CVE-2026-56857
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,533
- of 18,090 indexed, latest versions
- Container images
- 6,378
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,378 |
| ingress-nginx-controller-1.15apk | 1.15.10-r3 | 1.15.10-r8 | 1 |
- OSV records
- CGA-3j79-hxrj-98c9GO-2026-6604
- Also known as
- CGA-28rp-569c-vjc3, CGA-4j4m-4mp6-xp7x, CGA-85gw-4745-j8q8, CGA-929x-9pxj-5mv4, CGA-jc7p-vgxm-j32v
- Trending
- Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,533 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 7,418 |
| siyuanhelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 400 |
| strapihelmforgeVerified publisher | 2.3.15 | 1 of 3See more | 3,010 |
| strava-statisticshelmforgeVerified publisher | 1.1.16 | 1 of 2See more | 1,221 |
| supersethelmforgeVerified publisher | 1.3.8 | 2 of 5See more | 6,458 |
| twentyhelmforgeVerified publisher | 1.0.4 | 1 of 5See more | 3,199 |
| wallabaghelmforgeVerified publisher | 1.3.8 | 2 of 3See more | 3,350 |
| webodmhelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 22,597 |
| zookeeperhelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 3,902 |
| harborhelm-harborVerified publisher | 2.3.7 | 5 of 8See more | 1,577 |
| openaevhelm-openbasVerified publisher | 2.0.12 | 1 of 7See more | 21,594 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 26,397 |
| release-cleanerhelm-release-cleanerVerified publisher | 1.0.0 | 1 of 1See more | 2,554 |
| pageshelm-repo | 1.0.0 | 1 of 3See more | 21,310 |
| steampipehelm-steampipeVerified publisher | 2.4.1 | 1 of 1See more | 3,897 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 7,182 |
| hermes-operatorhermes-agent-operatorVerified publisher | 0.2.0 | 1 of 1See more | 231 |
| postgres-backup-localheywood8-helm-chartsVerified publisher | 0.1.13 | 1 of 1See more | 3,475 |
| kubefaashfoxy-helm-charts | 0.1.6 | 3 of 4See more | 7,965 |
| tapo-prometheus-exporterhfoxy-helm-charts | 0.1.11 | 1 of 1See more | 1,427 |
| goshimmerhiveroad | 0.2.14 | 1 of 1See more | 3,814 |
| cratedb-adapterhmdmph | 0.1.0 | 1 of 1See more | 4,117 |
| printserverhmediadeVerified publisher | 1.0.2 | 2 of 4See more | 12,885 |
| imageproxyhmphuVerified publisher | 0.1.1 | 1 of 1See more | 3,311 |
| holmesholmes | 0.1.0 | 1 of 1See more | 2,881 |
| homeboxhomebox-helmVerified publisher | 0.3.0 | 1 of 2See more | 1,151 |
| homecharthomechartVerified publisher | 1.0.1 | 1 of 1See more | 209 |
| adguardhomeenterpriseinc | 0.12.0 | 1 of 1See more | 3,707 |
| cert-managerhomeenterpriseinc | 1.10.1 | 3 of 3See more | 7,277 |
| homeassistanthomeenterpriseinc | 0.3.0 | 1 of 1See more | 9,054 |
| photoprismhomeenterpriseinc | 0.8.0 | 1 of 1See more | 3,224 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 18,551 |
| honeydipperhoneydipperVerified publisher | 0.1.11 | 1 of 2See more | 2,847 |
| hoppscotchhoppscotch | 0.1.1 | 1 of 1See more | 4,627 |
| universal-web-apphotrungnhanVerified publisher | 0.2.6 | 1 of 2See more | 350 |
| hoverflyhoverflyVerified publisher | 0.2.0 | 1 of 1See more | 289 |
| paperlesshpVerified publisher | 0.1.2 | 3 of 5See more | 35,136 |
| wallabaghpVerified publisher | 0.1.7 | 1 of 1See more | 1,548 |
| hammerspace-csihscsi | 1.2.8 | 6 of 6See more | 7,746 |
| eoloplanthttpd-eoloplant | 0.1.0 | 3 of 7See more | 37,293 |
| http-headershttp-headers | 1.2.1 | 1 of 1See more | 2,702 |
