CVE-2026-56857
UnscoredAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,554
- of 18,071 indexed, latest versions
- Container images
- 6,411
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,411 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,554 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| gethethereum-helm-chartsVerified publisher | 1.1.4 | 1 of 2See more | 169 |
| gotifygotifyVerified publisher | 0.8.1 | 1 of 1See more | 863 |
| alloy-operatorgrafana | 0.8.0 | 1 of 1See more | 709 |
| hcloud-csihcloud | 2.23.0 | 6 of 6See more | 4,216 |
| docmosthelmforgeVerified publisher | 1.4.1 | 1 of 4See more | 4,461 |
| wordpresshelmforgeVerified publisher | 3.0.9 | 1 of 3See more | 4,267 |
| korkorVerified publisher | 0.2.16 | 1 of 1See more | 460 |
| kubelet-csr-approverkubelet-csr-approverOfficialVerified publisher | 1.2.15 | 1 of 1See more | 179 |
| logging-operatorkube-loggingVerified publisher | 4.2.3 | 1 of 1See more | 1,443 |
| myipkuossOfficialVerified publisher | 0.2.2 | 1 of 1See more | 1,036 |
| keptnlifecycle-toolkitOfficialVerified publisher | 0.11.0 | 3 of 3See more | 3,169 |
| lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher | 3.53.0 | 1 of 9See more | 791 |
| mattermost-operatormattermostVerified publisher | 1.0.5 | 1 of 1See more | 538 |
| mercuremercureOfficialVerified publisher | 1.1.0 | 1 of 1See more | 89 |
| meshery-operatormesheryOfficialVerified publisher | 1.0.70 | 2 of 2See more | 3,319 |
| missing-container-metricsmissing-container-metrics | 0.1.1 | 1 of 1See more | 3,515 |
| tailscale-relaymvisonneau | 0.2.7 | 1 of 1See more | 1,819 |
| nginx-ingressnginx-ingress-chartVerified publisher | 0.0.0-edge | 1 of 1See more | 1,514 |
| system-upgrade-controllernimbolus | 0.7.0 | 1 of 1See more | 621 |
| olmolmVerified publisher | 0.46.0 | 1 of 1See more | 409 |
| opencostopencost-ociOfficialVerified publisher | 2.5.32 | 1 of 2See more | 350 |
| ketoory | 0.64.0 | 1 of 1See more | 1,356 |
| oathkeeperory | 0.64.0 | 1 of 1See more | 1,300 |
| passboltpassbolt | 2.2.0 | 3 of 6See more | 13,878 |
| redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher | 8.0.18-11 | 1 of 1See more | 1,277 |
| backstagerhdh-chartVerified publisher | 4.0.1 | 1 of 2See more | 1,934 |
| selenium-gridselenium-grid | 0.59.1 | 3 of 4See more | 9,189 |
| rekorsigstoreVerified publisher | 1.8.7 | 7 of 9See more | 7,582 |
| mssqlserver-2022simcube | 1.2.3 | 1 of 1See more | 3,297 |
| snyk-monitorsnyk | 2.23.26 | 1 of 2See more | 1,008 |
| swo-k8s-collectorsolarwindsOfficialVerified publisher | 5.3.0 | 3 of 3See more | 3,261 |
| sops-operatorsops-operatorVerified publisher | 0.10.1 | 2 of 2See more | 1,839 |
| thehivestrangebee-helmOfficialVerified publisher | 1.1.0 | 2 of 7See more | 16,565 |
| truenas-csptruenas-cspVerified publisher | 1.2.4 | 10 of 11See more | 8,570 |
| uffizzi-controlleruffizzi-controller | 2.4.6 | 8 of 11See more | 18,675 |
| filebrowserutkuozdemirVerified publisher | 1.0.0 | 1 of 1See more | 3,993 |
| vault-operatorvault-operatorVerified publisher | 1.24.1 | 1 of 1See more | 125 |
| vsphere-csivsphere-tmm | 3.8.1 | 7 of 7See more | 6,756 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 7,965 |
| aad-pod-identityaad-pod-identity | 4.1.18 | 2 of 2See more | 4,146 |
| abcdesktopabcdesktopOfficialVerified publisher | 4.4.13 | 2 of 9See more | 1,081 |
