CVE-2026-56857
UnscoredAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,511
- of 18,087 indexed, latest versions
- Container images
- 6,327
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,511 of 18,087 indexed charts deploy, on 6,327 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,327 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,511 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| dexdexVerified publisher | 0.26.0 | 1 of 1See more | 412 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 36,379 |
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 12,588 |
| falcofalcosecurity | 9.2.0 | 3 of 3See more | 3,437 |
| kubeviewkubeviewVerified publisher | 2.2.1 | 1 of 1See more | 242 |
| alertmanagerprometheus-communityOfficialVerified publisher | 2.1.0 | 2 of 2See more | 228 |
| kongkongOfficialVerified publisher | 3.4.1 | 1 of 2See more | 793 |
| nfs-server-provisionerkvaps | 1.8.0 | 1 of 1See more | 3,382 |
| chartmuseumchartmuseumVerified publisher | 3.10.4 | 1 of 1See more | 2,025 |
| prometheus-node-exporterprometheus-communityOfficialVerified publisher | 4.59.0 | 1 of 1See more | 221 |
| rook-cephrookOfficialVerified publisher | 1.21.0 | 2 of 2See more | 1,793 |
| grafanagrafana-communityVerified publisher | 13.5.0 | 1See more | — |
| argo-eventsargoOfficialVerified publisher | 2.4.27 | 1 of 1See more | 1,472 |
| victoria-metrics-k8s-stackvictoriametricsVerified publisher | 0.95.2 | 5 of 7See more | 987 |
| aws-node-termination-handleraws | 0.21.0 | 1 of 1See more | 2,150 |
| kuredkuredOfficialVerified publisher | 6.1.0 | 1 of 1See more | 395 |
| home-assistanthelm-hassVerified publisher | 0.3.85 | 1See more | — |
| prometheus-adapterprometheus-communityOfficialVerified publisher | 5.3.0 | 1 of 1See more | 1,421 |
| openebsopenebsOfficialVerified publisher | 4.6.2 | 20 of 35See more | 33,271 |
| tigera-operatorprojectcalico | 3.33.0 | 1 of 1See more | 76 |
| open-webuiopen-webui | 16.6.0 | 1 of 4See more | 2,277 |
| actions-runner-controlleractions-runner-controller | 0.23.7 | 2 of 2See more | 4,207 |
| aws-for-fluent-bitaws | 0.2.0 | 1 of 1See more | 460 |
| corednscorednsVerified publisher | 1.48.2 | 1 of 1See more | 410 |
| apisixapisix | 2.18.0 | 1 of 3See more | 3,464 |
| vpafairwinds-stableVerified publisher | 5.1.0 | 4 of 4See more | 2,290 |
| x509-certificate-exporterenixOfficialVerified publisher | 4.2.0 | 1 of 1See more | 221 |
| terraformhashicorpVerified publisher | 1.1.2 | 1 of 1See more | 2,806 |
| opentelemetry-operatoropentelemetry-helmOfficialVerified publisher | 0.124.1 | 1 of 1See more | 72 |
| trinotrino | 1.42.2 | 1 of 1See more | 1,745 |
| prometheus-pushgatewayprometheus-communityOfficialVerified publisher | 3.9.1 | 1 of 1See more | 76 |
| dagsterdagsterVerified publisher | 1.13.26 | 1See more | — |
| prometheus-redis-exporterprometheus-communityVerified publisher | 6.33.0 | 1 of 1See more | 56 |
| zabbixzabbix-communityVerified publisher | 7.1.0 | 3 of 5See more | 15,941 |
| keycloakcloudpirates-keycloakVerified publisher | 0.21.46 | 2 of 3See more | 4,977 |
| graylogkong-zVerified publisher | 3.0.36 | 1 of 5See more | 3,165 |
| netdatanetdataVerified publisher | 3.7.175 | 1 of 1See more | 2,727 |
| connectonepassword-connect | 2.4.2 | 2 of 2See more | 222 |
| node-problem-detectordeliveryheroVerified publisher | 2.4.1 | 1 of 1See more | 2,421 |
