CVE-2026-56857
CriticalAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,339
- of 18,108 indexed, latest versions
- Container images
- 6,174
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,339 of 18,108 indexed charts deploy, on 6,174 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,174 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,339 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| metrics-serverhelmforgeVerified publisher | 1.0.4 | 1 of 1See more | 469 |
| middlewarehelmforgeVerified publisher | 1.2.8 | 2 of 4See more | 10,742 |
| minecrafthelmforgeVerified publisher | 1.5.5 | 1 of 1See more | 5,175 |
| mongodbhelmforgeVerified publisher | 1.8.2 | 1 of 1See more | 1,329 |
| moodlehelmforgeVerified publisher | 1.1.3 | 1 of 2See more | 7,286 |
| mysqlhelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 804 |
| netboxhelmforgeVerified publisher | 2.0.3 | 2 of 4See more | 4,943 |
| nextcloudhelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 7,790 |
| ntfyhelmforgeVerified publisher | 1.2.2 | 1 of 1See more | 408 |
| oauth2-proxyhelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 279 |
| olivetinhelmforgeVerified publisher | 1.2.2 | 1 of 2See more | 738 |
| opencuthelmforgeVerified publisher | 1.1.11 | 1 of 5See more | 3,808 |
| openhumanhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,967 |
| openreplayhelmforgeVerified publisher | 1.0.0 | 12 of 24See more | 14,609 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,752 |
| pimcorehelmforgeVerified publisher | 2.0.4 | 2 of 6See more | 3,435 |
| pocket-idhelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 712 |
| questdbhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 158 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 3,948 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 7,313 |
| siyuanhelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 407 |
| strapihelmforgeVerified publisher | 2.3.15 | 1 of 3See more | 3,016 |
| strava-statisticshelmforgeVerified publisher | 1.1.16 | 1 of 2See more | 1,228 |
| supersethelmforgeVerified publisher | 1.3.8 | 2 of 5See more | 6,493 |
| twentyhelmforgeVerified publisher | 1.0.4 | 1 of 5See more | 3,202 |
| wallabaghelmforgeVerified publisher | 1.3.8 | 2 of 3See more | 3,361 |
| webodmhelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 22,545 |
| zookeeperhelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 3,914 |
| harborhelm-harborVerified publisher | 2.3.7 | 5 of 8See more | 1,614 |
| openaevhelm-openbasVerified publisher | 2.0.12 | 1 of 7See more | 21,600 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 26,405 |
| release-cleanerhelm-release-cleanerVerified publisher | 1.0.0 | 1 of 1See more | 2,562 |
| pageshelm-repo | 1.0.0 | 1 of 3See more | 21,318 |
| steampipehelm-steampipeVerified publisher | 2.4.1 | 1 of 1See more | 3,901 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 7,190 |
| hermes-operatorhermes-agent-operatorVerified publisher | 0.2.0 | 1 of 1See more | 239 |
| postgres-backup-localheywood8-helm-chartsVerified publisher | 0.1.13 | 1 of 1See more | 3,487 |
| kubefaashfoxy-helm-charts | 0.1.6 | 3 of 4See more | 7,989 |
| tapo-prometheus-exporterhfoxy-helm-charts | 0.1.11 | 1 of 1See more | 1,435 |
| goshimmerhiveroad | 0.2.14 | 1 of 1See more | 3,827 |
