CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,306; of 18,108 indexed, latest versions
Container images: 6,104; deployed by those charts
Fix available: 1 of 1; affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,306 of 18,108 indexed charts deploy, on 6,104 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,104

OSV records: GO-2026-6604
Trending: Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,306 by stars

Chart

Latest

Affected images

Radar Score

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.26.9

Open the chart page →

2,028

plane-cemakeplane

1.8.4

3 of 11 See more

plane-ce makeplane 1.8.4

3 of the 11 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.26.9
pgsty/mc :RELEASE.2026-09-16T00-00-00Z	cfc83108c3ab	stdlib@go1.27.1	1.26.9
pgsty/minio :RELEASE.2026-08-04T00-00-00Z	b6bfe7239bfc	stdlib@go1.26.5	1.26.9

Open the chart page →

4,762

milvusmilvus-helm

5.0.30

2 of 4 See more

milvus milvus-helm 5.0.30

2 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.25-r1	fededb2f2d63	stdlib@go1.24.10	1.26.9
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.26.9

Open the chart page →

13,221

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.26.9

Open the chart page →

1,069

opa-kube-mgmtopa-kube-mgmt

11.0.14

2 of 2 See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
openpolicyagent/kube-mgmt :11.0.14	758ff3fb4727	stdlib@go1.25.0	1.26.9
openpolicyagent/opa :1.19.0	852359995443	stdlib@go1.26.5	1.26.9

Open the chart page →

1,193

redis-operatorot-container-kit

0.27.0

1 of 1 See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.27.0	25799bf10231	stdlib@go1.25.14	1.26.9

Open the chart page →

291

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.26.9

Open the chart page →

5,653

s3-proxyoxyno-zeta

2.28.0

1 of 1 See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
oxynozeta/s3-proxy :5.1.1	21115040e224	stdlib@go1.27.0	1.26.9

Open the chart page →

425

spirespiffe

0.30.3

7 of 10 See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/oidc-discovery-provider :1.15.3	bb95f13c2b4e	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	stdlib@go1.24.0	1.26.9
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	stdlib@go1.25.3	1.26.9
ghcr.io/spiffe/spire-agent :1.15.3	41b0dcd8b258	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spire-controller-manager :0.8.0	19e418e9d7f2	stdlib@go1.27.1	1.26.9
ghcr.io/spiffe/spire-server :1.15.3	4082f30d3e0d	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.9

Open the chart page →

3,897

wireguardwireguard

0.32.0

1 of 3 See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-wireguard-mgr :main	c4febc0da1a4	stdlib@go1.27.1	1.26.9

Open the chart page →

413

altinity-clickhouse-operatoraltinity-clickhouse-operator

0.27.4

3 of 3 See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.27.4	c60c872fedd8	stdlib@go1.26.8	1.26.9
altinity/metrics-exporter :0.27.4	d257a72e6a6a	stdlib@go1.26.8	1.26.9
registry.k8s.io/kubectl :v1.36.3	6e4fce3c8365	stdlib@go1.26.5	1.26.9

Open the chart page →

842

bytebasebytebase

1.1.5

1 of 1 See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bytebase/bytebase :latest	0b3a44dfac3e	stdlib@go1.27.1	1.26.9

Open the chart page →

455

cert-manager-csi-drivercert-manager

0.16.0

3 of 3 See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	stdlib@go1.26.5	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.26.9

Open the chart page →

1,409

ansible-semaphorecloudhippie

15.3.2

1 of 1 See more

ansible-semaphore cloudhippie 15.3.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.16	3707a971a57f	stdlib@go1.23.3	1.26.9

Open the chart page →

1,848

etcdcloudpirates-etcd

0.8.9

1 of 1 See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gcr.io/etcd-development/etcd :v3.7.2	7c6c239825d0	stdlib@go1.26.8	1.26.9

