CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,533
- of 18,090 indexed, latest versions
- Container images
- 6,378
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,378 |
| ingress-nginx-controller-1.15apk | 1.15.10-r3 | 1.15.10-r8 | 1 |
- OSV records
- CGA-3j79-hxrj-98c9GO-2026-6604
- Also known as
- CGA-28rp-569c-vjc3, CGA-4j4m-4mp6-xp7x, CGA-85gw-4745-j8q8, CGA-929x-9pxj-5mv4, CGA-jc7p-vgxm-j32v
- Trending
- Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,533 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| matrimonygabe565Verified publisher | 0.7.0 | 1 of 1See more | 1,670 |
| podgrabgabe565Verified publisher | 0.5.2 | 1 of 1See more | 3,626 |
| relax-soundsgabe565Verified publisher | 1.1.0 | 1 of 1See more | 617 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 15,042 |
| smarter-device-managergabe565Verified publisher | 0.5.2 | 1 of 1See more | 2,084 |
| transsmutegabe565Verified publisher | 1.1.0 | 1 of 1See more | 1,345 |
| guacamolegabibbo97 | 0.3.0 | 1 of 3See more | 8,590 |
| galoygaloymoney | 0.34.7 | 4 of 24See more | 11,795 |
| galoy-depsgaloymoney | 0.10.20 | 8 of 9See more | 17,684 |
| lndgaloymoney | 0.10.6 | 1 of 3See more | 2,735 |
| monitoringgaloymoney | 0.12.21 | 5 of 6See more | 8,128 |
| galoygaloymoney2 | 0.34.7 | 4 of 24See more | 11,795 |
| galoy-depsgaloymoney2 | 0.10.20 | 8 of 9See more | 17,684 |
| lndgaloymoney2 | 0.10.6 | 1 of 3See more | 2,735 |
| monitoringgaloymoney2 | 0.12.21 | 5 of 6See more | 8,128 |
| gameserver-operatorgameserver-operator | 0.3.0 | 1 of 1See more | 768 |
| pagesgary-pages | 1.0.0 | 1 of 3See more | 21,310 |
| alertmanager-discordgeek-cookbookVerified publisher | 1.3.2 | 1 of 1See more | 1,972 |
| anonaddygeek-cookbookVerified publisher | 6.0.0 | 1 of 1See more | 5,703 |
| apache-musicindexgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 16,183 |
| autobrrgeek-cookbookVerified publisher | 1.1.3 | 1 of 1See more | 3,092 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 18,147 |
| dendritegeek-cookbookVerified publisher | 6.4.0 | 1 of 1See more | 3,090 |
| duplicatigeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 1,878 |
| embygeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 9,943 |
| gatusgeek-cookbookVerified publisher | 1.1.2 | 1 of 1See more | 2,927 |
| gonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 4,778 |
| gotifygeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 4,883 |
| haste-servergeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 12,541 |
| jackettgeek-cookbookVerified publisher | 11.7.2 | 1 of 1See more | 10,975 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 15,847 |
| maddygeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 3,757 |
| minifluxgeek-cookbookVerified publisher | 5.2.0 | 1 of 2See more | 3,481 |
| navidromegeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 4,902 |
| nullservgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 2,099 |
| nzbgetgeek-cookbookVerified publisher | 12.4.2 | 1 of 1See more | 13,483 |
| nzbhydra2geek-cookbookVerified publisher | 10.4.2 | 1 of 1See more | 19,375 |
| owncloud-ocisgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 4,461 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 21,621 |
| pod-gatewaygeek-cookbookVerified publisher | 5.6.2 | 1 of 2See more | 3,327 |