| cac-systemhuangchengwu-helm-chart | 0.1.0 | 7 of 9See more | 16,519 |
| jenkinshuangchengwu-helm-chart | 0.1.0 | 1 of 2See more | 662 |
| mariadbhuangchengwu-helm-chart | 0.1.0 | 1 of 1See more | 1,834 |
| prometheushuangchengwu-helm-chart | 0.1.0 | 1 of 3See more | 18,467 |
| skywalking-v1huangchengwu-helm-chart | 0.1.0 | 1 of 4See more | 22,554 |
| tdenginehuangchengwu-helm-chart | 3.0.2 | 1 of 1See more | 4,959 |
| sing-boxhuscker-chartsVerified publisher | 1.0.7 | 1 of 1See more | 2,002 |
| s-uihuscker-chartsVerified publisher | 1.0.3 | 1 of 1See more | 864 |
| jaegerhuseyinbabalVerified publisher | 0.1.0 | 3 of 3See more | 2,291 |
Container images carrying it
6,378 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ethpandaops/ | 89424dbe2d6b | stdlib | 1.26.9 | 3 |
| glanceapp/ | 9dfb09470b20 | stdlib | 1.26.9 | 3 |
| goharbor/ | d7b780d23721 | stdlib | 1.26.9 | 3 |
| goharbor/ | f71a4452a095 | stdlib | 1.26.9 | 3 |
| goharbor/ | 223d5cb49d5d | stdlib | 1.26.9 | 3 |
| goharbor/ | c4ebef61ceb5 | stdlib | 1.26.9 | 3 |
| goharbor/ | 215c07b71c37 | stdlib | 1.26.9 | 3 |
| grafana/ | 00568d89c4f8 | stdlib | 1.26.9 | 3 |
| grafana/ | 121a7a9ece6d | stdlib | 1.26.9 | 3 |
| grafana/ | 69a5d2d957ca | stdlib | 1.26.9 | 3 |
| grafana/ | a0f881232a6f | stdlib | 1.26.9 | 3 |
| grafana/ | 1107dd5274e0 | stdlib | 1.26.9 | 3 |
| grafana/ | 44148ad243c0 | stdlib | 1.26.9 | 3 |
| grafana/ | 58a6c186ce78 | stdlib | 1.26.9 | 3 |
| grafana/ | 0dac7d5cb383 | stdlib | 1.26.9 | 3 |
| grafana/ | 626900031c4e | stdlib | 1.26.9 | 3 |
| groundnuty/ | c14d7271e401 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 1c59f007df8e | stdlib | 1.26.9 | 3 |
| hashicorp/ | 9334d7f4bcf0 | stdlib | 1.26.9 | 3 |
| hashicorp/ | fcb75f691c8b | stdlib | 1.26.9 | 3 |
| hashicorp/ | 5be49781ecf7 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 55e27b080c9b | stdlib | 1.26.9 | 3 |
| hetznercloud/ | 024ea4b07161 | stdlib | 1.26.9 | 3 |
| jacobalberty/ | 896c0ab82d33 | stdlib | 1.26.9 | 3 |
| kubegems/ | a730bcf9322a | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 96a702cfd339 | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 53e9917898bf | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 5154b68252bd | stdlib | 1.26.9 | 3 |
| kubernetesui/ | cc7c31bd2d84 | stdlib | 1.26.9 | 3 |
| kubespheredev/ | 23a03c9c381f | stdlib | 1.26.9 | 3 |
| l7mp/ | c4654dade66e | stdlib | 1.26.9 | 3 |
| library/ | f2a1290d0463 | stdlib | 1.26.9 | 3 |
| library/ | af96c680a7e1 | stdlib | 1.26.9 | 3 |
| library/ | 5d7043a4ffe0 | stdlib | 1.26.9 | 3 |
| library/ | 9854f7139445 | stdlib | 1.26.9 | 3 |
| library/ | b83efabe3e7d | stdlib | 1.26.9 | 3 |
| library/ | cd3fcd4ecdda | stdlib | 1.26.9 | 3 |
| library/ | 3162a6ead070 | stdlib | 1.26.9 | 3 |
| library/ | 468d34fefd63 | stdlib | 1.26.9 | 3 |
| library/ | 4ea9e5ed0659 | stdlib | 1.26.9 | 3 |
| library/ | 5d2aa4a7b5f9 | stdlib | 1.26.9 | 3 |
| library/ | 65b16a8b326e | stdlib | 1.26.9 | 3 |
| library/ | 6737476511d4 | stdlib | 1.26.9 | 3 |
| library/ | 724292da1f2e | stdlib | 1.26.9 | 3 |
| library/ | 1be55279f18a | stdlib | 1.26.9 | 3 |
| library/ | 24841fe2de73 | stdlib | 1.26.9 | 3 |
| mcp/ | 9362bcf6aa0e | stdlib | 1.26.9 | 3 |
| meshery/ | 44b64ee128fb | stdlib | 1.26.9 | 3 |
| mikefarah/ | 6fc625c402de | stdlib | 1.26.9 | 3 |
| minio/ | 54393e03f3b2 | stdlib | 1.26.9 | 3 |