Open the chart page →

238

rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operator

0.6.19

2 of 2 See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.19

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/rabbitmq/cluster-operator :2.23.0	9236fb4f559b	stdlib@go1.27.1	1.26.9
ghcr.io/rabbitmq/messaging-topology-operator :1.20.3	f377d3c3e221	stdlib@go1.27.1	1.26.9

Open the chart page →

419

zookeepercloudpirates-zookeeper

0.15.2

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.6	d0ae1665a1e8	stdlib@go1.18.1	1.26.9

Open the chart page →

3,651

vertical-pod-autoscalercluster-autoscaler

0.13.0

4 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.13.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.8.0	3d94f53e4c5a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.8.0	e743e3a7e58a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.8.0	1d0229e52f90	stdlib@go1.26.8	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	stdlib@go1.21.3	1.26.9

Open the chart page →

2,099

codefreshcodefresh-onprem

2.12.22

6 See more

codefresh codefresh-onprem 2.12.22

6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	stdlib@go1.25.0	1.26.9
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	stdlib@go1.21.12	1.26.9
bitnamilegacy/nats :2.11.8-debian-12-r0	fa0cfba6034a	stdlib@go1.24.6	1.26.9
ghcr.io/helm/chartmuseum :v0.16.6	48bc27743c08	stdlib@go1.25.13	1.26.9
quay.io/codefresh/dind :3.0.25	0885ab519dac	stdlib@go1.26.5	1.26.9
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	stdlib@go1.23.8	1.26.9

Open the chart page →

—

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/projectcontour/contour :v1.33.7	d88264ed084a	stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64	1.26.9

Open the chart page →

1,907

couchbase-operatorcouchbase

2.93.0

2 of 2 See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
couchbase/admission-controller :2.9.3	bf2d2e87e45f	stdlib@go1.26.5	1.26.9
couchbase/operator :2.9.3	69a385b49e1f	stdlib@go1.26.5	1.26.9

Open the chart page →

1,382

dash0-operatordash0-operator

0.157.0

1 of 1 See more

dash0-operator dash0-operator 0.157.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/dash0hq/operator-controller :0.157.0	2103617548e2	stdlib@go1.27.1	1.26.9

Open the chart page →

212

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	stdlib@go1.19.6	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	stdlib@go1.19.5	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	stdlib@go1.19.7	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	stdlib@go1.19.8	1.26.9

Open the chart page →

11,105

eck-exporterenix

1.14.0

1 of 1 See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

314

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.26.9
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.26.9

Open the chart page →

8,860

memcachedkubelauncher

0.1.33

1 of 1 See more

memcached kubelauncher 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/memcacheddigest-pinned	91f2066d2aa4	stdlib@go1.26.7	1.26.9

Open the chart page →

701

mysqlkubelauncher

0.4.6

1 of 1 See more

mysql kubelauncher 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/mysqldigest-pinned	b25f98e6a86f	stdlib@go1.26.7	1.26.9

Open the chart page →

685

postgresqlkubelauncher

0.5.0

1 of 1 See more

postgresql kubelauncher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/postgresqldigest-pinned	db2369c4dd90	stdlib@go1.26.7	1.26.9

Open the chart page →

782

kubernetes-replicatorkubernetes-replicator

2.12.4

1 of 1 See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.12.4	5dc9fc5ff59a	stdlib@go1.24.13	1.26.9

Open the chart page →

667

lakefslakefs

1.12.43

1 of 1 See more

lakefs lakefs 1.12.43

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
treeverse/lakefs :1.88.0	237a17c6b2d8	stdlib@go1.26.8	1.26.9

Open the chart page →

483

multi-juicermulti-juicer

10.3.1

1 of 1 See more

multi-juicer multi-juicer 10.3.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/juice-shop/multi-juicer/multi-juicer :v10.3.1	de4f0de62e8b	stdlib@go1.26.7	1.26.9

Open the chart page →

230

coreneuvectorcharts

2.11.2

3 of 5 See more

core neuvectorcharts 2.11.2

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
neuvector/controller :5.6.2	824e29cf32c5	stdlib@go1.26.8	1.26.9
neuvector/enforcer :5.6.2	72e1deee40fb	stdlib@go1.27.0	1.26.9
neuvector/scanner :6	d9e8b2ee8d69	stdlib@go1.27.1	1.26.9