| cratedb-adapterhmdmph | 0.1.0 | 1 of 1See more | 4,130 |
| printserverhmediadeVerified publisher | 1.0.2 | 2 of 4See more | 12,902 |
| imageproxyhmphuVerified publisher | 0.1.1 | 1 of 1See more | 3,323 |
| holmesholmes | 0.1.0 | 1 of 1See more | 2,892 |
| homeboxhomebox-helmVerified publisher | 0.3.0 | 1 of 2See more | 1,158 |
| homecharthomechartVerified publisher | 1.0.1 | 1 of 1See more | 216 |
| adguardhomeenterpriseinc | 0.12.0 | 1 of 1See more | 3,720 |
| cert-managerhomeenterpriseinc | 1.10.1 | 3 of 3See more | 7,305 |
| homeassistanthomeenterpriseinc | 0.3.0 | 1 of 1See more | 9,066 |
| photoprismhomeenterpriseinc | 0.8.0 | 1 of 1See more | 3,236 |
Container images carrying it
6,174 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | bb142a9c18ac | stdlib | 1.26.9 | 1 |
| library/ | c1e88455c852 | stdlib | 1.26.9 | 1 |
| library/ | c9d92d840fd0 | stdlib | 1.26.9 | 1 |
| library/ | 04ac44a2595b | stdlib | 1.26.9 | 1 |
| library/ | ddf754342cfc | stdlib | 1.26.9 | 1 |
| library/ | 28e98eece020 | stdlib | 1.26.9 | 1 |
| library/ | 507a3eecf809 | stdlib | 1.26.9 | 1 |
| library/ | 794079a7f241 | stdlib | 1.26.9 | 1 |
| library/ | addb86c0c520 | stdlib | 1.26.9 | 1 |
| library/ | 0a5157f742d2 | stdlib | 1.26.9 | 1 |
| library/ | 104204dadedf | stdlib | 1.26.9 | 1 |
| library/ | 1489caffaedb | stdlib | 1.26.9 | 1 |
| library/ | 1957e3314f43 | stdlib | 1.26.9 | 1 |
| library/ | 2f603f8d3abe | stdlib | 1.26.9 | 1 |
| library/ | 34d5089d0b41 | stdlib | 1.26.9 | 1 |
| library/ | 575fa15b1350 | stdlib | 1.26.9 | 1 |
| library/ | 5d47b7bb2546 | stdlib | 1.26.9 | 1 |
| library/ | 7d0228d19042 | stdlib | 1.26.9 | 1 |
| library/ | b70710baceeb | stdlib | 1.26.9 | 1 |
| library/ | b91812c7ee1b | stdlib | 1.26.9 | 1 |
| library/ | f98ac9dd97b0 | stdlib | 1.26.9 | 1 |
| library/ | d0ae1665a1e8 | stdlib | 1.26.9 | 1 |
| library/ | dfa9ba46d14b | stdlib | 1.26.9 | 1 |
| librenms/ | 0920bc9117a8 | stdlib | 1.26.9 | 1 |
| librenms/ | 4f1f3d667cc7 | stdlib | 1.26.9 | 1 |
| librenms/ | 814e3fb8d837 | stdlib | 1.26.9 | 1 |
| lifailon/ | ea37e4b6b952 | stdlib | 1.26.9 | 1 |
| lightstep/ | c800e05e1eff | stdlib | 1.26.9 | 1 |
| linode/ | 09f3282bf53d | stdlib | 1.26.9 | 1 |
| linode/ | ea915835a1c6 | stdlib | 1.26.9 | 1 |
| linuxchina/ | f758e2e567ee | stdlib | 1.26.9 | 1 |
| linuxserver/ | 241009026e6f | stdlib | 1.26.9 | 1 |
| linuxserver/ | 938810eca3d3 | stdlib | 1.26.9 | 1 |
| linuxserver/ | b38cae89eb9d | stdlib | 1.26.9 | 1 |
| linuxserver/ | b7f906899cd3 | stdlib | 1.26.9 | 1 |
| linuxserver/ | bb0510fedc3b | stdlib | 1.26.9 | 1 |
| linuxserver/ | 216ca1ce9da7 | stdlib | 1.26.9 | 1 |
| linuxserver/ | 437a490f7afc | stdlib | 1.26.9 | 1 |
| lishimeng/ | 3d5752dac834 | stdlib | 1.26.9 | 1 |
| lishimeng/ | c79a67657baf | stdlib | 1.26.9 | 1 |
| lishimeng/ | 3d00485e64dc | stdlib | 1.26.9 | 1 |
| lishimeng/ | 3e7d05ded625 | stdlib | 1.26.9 | 1 |
| lishimeng/ | 0970dfe5dc8f | stdlib | 1.26.9 | 1 |
| lishimeng/ | 8145c3dc83c8 | stdlib | 1.26.9 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | stdlib | 1.26.9 | 1 |
| lishimeng/ | e0b8d2d8ca28 | stdlib | 1.26.9 | 1 |
| listmonk/ | bf3903d54a46 | stdlib | 1.26.9 | 1 |
| litestream/ | c5a1e1b01916 | stdlib | 1.26.9 | 1 |
| livekit/ | 1ab01641b366 | stdlib | 1.26.9 | 1 |
| livekit/ | ecf1409c75e0 | stdlib | 1.26.9 | 1 |