CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,533
- of 18,090 indexed, latest versions
- Container images
- 6,378
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,378 |
| ingress-nginx-controller-1.15apk | 1.15.10-r3 | 1.15.10-r8 | 1 |
- OSV records
- CGA-3j79-hxrj-98c9GO-2026-6604
- Also known as
- CGA-28rp-569c-vjc3, CGA-4j4m-4mp6-xp7x, CGA-85gw-4745-j8q8, CGA-929x-9pxj-5mv4, CGA-jc7p-vgxm-j32v
- Trending
- Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,533 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| affinehelmforgeVerified publisher | 1.0.2 | 1 of 3See more | 4,854 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,539 |
| answerhelmforgeVerified publisher | 1.5.3 | 1 of 1See more | 886 |
| appwritehelmforgeVerified publisher | 2.0.3 | 2 of 5See more | 5,363 |
| automatischhelmforgeVerified publisher | 1.3.9 | 2 of 4See more | 6,609 |
| booklorehelmforgeVerified publisher | 2.0.2 | 1 of 3See more | 2,560 |
| castopodhelmforgeVerified publisher | 1.2.10 | 2 of 3See more | 10,832 |
| certimatehelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 258 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 8,764 |
| ckanhelmforgeVerified publisher | 1.3.10 | 2 of 6See more | 11,613 |
| cloudflaredhelmforgeVerified publisher | 1.5.17 | 1 of 1See more | 625 |
| countlyhelmforgeVerified publisher | 1.2.8 | 2 of 3See more | 76,305 |
| dawarichhelmforgeVerified publisher | 1.0.3 | 2 of 4See more | 12,670 |
| ddns-updaterhelmforgeVerified publisher | 1.4.12 | 1 of 1See more | 574 |
| discount-bandithelmforgeVerified publisher | 2.0.9 | 2 of 3See more | 36,249 |
| druidhelmforgeVerified publisher | 1.3.6 | 2 of 4See more | 10,112 |
| drupalhelmforgeVerified publisher | 1.2.15 | 1 of 2See more | 4,535 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 5,246 |
| ghosthelmforgeVerified publisher | 1.2.10 | 2 of 3See more | 3,917 |
| ghostfoliohelmforgeVerified publisher | 1.0.1 | 1 of 4See more | 5,157 |
| giteahelmforgeVerified publisher | 1.1.21 | 1 of 1See more | 905 |
| github-mcp-serverhelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 745 |
| glancehelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 376 |
| gophishhelmforgeVerified publisher | 0.1.6 | 1 of 1See more | 4,200 |
| hermes-agenthelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 6,976 |
| hoppscotchhelmforgeVerified publisher | 1.1.12 | 2 of 2See more | 2,807 |
| immichhelmforgeVerified publisher | 1.2.10 | 1 of 5See more | 13,216 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 3,471 |
| komgahelmforgeVerified publisher | 1.4.16 | 1 of 1See more | 37,589 |
| kubernetes-mcp-serverhelmforgeVerified publisher | 1.0.7 | 1 of 1See more | 311 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 3 of 3See more | 3,710 |
| medikeephelmforgeVerified publisher | 2.0.2 | 2 of 3See more | 6,700 |
| memoshelmforgeVerified publisher | 2.0.2 | 1 of 2See more | 509 |
| metabasehelmforgeVerified publisher | 1.2.30 | 1 of 3See more | 2,068 |
| metrics-serverhelmforgeVerified publisher | 1.0.4 | 1 of 1See more | 462 |
| middlewarehelmforgeVerified publisher | 1.2.8 | 2 of 4See more | 10,728 |
| minecrafthelmforgeVerified publisher | 1.5.5 | 1 of 1See more | 5,167 |
| mongodbhelmforgeVerified publisher | 1.8.2 | 1 of 1See more | 1,499 |
| moodlehelmforgeVerified publisher | 1.1.3 | 1 of 2See more | 7,284 |
| mysqlhelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 797 |
