StackRadar

CVE-2026-56857

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,554
of 18,071 indexed, latest versions
Container images
6,411
deployed by those charts
Fix available
1 of 1
affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,411
OSV records
GO-2026-6604
Trending
Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,554 by stars
ChartLatestAffected imagesRadar Score
appshini4iVerified publisher0.4.01 of 1See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
traefik/whoami:v1.10.21474027c3166
stdlib@go1.22.2
1.26.9

Open the chart page →

973
skypilotskypilotOfficialVerified publisher0.14.03 of 3See more

skypilot skypilot 0.14.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.0a8362d205365
stdlib@go1.26.2
1.26.9
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
stdlib@go1.24.4
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
stdlib@go1.24.4
1.26.9

Open the chart page →

5,717
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
stdlib@go1.20
1.26.9

Open the chart page →

2,415
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
stdlib@go1.14.2
1.26.9

Open the chart page →

18,189
forecastlestakaterVerified publisher2.1.31 of 1See more

forecastle stakater 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
stakater/forecastle:v2.0.2382cd9572352
stdlib@go1.26.4
1.26.9

Open the chart page →

976
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
stdlib@go1.24.13
1.26.9

Open the chart page →

863
tigera-operatorstevehipwellVerified publisher2.15.01 of 1See more

tigera-operator stevehipwell 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.9

Open the chart page →

76
vertical-pod-autoscalerstevehipwell-helm-charts-vertical-pod-autoscalerVerified publisher1.12.13 of 3See more

vertical-pod-autoscaler stevehipwell-helm-charts-vertical-pod-autoscaler 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.9

Open the chart page →

642
sn-platformstreamnative1.11.466 of 9See more

sn-platform streamnative 1.11.46

6 of the 9 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.9
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.9
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.26.9
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.26.9
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.9
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
stdlib@go1.19.7
1.26.9

Open the chart page →

77,633
stunnerstunner1.2.12 of 2See more

stunner stunner 1.2.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.2.10d2094060b72
stdlib@go1.26.4
1.26.9
l7mp/stunner-gateway-operator:1.2.10ea40a1d42d5
stdlib@go1.26.4
1.26.9

Open the chart page →

588
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
stdlib@go1.24.6
1.26.9

Open the chart page →

1,907
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9

Open the chart page →

12,101
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
stdlib@go1.24.4
1.26.9

Open the chart page →

4,667
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
stdlib@go1.20.5
1.26.9
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
stdlib@go1.19.12
1.26.9
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
stdlib@go1.19.12
1.26.9

Open the chart page →

17,778
feedbacksystemthm-mni-iiVerified publisher0.48.211 of 14See more

feedbacksystem thm-mni-ii 0.48.2

11 of the 14 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
stdlib@go1.21.5
1.26.9
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.9
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
stdlib@go1.21.5
1.26.9
library/docker:20.10.21-dind3153fa63f546
stdlib@go1.18.7
1.26.9
ghcr.io/thm-mni-ii/fbs-core:v2.0.734fd2032724c
stdlib@go1.26.7
1.26.9
ghcr.io/thm-mni-ii/fbs-core-web:v2.0.71a8121871436
stdlib@go1.26.8
1.26.9
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.711b619dcd155
stdlib@go1.26.7
1.26.9
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.7d5aa22a0ffe3
stdlib@go1.20.12
1.26.9
ghcr.io/thm-mni-ii/fbs-runner:v2.0.78a9f30ef6aa8
stdlib@go1.20.11
1.26.9
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.788c20bb35a99
stdlib@go1.26.8
1.26.9
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.72b7662853d7c
stdlib@go1.26.8
1.26.9

Open the chart page →

28,436
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
stdlib@go1.24.2
1.26.9

Open the chart page →

2,184
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
stdlib@go1.14.4
1.26.9

Open the chart page →

5,893
traefik-meshtraefikOfficialVerified publisher4.1.13 of 7See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
stdlib@go1.14.4
1.26.9
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.9
traefik/mesh:v1.4.8cf071f3e165c
stdlib@go1.19
1.26.9

Open the chart page →

12,803
ttl-controllerttl-controllerVerified publisher1.9.11 of 1See more

ttl-controller ttl-controller 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller:1.9.18092dd72f073
stdlib@go1.27.0-X:nodwarf5
1.26.9

Open the chart page →

72
k8s-ttl-controllertwin0.4.01 of 1See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/twin/k8s-ttl-controller:v1.4.00525a7def93d
stdlib@go1.24.1
1.26.9

Open the chart page →

861
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
stdlib@go1.19.6
1.26.9
quay.io/argoproj/argocd:v2.8.6acaf37352569
stdlib@go1.20.4
1.26.9

Open the chart page →

12,349
crossplaneupbound-stable2.4.2-up.11 of 5See more

crossplane upbound-stable 2.4.2-up.1

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:14c2427de38f99
stdlib@go1.24.6
1.26.9

Open the chart page →

1,753
uptraceuptrace2.0.22 of 2See more

uptrace uptrace 2.0.2

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:latestfd328de25524
stdlib@go1.26.8
1.26.9
uptrace/uptrace:2.0.234a02c3b2d12
stdlib@go1.24.10
1.26.9

Open the chart page →

2,073
valkey-operatorvalkeyVerified publisher0.7.01 of 1See more

valkey-operator valkey 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.7.1bfa3be0b1173
stdlib@go1.26.8
1.26.9

Open the chart page →

260
vaultvaultVerified publisher1.22.04 of 4See more

vault vault 1.22.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
stdlib@go1.26.0
1.26.9
hashicorp/vault:2.0.1755355002715
stdlib@go1.26.3
1.26.9
prom/statsd-exporter:v0.29.0632f70580492
stdlib@go1.26.0
1.26.9
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
stdlib@go1.26.3
1.26.9