Open the chart page →

1,341

diunnicholaswilde

1.0.0

1 of 1 See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/diun :4.19.0	c94e32b888e4	stdlib@go1.16.5	1.26.9

Open the chart page →

4,950

openclawopenclaw

1.110.1

2 of 2 See more

openclaw openclaw 1.110.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.57.0	6bac628b3d82	stdlib@go1.26.7	1.26.9
registry.gitlab.com/xrow-public/helm-openclaw/openclaw :1.110.1	51e6f187064f	stdlib@go1.26.4	1.26.9

Open the chart page →

3,151

prometheus-stackdriver-exporterprometheus-community

5.2.0

1 of 1 See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prometheuscommunity/stackdriver-exporter :v0.19.0	c0a0cbf76570	stdlib@go1.26.4	1.26.9

Open the chart page →

635

questdbquestdb

1.0.27

1 of 2 See more

questdb questdb 1.0.27

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
questdb/questdb :10.0.1	67eaed863ebb	stdlib@go1.25.14	1.26.9

Open the chart page →

163

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	stdlib@go1.22.4	1.26.9

Open the chart page →

1,721

spegelspegel

0.7.4

1 of 1 See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/spegel-org/spegeldigest-pinned	26c60b05e08a	stdlib@go1.26.5	1.26.9

Open the chart page →

498

supabasetokens-studio

1.0.0

3 of 14 See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	stdlib@go1.23.2	1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
supabase/gotrue :v2.163.0	ba4ddc594b0b	stdlib@go1.22.3	1.26.9

Open the chart page →

26,712

woodpeckerwoodpecker-ci

3.7.5

2 of 2 See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
woodpeckerci/woodpecker-agent :v3.19.0	f85f163e0949	stdlib@go1.27.1	1.26.9
woodpeckerci/woodpecker-server :v3.19.0	6ca167a3c58b	stdlib@go1.27.1	1.26.9

Open the chart page →

406

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	stdlib@go1.22.2	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.9

Open the chart page →

3,548

renterdartur9010

1.4.4

2 of 2 See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.26.9
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.26.9

Open the chart page →

9,944

nsqbeeinventor

1.3.0

1 of 1 See more

1,374

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	stdlib@go1.17.1	1.26.9

Open the chart page →

4,307

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	stdlib@go1.14.3	1.26.9
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	stdlib@go1.13.11	1.26.9
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	stdlib@go1.14.3	1.26.9

Open the chart page →

17,469

cloudflare-ddnscloudflare

1.0.3

1 of 1 See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/cloudflare-ddns :latest	aeb75d1605f4	stdlib@go1.23.12	1.26.9

Open the chart page →

674

timescaledbcloudpirates-timescaledb

0.13.12

1 of 1 See more

timescaledb cloudpirates-timescaledb 0.13.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
timescale/timescaledb :2.30.2-pg17	b346edcdb51a	stdlib@go1.24.6	1.26.9

Open the chart page →

1,136

openstack-cinder-csicloud-provider-openstack

2.37.0

6 See more

openstack-cinder-csi cloud-provider-openstack 2.37.0

6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	stdlib@go1.24.2	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	stdlib@go1.24.6	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	stdlib@go1.24.6	1.26.9

Open the chart page →

—

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

5 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure :v1.8.2	519f3891316a	stdlib@go1.27.1	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.14.0	6cb172e3de7e	stdlib@go1.26.5	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	stdlib@go1.25.7	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	stdlib@go1.26.3	1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	stdlib@go1.26.3	1.26.9

Open the chart page →

5,192

paperless-ngxfmjstudios

0.2.8

3 of 5 See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
gotenberg/gotenberg :8.0.1	cf0b9a7ca3cf	stdlib@go1.21.5	1.26.9
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.26.9

