StackRadar

CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,293
of 18,131 indexed, latest versions
Container images
6,123
deployed by those charts
Fix available
1 of 1
affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,293 of 18,131 indexed charts deploy, on 6,123 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+209 more1.26.96,123
OSV records
GO-2026-6604
Trending
Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,293 by stars
ChartLatestAffected imagesRadar Score
harborsb-helm-charts0.3.02 of 2See more

harbor sb-helm-charts 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
stdlib@go1.22.6
1.26.9
goharbor/registry-photon:v2.11.15645d459af2b
stdlib@go1.22.6
1.26.9

Open the chart page →

2,708
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

3,076
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
stdlib@go1.24.10
1.26.9

Open the chart page →

1,314
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
stdlib@go1.23.2
1.26.9

Open the chart page →

1,449
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.26.9

Open the chart page →

5,249
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
stdlib@go1.18.2
1.26.9

Open the chart page →

1,974
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

11,740
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.9

Open the chart page →

2,435
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
stdlib@go1.24.6
1.26.9

Open the chart page →

3,164
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
stdlib@go1.24.10
1.26.9

Open the chart page →

2,976
pushgatewaysb-helm-charts0.3.01 of 1See more

pushgateway sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
stdlib@go1.21.1
1.26.9

Open the chart page →

1,867
redissb-helm-charts0.4.01 of 1See more

redis sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/redis:7.4.1-alpinec1e88455c852
stdlib@go1.18.2
1.26.9

Open the chart page →

2,187
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.9

Open the chart page →

1,480
thanos-compactorsb-helm-charts0.3.01 of 1See more

thanos-compactor sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-querysb-helm-charts0.3.01 of 1See more

thanos-query sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-query-frontendsb-helm-charts0.3.01 of 1See more

thanos-query-frontend sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-receivesb-helm-charts0.3.01 of 1See more

thanos-receive sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-rulersb-helm-charts0.3.01 of 1See more

thanos-ruler sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
stdlib@go1.24.6
1.26.9

Open the chart page →

15,728
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
stdlib@go1.16.12
1.26.9

Open the chart page →

3,250
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
stdlib@go1.17.5
1.26.9

Open the chart page →

4,274
scaleway-certmanager-webhookscaleway-charts0.4.31 of 1See more

scaleway-certmanager-webhook scaleway-charts 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.1.36d94c970e710
stdlib@go1.26.5
1.26.9

Open the chart page →

449
scaleway-secrets-store-csiscaleway-charts0.1.11 of 1See more

scaleway-secrets-store-csi scaleway-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
scaleway/scaleway-secrets-store-csi:v0.1.19acc53a69962
stdlib@go1.26.5
1.26.9

Open the chart page →

527
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9

Open the chart page →

2,434
sonarqubescalified-sonarqubeVerified publisher26.9.01 of 2See more

sonarqube scalified-sonarqube 26.9.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

703
scalyr-k8snode-managerscalyr-k8snode-managerVerified publisher0.1.71 of 1See more

scalyr-k8snode-manager scalyr-k8snode-manager 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.26.9

Open the chart page →

3,012
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.9

Open the chart page →

2,097
cosischichtelVerified publisher0.1.01 of 1See more

cosi schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/objectstorage-controller:v20221027-v0.1.1-8-g300019fa84b574e8027
stdlib@go1.18.3
1.26.9

Open the chart page →

2,280
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
stdlib@go1.21.11
1.26.9

Open the chart page →

1,956
dawarichschichtelVerified publisher0.4.01 of 1See more

dawarich schichtel 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
stdlib@go1.24.4
1.26.9

Open the chart page →

6,876
draytek-exporterschichtelVerified publisher0.2.41 of 1See more

draytek-exporter schichtel 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/superq/draytek-exporter:v0.2.03b577bdceaae
stdlib@go1.25.4
1.26.9

Open the chart page →

980
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
stdlib@go1.22.5
1.26.9

Open the chart page →

2,144
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
stdlib@go1.22.2
1.26.9

Open the chart page →

3,847
rabbitmq-cluster-operatorschichtelVerified publisher0.1.81 of 1See more

rabbitmq-cluster-operator schichtel 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.26.9

Open the chart page →

755
rabbitmq-topology-operatorschichtelVerified publisher0.1.91 of 1See more

rabbitmq-topology-operator schichtel 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
stdlib@go1.24.6
1.26.9

Open the chart page →

862
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.9

Open the chart page →

3,172
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
stdlib@go1.18.1
1.26.9

Open the chart page →

4,685
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
stdlib@go1.20.2
1.26.9

Open the chart page →

7,271
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.26.9

Open the chart page →

2,519
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
stdlib@go1.19.13
1.26.9

Open the chart page →

2,238
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
stdlib@go1.16.1
1.26.9

Open the chart page →

4,947
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.9

Open the chart page →

5,658
seafileschmitzis13.0.132 of 4See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
stdlib@go1.26.8
1.26.9
seafileltd/notification-server:13.0.211cac4101d0f4
stdlib@go1.26.2
1.26.9

