CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,544
- of 18,087 indexed, latest versions
- Container images
- 6,392
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,544 of 18,087 indexed charts deploy, on 6,392 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,392 |
| ingress-nginx-controller-1.15apk | 1.15.10-r3 | no fix listed | 1 |
- OSV records
- CGA-28rp-569c-vjc3GO-2026-6604
- Also known as
- CGA-3j79-hxrj-98c9, CGA-4j4m-4mp6-xp7x, CGA-85gw-4745-j8q8, CGA-929x-9pxj-5mv4, CGA-jc7p-vgxm-j32v
- Trending
- Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,544 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| podsyncmy0nVerified publisher | 1.5.4 | 1 of 2See more | 2,822 |
| maddymyaVerified publisher | 22.4.12 | 1 of 2See more | 2,056 |
| registrymyaVerified publisher | 22.4.11 | 1 of 1See more | 1,379 |
| simple-gowikimy-helm-chartsVerified publisher | 0.2.0 | 1 of 1See more | 768 |
| satisfactorynaj98 | 1.1.1 | 1 of 1See more | 4,740 |
| beszelnatpnk-k8s | 1.0.0 | 2 of 2See more | 260 |
| nats-account-servernatsVerified publisher | 0.8.1 | 1 of 1See more | 3,605 |
| surveyornatsVerified publisher | 0.20.9 | 1 of 1See more | 1,188 |
| natz-operatornatz-operatorVerified publisher | 0.9.5 | 1 of 1See more | 1,203 |
| spring-helmnaveenalla-springboot | 1.0.0 | 1 of 2See more | 1,853 |
| clowder2ncsaVerified publisher | 1.9.7 | 6 of 12See more | 45,509 |
| netbox-operatornetboxOfficialVerified publisher | 1.2.191 | 1 of 1See more | 124 |
| netobserv-operatornetobservOfficialVerified publisher | 2.0.1 | 1 of 1See more | 154 |
| monitorneuvectorchartsVerified publisher | 2.11.2 | 1 of 1See more | 186 |
| cluster-issuersnginx-cert-charts | 0.3.0 | 4 of 4See more | 3,613 |
| ngrok-operatorngrok-operator | 1.1.0 | 1 of 2See more | 2,869 |
| cloud9nicholaswildeVerified publisher | 1.0.0 | 1 of 1See more | 12,936 |
| gotifynicholaswildeVerified publisher | 1.0.0 | 1 of 1See more | 3,895 |
| installernicholaswildeVerified publisher | 1.0.0 | 1 of 1See more | 2,220 |
| shiorinicholaswildeVerified publisher | 1.0.1 | 1 of 1See more | 3,420 |
| writefreelynicholaswildeVerified publisher | 1.0.0 | 1 of 1See more | 9,416 |
| node-exporternode-exporterVerified publisher | 0.1.10 | 1 of 1See more | 1,864 |
| helm-composenousefreakVerified publisher | 0.1.3 | 1 of 2See more | 15,782 |
| nri-resource-policy-balloonsnri-pluginsOfficialVerified publisher | 0.14.0 | 1 of 1See more | 616 |
| nri-resource-policy-topology-awarenri-pluginsOfficialVerified publisher | 0.14.0 | 1 of 1See more | 616 |
| nutanix-csi-snapshotnutanix-helm-releasesOfficialVerified publisher | 8.3.0 | 1 of 1See more | 843 |
| nvidia-gpu-exporternvidia-gpu-exporterVerified publisher | 2.15.1 | 1 of 1See more | 441 |
| octopuso7studios-octopus-helm-chartsOfficialVerified publisher | 1.2.3 | 4 of 5See more | 7,871 |
| oadaoadaVerified publisher | 5.0.6 | 1 of 11See more | 15,388 |
| opengistobeoneVerified publisher | 1.1.6 | 1 of 1See more | 713 |
| transfer.shobeoneVerified publisher | 1.0.5 | 1 of 1See more | 1,778 |
| oci-native-ingress-controlleroci-native-ingress-controller | 1.0.0 | 1 of 1See more | 861 |
| ociregistryociregistryVerified publisher | 1.20.0 | 1 of 1See more | 128 |
| growthbookone-acre-fundVerified publisher | 0.3.0 | 1 of 3See more | 1,751 |
| oom-oracleoom-oracleVerified publisher | 0.1.2 | 1 of 1See more | 124 |
| open5gs-hssopen5gs-hssVerified publisher | 2.3.3 | 1 of 2See more | 617 |
| open5gs-pcrfopen5gs-pcrfVerified publisher | 2.3.3 | 1 of 2See more | 617 |
| open5gs-scpopen5gs-scpVerified publisher | 2.3.4 | 1 of 2See more | 617 |