Open the chart page →

35,316

Container images carrying it

6,104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/yasn77/pgbouncer :v0.0.6	cc8c13550e44	stdlib@go1.18.6	1.26.9	1
ghcr.io/yeonghoo2/crashloop-operator :0.0.6	565d1115e6bd	stdlib@go1.24.9	1.26.9	1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager :0.2.11	d078e45bac70	stdlib@go1.26.6	1.26.9	1
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	stdlib@go1.26.8	1.26.9	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	stdlib@go1.23.4	1.26.9	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	stdlib@go1.22.3	1.26.9	1
ghcr.io/zalando/skipper :v0.27.88	3a357a2a4bef	stdlib@go1.27.1	1.26.9	1
ghcr.io/zapier/kubechecks :latest	65780f7c0ae9	stdlib@go1.26.3	1.26.9	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9	1
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	stdlib@go1.23.3	1.26.9	1
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	stdlib@go1.23.3	1.26.9	1
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	stdlib@go1.24.0	1.26.9	1
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	stdlib@go1.24.0	1.26.9	1
ghcr.io/zokeber/velero-notifications :0.0.17	6d84f6c4ce20	stdlib@go1.25.8	1.26.9	1
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	stdlib@go1.23.4	1.26.9	1
ghcr.io/zufardhiyaulhaq/frp-operator :v0.13.0	66a5c1478fd8	stdlib@go1.23.12	1.26.9	1
mcr.microsoft.com/acstor/local-csi-driver :v0.3.0	f9af53a79fd1	stdlib@go1.26.5	1.26.9	1
mcr.microsoft.com/acstor/local-csi-manager :v0.3.0	4f464b52ba85	stdlib@go1.26.5	1.26.9	1
mcr.microsoft.com/aks/kaito/gpu-provisioner :0.2.0	1204a7e948e9	stdlib@go1.21.8	1.26.9	1
mcr.microsoft.com/aks/kaito/ragengine :0.12.0	7bfe651c92db	stdlib@go1.26.7	1.26.9	1
mcr.microsoft.com/aks/kaito/workspace :0.12.0	c4b887ca0542	stdlib@go1.26.7	1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller :1.12.2	6991e4273bb4	stdlib@go1.26.8	1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller-bootstrap :1.12.2	0709f9fd5bfd	stdlib@go1.26.8	1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller-crds :1.12.2	f5e176115522	stdlib@go1.26.7	1.26.9	1
mcr.microsoft.com/azure-app-configuration/kubernetes-provider :2.6.7	da4db80de17e	stdlib@go1.26.7	1.26.9	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	stdlib@go1.17.3	1.26.9	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	stdlib@go1.15.4	1.26.9	1
mcr.microsoft.com/mssql/server :latest	2b5b58162112	stdlib@go1.26.1	1.26.9	1
mcr.microsoft.com/mssql/server :2022-latest	4402d880dd4c	stdlib@go1.26.1	1.26.9	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	stdlib@go1.23.1	1.26.9	1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	stdlib@go1.19.10	1.26.9	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	stdlib@go1.19.10	1.26.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	stdlib@go1.14	1.26.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	stdlib@go1.15	1.26.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	stdlib@go1.15.2	1.26.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	stdlib@go1.15.2	1.26.9	1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	stdlib@go1.15.6	1.26.9	1
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure :v1.8.2	519f3891316a	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi :v1.36.0	0b4df214c178	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi :v1.35.7	a92afd76fb0d	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi :v1.27.11	ccb9e1dbe4b0	stdlib@go1.25.11	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-attacher :v4.12.0	3aadb9baa021	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.17.0	264963e21f6d	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.14.0	6cb172e3de7e	stdlib@go1.26.5	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.16.0	dfa2570cf895	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v6.3.0	5c9423e1046a	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	stdlib@go1.25.5	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.1	3519c45b932d	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.0	357a13745ca5	stdlib@go1.27.1	1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.1	f755aeee7277	stdlib@go1.27.1	1.26.9	1