| agonesagones | 1.61.0 | 1 of 5See more | 1,371 |
| photoprismandrenarchyVerified publisher | 8.15.0 | 1 of 1See more | 50,154 |
| kubedbappscodeVerified publisher | 2026.7.10 | 8 of 8See more | 6,376 |
| cloudflaredartur9010Verified publisher | 1.0.9 | 3 of 3See more | 4,040 |
| bambooatlassian-data-centerVerified publisher | 2.0.17 | 1 of 2See more | 36,163 |
| alb-controllerazure-application-gateway-for-containers | 1.12.2 | 3 of 3See more | 262 |
| baserowbaserow-chartVerified publisher | 1.1.0 | 4 of 6See more | 19,339 |
| mysql-operatorbitpokeVerified publisher | 0.6.3 | 2 of 2See more | 5,257 |
| celestia-appcelestia-labsVerified publisher | 0.5.0 | 1 of 3See more | 1,474 |
Container images carrying it
6,411 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| envoyproxy/ | 156b7d32c73b | stdlib | 1.26.9 | 3 |
| ethpandaops/ | 89424dbe2d6b | stdlib | 1.26.9 | 3 |
| glanceapp/ | 9dfb09470b20 | stdlib | 1.26.9 | 3 |
| goharbor/ | d7b780d23721 | stdlib | 1.26.9 | 3 |
| goharbor/ | f71a4452a095 | stdlib | 1.26.9 | 3 |
| goharbor/ | 223d5cb49d5d | stdlib | 1.26.9 | 3 |
| goharbor/ | c4ebef61ceb5 | stdlib | 1.26.9 | 3 |
| goharbor/ | 215c07b71c37 | stdlib | 1.26.9 | 3 |
| grafana/ | 00568d89c4f8 | stdlib | 1.26.9 | 3 |
| grafana/ | 121a7a9ece6d | stdlib | 1.26.9 | 3 |
| grafana/ | 69a5d2d957ca | stdlib | 1.26.9 | 3 |
| grafana/ | a0f881232a6f | stdlib | 1.26.9 | 3 |
| grafana/ | 1107dd5274e0 | stdlib | 1.26.9 | 3 |
| grafana/ | 44148ad243c0 | stdlib | 1.26.9 | 3 |
| grafana/ | 58a6c186ce78 | stdlib | 1.26.9 | 3 |
| grafana/ | 0dac7d5cb383 | stdlib | 1.26.9 | 3 |
| grafana/ | 626900031c4e | stdlib | 1.26.9 | 3 |
| groundnuty/ | c14d7271e401 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 1c59f007df8e | stdlib | 1.26.9 | 3 |
| hashicorp/ | 9334d7f4bcf0 | stdlib | 1.26.9 | 3 |
| hashicorp/ | fcb75f691c8b | stdlib | 1.26.9 | 3 |
| hashicorp/ | 5be49781ecf7 | stdlib | 1.26.9 | 3 |
| hashicorp/ | 55e27b080c9b | stdlib | 1.26.9 | 3 |
| hetznercloud/ | 024ea4b07161 | stdlib | 1.26.9 | 3 |
| jacobalberty/ | 896c0ab82d33 | stdlib | 1.26.9 | 3 |
| kubegems/ | a730bcf9322a | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 96a702cfd339 | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 53e9917898bf | stdlib | 1.26.9 | 3 |
| kubernetesui/ | 5154b68252bd | stdlib | 1.26.9 | 3 |
| kubernetesui/ | cc7c31bd2d84 | stdlib | 1.26.9 | 3 |
| kubespheredev/ | 23a03c9c381f | stdlib | 1.26.9 | 3 |
| library/ | af96c680a7e1 | stdlib | 1.26.9 | 3 |
| library/ | 5d7043a4ffe0 | stdlib | 1.26.9 | 3 |
| library/ | 9854f7139445 | stdlib | 1.26.9 | 3 |
| library/ | b83efabe3e7d | stdlib | 1.26.9 | 3 |
| library/ | cd3fcd4ecdda | stdlib | 1.26.9 | 3 |
| library/ | 3162a6ead070 | stdlib | 1.26.9 | 3 |
| library/ | 468d34fefd63 | stdlib | 1.26.9 | 3 |
| library/ | 4ea9e5ed0659 | stdlib | 1.26.9 | 3 |
| library/ | 5d2aa4a7b5f9 | stdlib | 1.26.9 | 3 |
| library/ | 65b16a8b326e | stdlib | 1.26.9 | 3 |
| library/ | 6737476511d4 | stdlib | 1.26.9 | 3 |
| library/ | 724292da1f2e | stdlib | 1.26.9 | 3 |
| library/ | 1be55279f18a | stdlib | 1.26.9 | 3 |
| library/ | 24841fe2de73 | stdlib | 1.26.9 | 3 |
| linuxserver/ | 06e07af2851e | stdlib | 1.26.9 | 3 |
| louislam/ | c74379ac4509 | stdlib | 1.26.9 | 3 |
| mcp/ | 9362bcf6aa0e | stdlib | 1.26.9 | 3 |
| meshery/ | 44b64ee128fb | stdlib | 1.26.9 | 3 |
| mikefarah/ | 6fc625c402de | stdlib | 1.26.9 | 3 |