Open the chart page →

5,768
victoria-logs-clustervictoriametricsVerified publisher0.2.91 of 1See more

victoria-logs-cluster victoriametrics 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.53.0251121fa882a
stdlib@go1.27.1
1.26.9

Open the chart page →

52
victoria-metrics-authvictoriametricsVerified publisher0.43.01 of 1See more

victoria-metrics-auth victoriametrics 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
victoriametrics/vmauth:v1.153.04ebf2f21490d
stdlib@go1.27.1
1.26.9

Open the chart page →

65
vouchvouchVerified publisher3.2.01 of 1See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/vouch/vouch-proxy:0.39d34e220de3cf
stdlib@go1.18.10
1.26.9

Open the chart page →

1,727
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
stdlib@go1.20.7
1.26.9

Open the chart page →

1,939
gethvulcanlink1.10.231 of 1See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.23cce21b423165
stdlib@go1.18.5
1.26.9

Open the chart page →

3,020
api-firewallwallarmVerified publisher0.9.61 of 1See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/api-firewall:v0.9.64d45db0ff240
stdlib@go1.25.8
1.26.9

Open the chart page →

1,376
wallarm-ingresswallarmVerified publisher5.3.10-12 of 2See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/ingress-controller:5.3.10.1a1fecfdf987e
stdlib@go1.23.1
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.26.9

Open the chart page →

2,108
wallarm-sidecarwallarmOfficialVerified publisher6.13.22 of 3See more

wallarm-sidecar wallarm 6.13.2

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/node-helpers:6.13.2290a87f01799
stdlib@go1.26.8
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.9

Open the chart page →

1,569
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
stdlib@go1.21.5
1.26.9

Open the chart page →

4,066
prometheuswener29.36.16 of 6See more

prometheus wener 29.36.1

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.9
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

830
argo-cdwenerme10.10.12 of 3See more

argo-cd wenerme 10.10.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.9
quay.io/argoproj/argocd:v3.5.449dff79439bb
stdlib@go1.25.3
1.26.9

Open the chart page →

2,402
daprwenerme1.18.55 of 5See more

dapr wenerme 1.18.5

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dapr/injector:1.18.50c6735a025dc
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/operator:1.18.59bc91e9d1f8e
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/placement:1.18.52a2b99d466e8
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/scheduler:1.18.5734c1e29d1d9
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/sentry:1.18.556faf97016d6
stdlib@go1.26.6
1.26.9

Open the chart page →

380
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.26.9

Open the chart page →

7,182
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:15.186eb0add3b77c
stdlib@go1.24.6
1.26.9

Open the chart page →

9,028
wharf-helmwharf-helmOfficialVerified publisher3.2.64 of 5See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
stdlib@go1.18.1
1.26.9
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
stdlib@go1.18.2
1.26.9
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
stdlib@go1.18.2
1.26.9
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
stdlib@go1.18.2
1.26.9

Open the chart page →

13,563
windmillwindmill4.0.2801 of 3See more

windmill windmill 4.0.280

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

1,636
buildkitdwiremindVerified publisher0.33.11 of 1See more

buildkitd wiremind 0.33.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
stdlib@go1.25.7
1.26.9

Open the chart page →

1,536
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
stdlib@go1.13.8
1.26.9

Open the chart page →

5,906
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
stdlib@go1.18.4
1.26.9

Open the chart page →

5,721
yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter0.38.01 of 1See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
stdlib@go1.22.4
1.26.9

Open the chart page →

1,284
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
stdlib@go1.23.12
1.26.9

Open the chart page →

5,306
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
stdlib@go1.24.4
1.26.9

Open the chart page →

4,678
adcs-issueradcs-issuer3.0.21 of 1See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
djkormo/adcs-issuer:2.1.29f34e87e7586
stdlib@go1.22.6
1.26.9

Open the chart page →

1,256
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
stdlib@go1.23.7
1.26.9

Open the chart page →

2,364
no-latest-tag-webhookadmission-webhook-no-latest1.0.141 of 1See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest:sha-33165455976a1d3236a
stdlib@go1.26.3
1.26.9

Open the chart page →

356

Container images carrying it

6,411 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.26.9
7
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.9
7
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.9
7
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.9
7
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.9
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.9
7
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.9
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.9
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.9
7
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.9
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.9
7
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.9
7
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.9
6
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.9
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.9
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.9
6
cloudflare/cloudflared:2026.10.0:latest9b49eed8f628
stdlib@go1.26.8
1.26.9
6
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.9
6
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.9
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.9
6
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.9
6
library/mariadb:10:10.117db29378d4fd
stdlib@go1.24.6
1.26.9
6
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9
6
library/postgres:17d74eeac9a635
stdlib@go1.24.6
1.26.9
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.9
6
library/ubuntu:latestf144425ff09b
stdlib@go1.26.7
1.26.9
6
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.9
6
postgis/postgis:17-3.5:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9
6
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.9
6
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.9
6
traefik/whoami:latest:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.9
6
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.9
6
ghcr.io/appscode/b3:v2026.9.1149b706354a6f
stdlib@go1.25.3
1.26.9
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.26.9
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
stdlib@go1.20.12
1.26.9
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
stdlib@go1.16.6
1.26.9
6
quay.io/devtron/kubectl:latest2ad610626658
stdlib@go1.18.5
1.26.9
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
stdlib@go1.19.9
1.26.9
6
quay.io/devtron/postgres:14.91b594392f7cb
stdlib@go1.18.2
1.26.9
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
stdlib@go1.17.6
1.26.9
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.9
6
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.9
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.9
6
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.9
6
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
6
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9
6
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.9
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.9
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.9
6

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.