StackRadarChart IndexLive demo

CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,264; of 18,143 indexed, latest versions
Container images: 6,101; deployed by those charts
Fix available: 1 of 1; affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,264 of 18,143 indexed charts deploy, on 6,101 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9	6,101

OSV records: GO-2026-6604
Also known as: BIT-golang-2026-56857
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,264 by stars

Chart

Latest

Affected images

Radar Score

pagespages2

1 of 3 See more

21,576

pagespages-alexchmielu

1 of 3 See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-alps

1 of 3 See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-alstom

1 of 3 See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-ambala

1 of 3 See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-andromeda

1 of 3 See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespagesbadami

1 of 3 See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-blackburn

1 of 3 See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-botes

1 of 3 See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-brian

1 of 3 See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-buckll

1 of 3 See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-camden

1 of 3 See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-camden771

1 of 3 See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-diarmuidkeane

1 of 3 See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-draco

1 of 3 See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-ellora

1 of 3 See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-finchley

1 of 3 See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-fornax

1 of 3 See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-harsh

1 of 3 See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespagesk

1 of 3 See more

21,576

pagespages-microservice-ashim

1 of 3 See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-mihai

1 of 3 See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-nivesh

1 of 3 See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespagessandeepgudu

1 of 3 See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-shubhanker

1 of 3 See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-ssharma0909

1 of 3 See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-sucharitha

1 of 3 See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-sudhir

1 of 3 See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-sushi

1 of 3 See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-vasanth5814

1 of 3 See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

pagespages-vjp

1 of 3 See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

paguropaguro

1 of 3 See more

paguro paguro 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/dpicillo/paguro/paguro-node-installer :v0.1.2	526c1324e1dc	stdlib@go1.26.6	1.26.9

Open the chart page →

243

alistpanghuli

1 of 2 See more

alist panghuli 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
xhofe/alist :v3.24.0	33f15a31be6c	stdlib@go1.20.5	1.26.9

Open the chart page →

2,758

cloudrevepanghuli

1 of 1 See more

cloudreve panghuli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
cloudreve/cloudreve :3.8.0	09093aec5a20	stdlib@go1.20	1.26.9

Open the chart page →

3,261

radarr-testpanzer1119

1 of 2 See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	stdlib@go1.26.8	1.26.9

Open the chart page →

1,617

paperclippaperclip-helm

1 of 3 See more

paperclip paperclip-helm 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

711

paperclip-operatorpaperclip-operator

1 of 1 See more

paperclip-operator paperclip-operator 0.19.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/paperclipinc/paperclip-operator :v0.19.1	0984b890eb38	stdlib@go1.25.0	1.26.9

Open the chart page →

819

Parpar

1 of 1 See more

Par par 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/par :v0.1.0	9977511cb142	stdlib@go1.19.10	1.26.9

Open the chart page →

1,611

parcaparca

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	stdlib@go1.21.1	1.26.9
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	stdlib@go1.21.4	1.26.9

Open the chart page →

4,841

parcaparca-chart

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	stdlib@go1.21.1	1.26.9

Open the chart page →

2,740

parcaparca-rr

2 of 2 See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	stdlib@go1.25.1	1.26.9
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	stdlib@go1.24.7	1.26.9

Open the chart page →

3,526

parcial-1parcial-1-chart

2 of 5 See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	stdlib@go1.24.6	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.1	e63459ec5965	stdlib@go1.24.6	1.26.9

Open the chart page →

5,110

istio-cniparticuleio

1 of 1 See more

istio-cni particuleio 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	stdlib@go1.27.0	1.26.9

Open the chart page →

1,297

istio-operatorparticuleio

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	stdlib@go1.22.5	1.26.9

Open the chart page →

5,025

scaleway-webhookparticuleio

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	stdlib@go1.15.2	1.26.9

Open the chart page →

3,602

cloudflaredpascaliske

1 of 1 See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	stdlib@go1.24.7	1.26.9

Open the chart page →

2,813

hammondpascaliske

1 of 2 See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	stdlib@go1.20.6	1.26.9

Open the chart page →

2,539

home-assistantpascaliske

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	stdlib@go1.25.4	1.26.9

Open the chart page →

6,078

plausible-exporterpascaliske

1 of 1 See more

plausible-exporter pascaliske 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/riesinger/plausible-exporter :1.1.0	61112cda1be5	stdlib@go1.19.7	1.26.9

Open the chart page →

1,357

vikunjapascaliske

1 of 1 See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	stdlib@go1.23.4	1.26.9

Open the chart page →

2,187

Container images carrying it

6,101 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-56857.