:0.2.37b05d3bbfbfa
stdlib@go1.26.4
1.26.9
1
ghcr.io/p10node/p10logs-agent:1.1.44bc72bd8ff5a
stdlib@go1.26.8
1.26.9
1
ghcr.io/p10node/p10logs-hub:1.1.44385afd18845
stdlib@go1.26.8
1.26.9
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
stdlib@go1.15.12
1.26.9
1
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.9
1
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.9
1
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
stdlib@go1.25.14
1.26.9
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
stdlib@go1.25.0
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.26.9
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
stdlib@go1.20.7
1.26.9
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
stdlib@go1.25.1
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
stdlib@go1.21.4
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
stdlib@go1.24.7
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.