| netboxhelmforgeVerified publisher | 2.0.3 | 2 of 4See more | 4,906 |
| nextcloudhelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 7,688 |
| ntfyhelmforgeVerified publisher | 1.2.2 | 1 of 1See more | 401 |
| oauth2-proxyhelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 272 |
| olivetinhelmforgeVerified publisher | 1.2.2 | 1 of 2See more | 731 |
| opencuthelmforgeVerified publisher | 1.1.11 | 1 of 5See more | 3,805 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,745 |
| pimcorehelmforgeVerified publisher | 2.0.4 | 2 of 6See more | 3,420 |
| pocket-idhelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 705 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 4,056 |
Container images carrying it
6,378 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ethpandaops/ | 89424dbe2d6b | stdlib | 1.26.9 | 3 |
| glanceapp/ | 9dfb09470b20 | stdlib | 1.26.9 | 3 |
| goharbor/ | d7b780d23721 | stdlib | 1.26.9 | 3 |
| goharbor/ | f71a4452a095 | stdlib | 1.26.9 | 3 |
| goharbor/ | 223d5cb49d5d | stdlib | 1.26.9 | 3 |
| goharbor/ | c4ebef61ceb5 | stdlib | 1.26.9 | 3 |
| goharbor/ | 215c07b71c37 | stdlib | 1.26.9 | 3 |
| grafana/ | 00568d89c4f8 | stdlib | 1.26.9 | 3 |
| grafana/ | 121a7a9ece6d | stdlib | 1.26.9 | 3 |
| grafana/ | 69a5d2d957ca | stdlib | 1.26.9 | 3 |
| grafana/ | a0f881232a6f | stdlib | 1.26.9 | 3 |
| grafana/ | 1107dd5274e0 | stdlib | 1.26.9 | 3 |
| grafana/ | 44148ad243c0 | stdlib | 1.26.9 | 3 |
| grafana/ | 58a6c186ce78 | stdlib | 1.26.9 | 3 |
| grafana/ | 0dac7d5cb383 | stdlib | 1.26.9 | 3 |
| grafana/ | 626900031c4e | stdlib | 1.26.9 | 3 |
| groundnuty/ | c14d7271e401 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 1c59f007df8e | stdlib | 1.26.9 | 3 |
| hashicorp/ | 9334d7f4bcf0 | stdlib | 1.26.9 | 3 |
| hashicorp/ | fcb75f691c8b | stdlib | 1.26.9 | 3 |
| hashicorp/ | 5be49781ecf7 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 55e27b080c9b | stdlib | 1.26.9 | 3 |
| hetznercloud/ | 024ea4b07161 | stdlib | 1.26.9 | 3 |
| jacobalberty/ | 896c0ab82d33 | stdlib | 1.26.9 | 3 |
| kubegems/ | a730bcf9322a | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 96a702cfd339 | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 53e9917898bf | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 5154b68252bd | stdlib | 1.26.9 | 3 |
| kubernetesui/ | cc7c31bd2d84 | stdlib | 1.26.9 | 3 |
| kubespheredev/ | 23a03c9c381f | stdlib | 1.26.9 | 3 |
| l7mp/ | c4654dade66e | stdlib | 1.26.9 | 3 |
| library/ | f2a1290d0463 | stdlib | 1.26.9 | 3 |
| library/ | af96c680a7e1 | stdlib | 1.26.9 | 3 |
| library/ | 5d7043a4ffe0 | stdlib | 1.26.9 | 3 |
| library/ | 9854f7139445 | stdlib | 1.26.9 | 3 |
| library/ | b83efabe3e7d | stdlib | 1.26.9 | 3 |
| library/ | cd3fcd4ecdda | stdlib | 1.26.9 | 3 |
| library/ | 3162a6ead070 | stdlib | 1.26.9 | 3 |
| library/ | 468d34fefd63 | stdlib | 1.26.9 | 3 |
| library/ | 4ea9e5ed0659 | stdlib | 1.26.9 | 3 |
| library/ | 5d2aa4a7b5f9 | stdlib | 1.26.9 | 3 |
| library/ | 65b16a8b326e | stdlib | 1.26.9 | 3 |
| library/ | 6737476511d4 | stdlib | 1.26.9 | 3 |
| library/ | 724292da1f2e | stdlib | 1.26.9 | 3 |
| library/ | 1be55279f18a | stdlib | 1.26.9 | 3 |
| library/ | 24841fe2de73 | stdlib | 1.26.9 | 3 |
| mcp/ | 9362bcf6aa0e | stdlib | 1.26.9 | 3 |
| meshery/ | 44b64ee128fb | stdlib | 1.26.9 | 3 |
| mikefarah/ | 6fc625c402de | stdlib | 1.26.9 | 3 |
| minio/ | 54393e03f3b2 | stdlib | 1.26.9 | 3 |