| opencostopencostOfficialVerified publisher | 2.5.32 | 1 of 2See more | 350 |
| openfaasopenfaas | 15.0.13 | 6 of 6See more | 5,050 |
| prometheus-elasticsearch-exporterprometheus-communityVerified publisher | 7.4.0 | 1 of 1See more | 248 |
| flux2fluxcd-community | 2.19.1 | 7 of 7See more | 3,517 |
| gitlab-agentgitlabVerified publisher | 2.32.0 | 1 of 1See more | 101 |
| jaeger-operatorjaegertracingOfficialVerified publisher | 2.57.0 | 1 of 1See more | 1,020 |
| policy-reporterpolicy-reporterOfficialVerified publisher | 3.11.0 | 1 of 1See more | 101 |
| keydbenapter | 0.48.0 | 1 of 1See more | 6,571 |
| netboxnetboxOfficialVerified publisher | 8.3.91 | 3 of 5See more | 1,630 |
| valkeybitnamiVerified publisher | 6.3.4 | 1 of 1See more | 52 |
| postgrescloudpirates-postgresVerified publisher | 0.21.2 | 1 of 1See more | 1,636 |
Container images carrying it
6,327 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| alpine/ | 21b24e6bf801 | stdlib | 1.26.9 | 1 |
| alpine/ | 6dbe6f391eda | stdlib | 1.26.9 | 1 |
| alpine/ | 7a319b15cfc9 | stdlib | 1.26.9 | 1 |
| alpine/ | 7e1e7d5b7a96 | stdlib | 1.26.9 | 1 |
| alpine/ | 9c4976d47656 | stdlib | 1.26.9 | 1 |
| alpine/ | a41efe02a041 | stdlib | 1.26.9 | 1 |
| alpine/ | b7a12c5ddf26 | stdlib | 1.26.9 | 1 |
| alpine/ | bd01dae02676 | stdlib | 1.26.9 | 1 |
| alpine/ | cd560fce90f7 | stdlib | 1.26.9 | 1 |
| alpine/ | d870622d0040 | stdlib | 1.26.9 | 1 |
| alpine/ | e5c0b053fed7 | stdlib | 1.26.9 | 1 |
| alpine/ | eec354133193 | stdlib | 1.26.9 | 1 |
| alpine/ | fc059f056ad0 | stdlib | 1.26.9 | 1 |
| alpine/ | 1ee9df6316d4 | stdlib | 1.26.9 | 1 |
| alpine/ | 2c59a3f0726c | stdlib | 1.26.9 | 1 |
| alpine/ | 862d86046bbc | stdlib | 1.26.9 | 1 |
| alpine/ | c4a11ae9a1cb | stdlib | 1.26.9 | 1 |
| altinity/ | 1d6f18dbd599 | stdlib | 1.26.9 | 1 |
| altinity/ | 4baec90b20cd | stdlib | 1.26.9 | 1 |
| altinity/ | 74315beb57db | stdlib | 1.26.9 | 1 |
| altinity/ | 7a85f522c5bc | stdlib | 1.26.9 | 1 |
| altinity/ | 8f0f582d41f0 | stdlib | 1.26.9 | 1 |
| altinity/ | a802b3a19d20 | stdlib | 1.26.9 | 1 |
| altinity/ | c60c872fedd8 | stdlib | 1.26.9 | 1 |
| altinity/ | 1a46d104406d | stdlib | 1.26.9 | 1 |
| altinity/ | 2912a6c15b44 | stdlib | 1.26.9 | 1 |
| altinity/ | 6ecf67edfb71 | stdlib | 1.26.9 | 1 |
| altinity/ | a4d7ff0c727e | stdlib | 1.26.9 | 1 |
| altinity/ | a5206c713de7 | stdlib | 1.26.9 | 1 |
| altinity/ | d257a72e6a6a | stdlib | 1.26.9 | 1 |
| alustan/ | c16c34f46ad3 | stdlib | 1.26.9 | 1 |
| amaanx86/ | d7206ac7a319 | stdlib | 1.26.9 | 1 |
| amacneil/ | 3fdce58cc189 | stdlib | 1.26.9 | 1 |
| amazon/ | d8ab0eef5074 | stdlib | 1.26.9 | 1 |
| amazon/ | 32bd729ab859 | stdlib | 1.26.9 | 1 |
| amazon/ | 73b79b02f03a | stdlib | 1.26.9 | 1 |
| amazon/ | e745d1783c93 | stdlib | 1.26.9 | 1 |
| ambassador/ | 2a4598b03a6a | stdlib | 1.26.9 | 1 |
| ambassador/ | b7eb1be3345d | stdlib | 1.26.9 | 1 |
| ambassador/ | 5fc571509b8c | stdlib | 1.26.9 | 1 |
| ambassador/ | 7a1ea0d934fb | stdlib | 1.26.9 | 1 |
| amd64/ | e20a653e0f51 | stdlib | 1.26.9 | 1 |
| anamskenneth/ | 9ecf04f42cc3 | stdlib | 1.26.9 | 1 |
| anchore/ | bde9eedf639d | stdlib | 1.26.9 | 1 |
| anchore/ | 2b424b3b9a03 | stdlib | 1.26.9 | 1 |
| anchore/ | 8aad6d0912dd | stdlib | 1.26.9 | 1 |
| anchore/ | 1a1a374658c8 | stdlib | 1.26.9 | 1 |
| andrcuns/ | 43060f159f4c | stdlib | 1.26.9 | 1 |
| andrcuns/ | b4a8eb20581a | stdlib | 1.26.9 | 1 |
| andreacioni/ | 2938b310090a | stdlib | 1.26.9 | 1 |