CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,511
- of 18,087 indexed, latest versions
- Container images
- 6,327
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,511 of 18,087 indexed charts deploy, on 6,327 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,327 |
- OSV records
- GO-2026-6604
- Trending
- Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,511 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| clearml-agentallegroaiVerified publisher | 5.3.3 | 1 of 1See more | 73,257 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 6 of 9See more | 25,073 |
| pact-brokeralmorgvVerified publisher | 0.1.0 | 1 of 1See more | 6,095 |
| mariadbalphani-helm-chartsVerified publisher | 10.10.3 | 1 of 1See more | 9,588 |
| soft-servealphani-helm-chartsVerified publisher | 0.4.0 | 1 of 1See more | 3,884 |
| smockerandrcunsVerified publisher | 0.0.4 | 1 of 1See more | 2,884 |
| cloudflare-operatorankra-chartsVerified publisher | 0.2.0 | 1 of 1See more | 858 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 7,457 |
| upcloud-csiankra-chartsVerified publisher | 0.4.1 | 8 of 8See more | 22,013 |
| annotations-exporterannotations-exporter | 0.5.0 | 1 of 1See more | 1,852 |
| alazanteonVerified publisher | 0.12.0 | 1 of 1See more | 4,094 |
| anteonanteonVerified publisher | 2.6.4 | 5 of 13See more | 27,363 |
| antreaantreaVerified publisher | 2.7.0 | 2 of 2See more | 4,673 |
| api-usage-serverapi-usage-server | 1.16.0 | 1 of 1See more | 1,105 |
| gateway-helmappscodeVerified publisher | 0.0.0-latest | 1 of 2See more | 1,657 |
| kubedb-opscenterappscodeVerified publisher | 2026.7.10 | 1 of 1See more | 431 |
| kubedb-provisionerappscodeVerified publisher | 0.66.0 | 1 of 1See more | 874 |
| scannerappscodeVerified publisher | 2026.1.15 | 3 of 3See more | 6,966 |
| smtprelayappscodeVerified publisher | 2026.9.11 | 1 of 1See more | 1,280 |
| stash-enterpriseappscodeVerified publisher | 0.42.0 | 4 of 4See more | 5,664 |
| virtual-secrets-serverappscodeVerified publisher | 2026.8.14 | 1 of 1See more | 484 |
| argocd-backup-s3argocd-backup-s3Verified publisher | 0.9.5 | 1 of 1See more | 6,446 |
| argocd-rbac-operatorargocd-rbac-operator | 0.4.5 | 1 of 1See more | 1,311 |
| kedaarieotechVerified publisher | 0.1.0 | 2 of 3See more | 3,459 |
| s3dartur9010Verified publisher | 1.0.1 | 1 of 1See more | 2,108 |
| arvancloud-webhookarvancloud-webhookVerified publisher | 1.0.1 | 1 of 1See more | 736 |
| cert-exporterarzu | 3.0.1 | 1 of 1See more | 3,896 |
| soarv113assist-iot-cybersecurity-monitoring-soar | 0.1.3 | 1 of 5See more | 20,312 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 12,347 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 5 of 9See more | 196,388 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 5 of 9See more | 196,368 |
| astradnsastradnsVerified publisher | 0.2.9 | 2 of 2See more | 3,442 |
| deployautoml | 0.1.0 | 2 of 3See more | 4,267 |
| cso-proxyav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 5,375 |
| dex-k8sav1o-chartsVerified publisher | 0.2.1 | 1 of 1See more | 4,490 |
| kube-image-webhookav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 4,751 |
| prismav1o-chartsVerified publisher | 0.3.1 | 1 of 1See more | 2,211 |
| kubebrowseravistoOfficialVerified publisher | 1.4.0 | 1 of 1See more | 1,058 |
| azuredisk-csi-driverazuredisk-csi-driverVerified publisher | 1.36.0 | 7 of 8See more | 633 |
| generic-appb3oVerified publisher | 0.1.6 | 1 of 1See more | 2,269 |