| pod-gateway-settergeek-cookbookVerified publisher | 1.0.0 | 1 of 1See more | 2,813 |
| qbittorrentgeek-cookbookVerified publisher | 13.5.2 | 1 of 1See more | 13,377 |
| radarrgeek-cookbookVerified publisher | 16.3.2 | 1 of 1See more | 11,591 |
| readarrgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 9,108 |
| satisfactorygeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 3,449 |
| searxgeek-cookbookVerified publisher | 5.6.2 | 3 of 4See more | 10,638 |
| skypilotgeek-cookbookVerified publisher | 0.0.1 | 3 of 3See more | 11,421 |
| torrservergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 4,232 |
| transmissiongeek-cookbookVerified publisher | 8.4.3 | 1 of 1See more | 13,227 |
| vikunjageek-cookbookVerified publisher | 6.2.0 | 2 of 4See more | 9,931 |
Container images carrying it
6,378 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| free5gc/ | 687ff4daf5da | stdlib | 1.26.9 | 2 |
| free5gc/ | e2a4dd98a4ed | stdlib | 1.26.9 | 2 |
| free5gc/ | 99e46b860efb | stdlib | 1.26.9 | 2 |
| free5gc/ | dfe8c68c04b4 | stdlib | 1.26.9 | 2 |
| free5gc/ | f712e8ecd927 | stdlib | 1.26.9 | 2 |
| free5gc/ | 60e38baa4b10 | stdlib | 1.26.9 | 2 |
| free5gc/ | 2f68df062a50 | stdlib | 1.26.9 | 2 |
| free5gc/ | c0783bcdcbdc | stdlib | 1.26.9 | 2 |
| free5gc/ | b6b362a39fdd | stdlib | 1.26.9 | 2 |
| free5gc/ | 9adeb18492cb | stdlib | 1.26.9 | 2 |
| freikin/ | 589e3606b11b | stdlib | 1.26.9 | 2 |
| friendsofgo/ | 39cfbecca342 | stdlib | 1.26.9 | 2 |
| frinx/ | bf8edd4f52f3 | stdlib | 1.26.9 | 2 |
| frinx/ | 9cd0147a09bd | stdlib | 1.26.9 | 2 |
| frinx/ | 4693dc627d32 | stdlib | 1.26.9 | 2 |
| garethgeorge/ | b85297975428 | stdlib | 1.26.9 | 2 |
| garugaru/ | 541852cafda5 | stdlib | 1.26.9 | 2 |
| githubexporter/ | a36fbedeedf8 | stdlib | 1.26.9 | 2 |
| goelankit/ | 0d9a82dcf026 | stdlib | 1.26.9 | 2 |
| gomods/ | efb811df7844 | stdlib | 1.26.9 | 2 |
| gotenberg/ | 87c16b9f3642 | stdlib | 1.26.9 | 2 |
| gotenberg/ | f29984bd1e22 | stdlib | 1.26.9 | 2 |
| governify/ | e83a17ba5038 | stdlib | 1.26.9 | 2 |
| grafana/ | a136c6208aa3 | stdlib | 1.26.9 | 2 |
| grafana/ | 7790f6f7fbd8 | stdlib | 1.26.9 | 2 |
| grafana/ | b8ec653c4423 | stdlib | 1.26.9 | 2 |
| grafana/ | 057896e23443 | stdlib | 1.26.9 | 2 |
| grafana/ | 079600c9517b | stdlib | 1.26.9 | 2 |
| grafana/ | 0f86bada30d6 | stdlib | 1.26.9 | 2 |
| grafana/ | 2175aaa91c96 | stdlib | 1.26.9 | 2 |
| grafana/ | 42d3e6bc1865 | stdlib | 1.26.9 | 2 |
| grafana/ | 511bc20bfcd1 | stdlib | 1.26.9 | 2 |
| grafana/ | 886b56d5534e | stdlib | 1.26.9 | 2 |
| grafana/ | 9e1e77ade304 | stdlib | 1.26.9 | 2 |
| grafana/ | d8ea37798ccc | stdlib | 1.26.9 | 2 |
| grafana/ | e932bd6ed0e0 | stdlib | 1.26.9 | 2 |
| grafana/ | 847c287ada0e | stdlib | 1.26.9 | 2 |
| grafana/ | 922b3f412fdd | stdlib | 1.26.9 | 2 |
| grafana/ | d947e68a84d9 | stdlib | 1.26.9 | 2 |
| grafana/ | f9ef133793af | stdlib | 1.26.9 | 2 |
| grafana/ | 46e88d390cd6 | stdlib | 1.26.9 | 2 |
| grafana/ | b338a29de45e | stdlib | 1.26.9 | 2 |
| grafana/ | f0200a9bff6d | stdlib | 1.26.9 | 2 |
| grafana/ | f0561deb1c68 | stdlib | 1.26.9 | 2 |
| hanchuanchuan/ | b3c0dd26fb50 | stdlib | 1.26.9 | 2 |
| hashicorp/ | 3a8061968ee4 | stdlib | 1.26.9 | 2 |
| hashicorp/ | e38576edcdfd | stdlib | 1.26.9 | 2 |
| hashicorp/ | 538a3436398d | stdlib | 1.26.9 | 2 |
| hashicorp/ | 4db614d40d0e | stdlib | 1.26.9 | 2 |
| hashicorp/ | 6b4e5dadf082 | stdlib | 1.26.9 | 2 |