| open5gs-udropen5gs-udrVerified publisher | 2.3.4 | 1 of 2See more | 617 |
| open5gs-webuiopen5gs-webuiVerified publisher | 2.3.3 | 1 of 2See more | 7,129 |
| openccuopenccuVerified publisher | 3.89.11 | 1 of 1See more | 1,846 |
| kruiseopenkruise | 1.9.1 | 2 of 2See more | 2,709 |
| openobserveopenobserve | 1.0.2 | 5 of 6See more | 4,156 |
| openrouter-botopenrouter-botVerified publisher | 0.2.0 | 1 of 1See more | 1,409 |
| librechatopenshift | 1.9.0 | 1 of 3See more | 6,745 |
| openstack-kamaji-clusteropenstack-kamaji-clusterVerified publisher | 0.2.4 | 1 of 1See more | 1,183 |
| opentelemetry-demoopentelemetry-helmOfficialVerified publisher | 0.42.3 | 10 of 34See more | 26,079 |
| openvaultopenvaultVerified publisher | 0.9.0 | 1 of 2See more | 8,097 |
| openvox-operatoropenvox-operatorVerified publisher | 0.14.0 | 1 of 1See more | 147 |
| opikopikOfficialVerified publisher | 2.2.96 | 6 of 12See more | 15,883 |
Container images carrying it
6,392 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | eda951fd29a8 | stdlib | 1.26.9 | 2 |
| library/ | f5af5a5ce17f | stdlib | 1.26.9 | 2 |
| library/ | e6b279d01350 | stdlib | 1.26.9 | 2 |
| lightninglabs/ | f86bbec4dfb3 | stdlib | 1.26.9 | 2 |
| linuxserver/ | 45c5fe102ff3 | stdlib | 1.26.9 | 2 |
| listmonk/ | d2eac77ddfad | stdlib | 1.26.9 | 2 |
| listmonk/ | f535d59e1499 | stdlib | 1.26.9 | 2 |
| localstack/ | 801a3dff7f6a | stdlib | 1.26.9 | 2 |
| longhornio/ | dca34321452c | stdlib | 1.26.9 | 2 |
| louislam/ | 96510915e6be | stdlib | 1.26.9 | 2 |
| louislam/ | 9aeb4e51d038 | stdlib | 1.26.9 | 2 |
| louislam/ | a8610b3b4c38 | stdlib | 1.26.9 | 2 |
| louislam/ | c74379ac4509 | stdlib | 1.26.9 | 2 |
| mattermost/ | b8bd1246cb3a | stdlib | 1.26.9 | 2 |
| matthiasluedtke/ | 661d607b0fbc | stdlib | 1.26.9 | 2 |
| maxrocketinternet/ | a867315facf8 | stdlib | 1.26.9 | 2 |
| maxrocketinternet/ | 1a281b76efa3 | stdlib | 1.26.9 | 2 |
| mesosphere/ | 073db43d0b8b | stdlib | 1.26.9 | 2 |
| mesosphere/ | ea01a9387771 | stdlib | 1.26.9 | 2 |
| mikefarah/ | 4b3d9475d655 | stdlib | 1.26.9 | 2 |
| moby/ | 504731e577c2 | stdlib | 1.26.9 | 2 |
| nacos/ | 1c191c30c8cd | stdlib | 1.26.9 | 2 |
| natsio/ | 9fbf7bf684e4 | stdlib | 1.26.9 | 2 |
| natsio/ | 47094fcae2f4 | stdlib | 1.26.9 | 2 |
| natsio/ | 911ce7ed2f55 | stdlib | 1.26.9 | 2 |
| natsio/ | e414cc7e6f59 | stdlib | 1.26.9 | 2 |
| natsio/ | 16048afb67a5 | stdlib | 1.26.9 | 2 |
| natsio/ | 31c02aac089a | stdlib | 1.26.9 | 2 |
| neosmemo/ | 24c2707ddd8f | stdlib | 1.26.9 | 2 |
| nousresearch/ | fca358f12efd | stdlib | 1.26.9 | 2 |
| obolnetwork/ | 278c7e2897b6 | stdlib | 1.26.9 | 2 |
| oliver006/ | 4af75e9f16f6 | stdlib | 1.26.9 | 2 |
| openbas/ | a277796d9724 | stdlib | 1.26.9 | 2 |
| opencloudeu/ | 8fc64ca86173 | stdlib | 1.26.9 | 2 |
| opencloudeu/ | f9634bb04905 | stdlib | 1.26.9 | 2 |
| openebs/ | c86c06f1ce6a | stdlib | 1.26.9 | 2 |
| openebs/ | 4d1b85539919 | stdlib | 1.26.9 | 2 |
| openebs/ | bb04e41fc1b8 | stdlib | 1.26.9 | 2 |
| openebs/ | 99f5116f5cb8 | stdlib | 1.26.9 | 2 |
| openfga/ | 9cf9a20af32a | stdlib | 1.26.9 | 2 |
| openkruise/ | edc7cf9428fd | stdlib | 1.26.9 | 2 |
| openpolicyagent/ | 825370bdb3c3 | stdlib | 1.26.9 | 2 |
| oryd/ | 0a7a2bfd0e7d | stdlib | 1.26.9 | 2 |
| oryd/ | d06fc5845f63 | stdlib | 1.26.9 | 2 |
| oryd/ | fe2428f103a6 | stdlib | 1.26.9 | 2 |
| oryd/ | e8cb9b79a89c | stdlib | 1.26.9 | 2 |
| osixia/ | ccd95cc6e61e | stdlib | 1.26.9 | 2 |
| otel/ | 7ef2a2ff46b9 | stdlib | 1.26.9 | 2 |
| otel/ | a7343f018690 | stdlib | 1.26.9 | 2 |
| otel/ | fd328de25524 | stdlib | 1.26.9 | 2 |