| gozonebabykart-helm-chartsVerified publisher | 0.18.1 | 1 of 1See more | 123 |
| vault-unsealbabykart-helm-chartsVerified publisher | 1.0.5 | 1 of 1See more | 350 |
| db-backupballe-petersen | 0.1.4 | 1 of 1See more | 5,941 |
| music-assistantbdclark-helm-chartsVerified publisher | 0.4.13 | 1 of 1See more | 4,635 |
| chirpstackbeeinventor | 0.1.10 | 3 of 5See more | 10,569 |
| livekit-serverbeeinventor | 1.0.0 | 1 of 2See more | 3,714 |
| cloudflare-tunnel-operatorbeezlabs | 0.2.0 | 1 of 1See more | 2,371 |
| helm-dashboardbeluga-cloudVerified publisher | 2.4.0 | 1 of 1See more | 3,530 |
| yatai-image-builderbentomlVerified publisher | 3.0.44 | 1 of 1See more | 767 |
| betterdb-monitorbetterdb-monitorOfficialVerified publisher | 0.49.0 | 1 of 1See more | 512 |
Container images carrying it
6,327 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bloomberg/ | f7c60d319150 | stdlib | 1.26.9 | 2 |
| burningalchemist/ | 6c554722facc | stdlib | 1.26.9 | 2 |
| cagriekin/ | 111ccc617ce7 | stdlib | 1.26.9 | 2 |
| casbin/ | 7729da148c61 | stdlib | 1.26.9 | 2 |
| cesanta/ | 4d16885f3d4c | stdlib | 1.26.9 | 2 |
| cfssl/ | c9018c2ddf0b | stdlib | 1.26.9 | 2 |
| chankh/ | 963c44c7f8b1 | stdlib | 1.26.9 | 2 |
| chrislusf/ | db095fe8a8d6 | stdlib | 1.26.9 | 2 |
| clickhouse/ | ed9640bfff07 | stdlib | 1.26.9 | 2 |
| cloudflare/ | 61f608cd1123 | stdlib | 1.26.9 | 2 |
| cloudflare/ | 6d91c121b803 | stdlib | 1.26.9 | 2 |
| containersol/ | a914972d19ad | stdlib | 1.26.9 | 2 |
| coredns/ | 9b9128672209 | stdlib | 1.26.9 | 2 |
| crate/ | b8d89fa5d19b | stdlib | 1.26.9 | 2 |
| cs3org/ | 3b57a34a7dfd | stdlib | 1.26.9 | 2 |
| cs3org/ | e80a4d67b352 | stdlib | 1.26.9 | 2 |
| csiplugin/ | 1fa83d45417f | stdlib | 1.26.9 | 2 |
| csiplugin/ | 00fcc441ea9f | stdlib | 1.26.9 | 2 |
| danielfm/ | 7152b84e57cb | stdlib | 1.26.9 | 2 |
| danielqsj/ | 4150e46b2e96 | stdlib | 1.26.9 | 2 |
| danielqsj/ | d1014f41712d | stdlib | 1.26.9 | 2 |
| datawire/ | 1f67a1292d2a | stdlib | 1.26.9 | 2 |
| deepflowce/ | bc1882f75c18 | stdlib | 1.26.9 | 2 |
| deepflowce/ | 3d7ae561cf60 | stdlib | 1.26.9 | 2 |
| devopsfaith/ | f8bdaa8a1a43 | stdlib | 1.26.9 | 2 |
| dexidp/ | 43655afd1a8f | stdlib | 1.26.9 | 2 |
| dmilhdef/ | fada1a6e7638 | stdlib | 1.26.9 | 2 |
| drone/ | 4359bf2bb3dc | stdlib | 1.26.9 | 2 |
| dunglas/ | 916834e49961 | stdlib | 1.26.9 | 2 |
| envoyproxy/ | 0049bcb384c5 | stdlib | 1.26.9 | 2 |
| epamedp/ | fc858071b7a1 | stdlib | 1.26.9 | 2 |
| epamedp/ | 295a008abcef | stdlib | 1.26.9 | 2 |
| epamedp/ | 88189f16f94b | stdlib | 1.26.9 | 2 |
| epamedp/ | 0b7eb7d5ca43 | stdlib | 1.26.9 | 2 |
| eqalpha/ | 6537505c4235 | stdlib | 1.26.9 | 2 |
| eqalpha/ | eceb1806730c | stdlib | 1.26.9 | 2 |
| falcosecurity/ | 1fe583eee4af | stdlib | 1.26.9 | 2 |
| falcosecurity/ | 0d427b8d5fc6 | stdlib | 1.26.9 | 2 |
| filebrowser/ | 86e8449ff8ff | stdlib | 1.26.9 | 2 |
| filebrowser/ | a469ea076d4a | stdlib | 1.26.9 | 2 |
| filebrowser/ | c5d0a75a0041 | stdlib | 1.26.9 | 2 |
| flanksource/ | 8d17f0c08b20 | stdlib | 1.26.9 | 2 |
| flashcatcloud/ | 42e6ab16472e | stdlib | 1.26.9 | 2 |
| foundationdb/ | 7d7b6985291e | stdlib | 1.26.9 | 2 |
| free5gc/ | 1bc96ff5a2a6 | stdlib | 1.26.9 | 2 |
| free5gc/ | 687ff4daf5da | stdlib | 1.26.9 | 2 |
| free5gc/ | e2a4dd98a4ed | stdlib | 1.26.9 | 2 |
| free5gc/ | 99e46b860efb | stdlib | 1.26.9 | 2 |
| free5gc/ | dfe8c68c04b4 | stdlib | 1.26.9 | 2 |
| free5gc/ | f712e8ecd927 | stdlib | 1.26.9 | 2 |