StackRadar

CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,276
of 18,137 indexed, latest versions
Container images
6,115
deployed by those charts
Fix available
1 of 1
affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,276 of 18,137 indexed charts deploy, on 6,115 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,115
OSV records
GO-2026-6604
Trending
Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,276 by stars
ChartLatestAffected imagesRadar Score
blob-me-babyethereum-helm-chartsVerified publisher0.1.21 of 1See more

blob-me-baby ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/blob-me-baby:latestad26158420dd
stdlib@go1.20.1
1.26.9

Open the chart page →

2,111
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina04c231ce0e8
stdlib@go1.26.8
1.26.9

Open the chart page →

908
cbt-apiethereum-helm-chartsVerified publisher0.0.141 of 1See more

cbt-api ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/cbt-api:latestd60029a656db
stdlib@go1.26.3-X:jsonv2
1.26.9

Open the chart page →

646
chaos-meshethereum-helm-chartsVerified publisher0.0.34 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
stdlib@go1.19.7
1.26.9
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
stdlib@go1.24.4
1.26.9
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
stdlib@go1.24.4
1.26.9
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
stdlib@go1.24.4
1.26.9

Open the chart page →

16,565
checkpointzethereum-helm-chartsVerified publisher0.1.31 of 1See more

checkpointz ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
samcm/checkpointz:latesta66b24a87766
stdlib@go1.25.1
1.26.9

Open the chart page →

1,204
contributoorethereum-helm-chartsVerified publisher0.0.21 of 1See more

contributoor ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/contributoor:latest1edd4074fd79
stdlib@go1.26.1
1.26.9

Open the chart page →

1,317
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/dora:master13be067c3cf7
stdlib@go1.26.8
1.26.9

Open the chart page →

3,208
dugtrioethereum-helm-chartsVerified publisher0.0.71 of 1See more

dugtrio ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/dugtrio:1.0.0e261d1734e9f
stdlib@go1.21.4
1.26.9

Open the chart page →

1,819
erpcethereum-helm-chartsVerified publisher0.0.41 of 1See more

erpc ethereum-helm-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
stdlib@go1.23.9
1.26.9

Open the chart page →

1,459
eth2-fork-monethereum-helm-chartsVerified publisher0.1.31 of 1See more

eth2-fork-mon ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ralexstokes/eth2-fork-mon:latestc0d4bbefd31f
stdlib@go1.16.7
1.26.9

Open the chart page →

2,950
ethereum-address-metrics-exporterethereum-helm-chartsVerified publisher0.2.01 of 1See more

ethereum-address-metrics-exporter ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
stdlib@go1.26.1
1.26.9

Open the chart page →

861
ethereum-metrics-exporterethereum-helm-chartsVerified publisher0.2.11 of 1See more

ethereum-metrics-exporter ethereum-helm-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
samcm/ethereum-metrics-exporter:latestdc6cedebb24b
stdlib@go1.26.8
1.26.9

Open the chart page →

329
ethereum-validator-metrics-exporterethereum-helm-chartsVerified publisher0.0.11 of 1See more

ethereum-validator-metrics-exporter ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/ethereum-validator-metrics-exporter:latest38448e9d4aef
stdlib@go1.19.10
1.26.9

Open the chart page →

1,199
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
stdlib@go1.17.13
1.26.9

Open the chart page →

2,783
execution-processorethereum-helm-chartsVerified publisher0.0.31 of 1See more

execution-processor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/execution-processor:latest5c4832e9588f
stdlib@go1.25.4
1.26.9

Open the chart page →

1,067
forkmonethereum-helm-chartsVerified publisher0.1.61 of 1See more

forkmon ethereum-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
holiman/nodemonitor:latest5cd609761065
stdlib@go1.20.3
1.26.9

Open the chart page →

2,457
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
stdlib@go1.26.4
1.26.9

Open the chart page →

2,349
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestc13eac6aada7
stdlib@go1.23.1
1.26.9

Open the chart page →

3,365
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
nethermind/nethermind:latest25f72063f6fc
stdlib@go1.26.7
1.26.9

Open the chart page →

888
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
stdlib@go1.23.11
1.26.9

Open the chart page →

2,018
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
stdlib@go1.25.12
1.26.9

Open the chart page →

2,088
slashoorethereum-helm-chartsVerified publisher0.1.01 of 1See more

slashoor ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/slashoor:latesta71967db581f
stdlib@go1.23.12
1.26.9

Open the chart page →

684
spamoorethereum-helm-chartsVerified publisher1.0.11 of 1See more

spamoor ethereum-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/spamoor:latestc8c6ab0816c4
stdlib@go1.26.8
1.26.9

Open the chart page →

1,327
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
stdlib@go1.26.1
1.26.9

Open the chart page →

1,783
stubbiesethereum-helm-chartsVerified publisher0.0.21 of 1See more

stubbies ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/stubbies:latest9f1d6aec0d04
stdlib@go1.19.8
1.26.9

Open the chart page →

1,284
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
stdlib@go1.26.5
1.26.9

Open the chart page →

1,472
testnet-homepageethereum-helm-chartsVerified publisher0.2.31 of 1See more

testnet-homepage ethereum-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
skylenet/ethereum-testnet-homepage:latest8698903e379f
stdlib@go1.17.2
1.26.9

Open the chart page →

3,892
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
stdlib@go1.26.1
1.26.9

Open the chart page →

566
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
stdlib@go1.26.1
1.26.9

Open the chart page →

566
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
stdlib@go1.26.1
1.26.9

Open the chart page →

566
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
consensys/web3signer:latest0a64d3b00613
stdlib@go1.26.7
1.26.9

Open the chart page →

758
xatuethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-cannonethereum-helm-chartsVerified publisher0.2.21 of 1See more

xatu-cannon ethereum-helm-charts 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
stdlib@go1.25.1
1.26.9

Open the chart page →

1,781
xatu-cl-mimicryethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-cl-mimicry ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9

Open the chart page →

669
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
stdlib@go1.22.7
1.26.9

Open the chart page →

4,290
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste3bc0da9ffde
stdlib@go1.26.8
1.26.9

Open the chart page →

2,033
ethexporterethersphereVerified publisher0.3.01 of 1See more

ethexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
darkobas/ethexporter:latest62e6464491ba
stdlib@go1.19.1
1.26.9

Open the chart page →

3,954
ethproxyethersphereVerified publisher0.2.01 of 1See more

ethproxy ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethersphere/ethproxy:latest3a8a3926caa2
stdlib@go1.18.7
1.26.9

Open the chart page →

2,249
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.186d6d12a40465
stdlib@go1.18.2
1.26.9

Open the chart page →

6,084
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
stdlib@go1.18.2
1.26.9

Open the chart page →

4,339
tokenexporterethersphereVerified publisher0.3.01 of 1See more

tokenexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
darkobas/tokenexporter:latestf26e016a9d7e
stdlib@go1.27.1
1.26.9

Open the chart page →

3,392
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
stdlib@go1.26.3
1.26.9

Open the chart page →

880

Container images carrying it

6,115 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-56857.

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.