Open the chart page →

44,456
version-checkerschmitzis0.2.21 of 1See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.9

Open the chart page →

4,257
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
stdlib@go1.23.4
1.26.9

Open the chart page →

5,204
koffanschoenwald0.1.81 of 1See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.9

Open the chart page →

174
minifluxschoenwald0.1.61 of 1See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
miniflux/miniflux:2.3.349d7b6098761
stdlib@go1.26.5
1.26.9

Open the chart page →

540
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
stdlib@go1.20.5
1.26.9

Open the chart page →

36,895

Container images carrying it

6,123 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
securecodebox/operator:5.8.0c14bd5c550e3
stdlib@go1.26.4
1.26.9
1
securesystemsengineering/connaisseur:v3.13.0cef2efbd8bd3
stdlib@go1.27.1
1.26.9
1
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
stdlib@go1.24.11
1.26.9
1
selectdb/doris.k8s-operator:1.3.1919210765cb8
stdlib@go1.19.13
1.26.9
1
selenium/hub:4.48.0-20260905d47c27474cb4
stdlib@go1.27.1
1.26.9
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
stdlib@go1.27.1
1.26.9
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
stdlib@go1.27.1
1.26.9
1
semaphoreui/semaphore:v2.19.163707a971a57f
stdlib@go1.23.3
1.26.9
1
semaphoreui/semaphore:v2.9.645b50bc11833f
stdlib@go1.21.8
1.26.9
1
semaphoreui/semaphore:latest6d45ab59ec50
stdlib@go1.23.3
1.26.9
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
stdlib@go1.25.5
1.26.9
1
semitechnologies/weaviate:1.19.17a00d226f063
stdlib@go1.19.9
1.26.9
1
senthilrch/kubefledged-controller:v0.11.0bf336912a191
stdlib@go1.26.5
1.26.9
1
senthilrch/kubefledged-webhook-server:v0.11.0836a8bbe7cfb
stdlib@go1.26.5
1.26.9
1
sentriz/gonic:v0.13.1a74012a6adf3
stdlib@go1.16.4
1.26.9
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
stdlib@go1.24.13
1.26.9
1
shaowenchen/ops-server:latest6bac5cebd125
stdlib@go1.24.9
1.26.9
1
sharanalwar/redchef-frontend:latest5e82950b16b7
stdlib@go1.23.7
1.26.9
1
sharat87/httpbun:latesta148af533afd
stdlib@go1.27.1
1.26.9
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
stdlib@go1.15.12
1.26.9
1
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
stdlib@go1.21.7
1.26.9
1
shyim/shopware:6.4.6.0a951c0e6b836
stdlib@go1.20.7
1.26.9
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
stdlib@go1.19.2
1.26.9
1
signald/signald:0.18.20ffad7ccc2eb
stdlib@go1.18.1
1.26.9
1
signald/signald:0.23.2edbff058278c
stdlib@go1.18.10
1.26.9
1
signoz/alertmanager:0.5.07bc7de2e33c2
stdlib@go1.14
1.26.9
1
signoz/signoz:v0.146.0cd3ca6950df3
stdlib@go1.25.7
1.26.9
1
signoz/signoz-operator:v0.0.27f351ef18e7f
stdlib@go1.26.8
1.26.9
1
signoz/signoz-otel-collector:v0.144.14b08671f56f31
stdlib@go1.25.0
1.26.9
1
sikalabs/signpost:v0.7.0c8b0e21d61b4
stdlib@go1.24.6
1.26.9
1
sikalabs/slu:v0.72.07bd267f30247
stdlib@go1.21.4
1.26.9
1
sikalabs/slu:v0.34.0fdc0c6711add
stdlib@go1.17.6
1.26.9
1
silkeh/alertmanager_matrix:0.6.1900010497f8c
stdlib@go1.26.3
1.26.9
1
simonschneider/traefik-jwt-decode:latestd674ac370f80
stdlib@go1.17.13
1.26.9
1
simpleidserver/faasprometheus:0.0.425e378d57d78
stdlib@go1.17.1
1.26.9
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
stdlib@go1.20.4
1.26.9
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
stdlib@go1.21.8
1.26.9
1
sky5367/locust-plugins-timescale:latestd3150f201471
stdlib@go1.18.7
1.26.9
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
stdlib@go1.17.13
1.26.9
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
stdlib@go1.17.2
1.26.9
1
slagattollas/weatherservice-practica:latest68e7f56393fc
stdlib@go1.15.6
1.26.9
1
slamdev/config-connector-templater:0.0.3a234541c9fa8
stdlib@go1.16.5
1.26.9
1
slamdev/external-secrets-operator:0.0.8855f6625dda4
stdlib@go1.13.15
1.26.9
1
slamdev/flux-notifier:v0.0.8b173d809132d
stdlib@go1.13.11
1.26.9
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
stdlib@go1.13.11
1.26.9
1
smailkoz/torrserver:1.0.1117b52d15de8f0
stdlib@go1.17.5
1.26.9
1
snapr/app:v0.1.0e9eb8287bfe1
stdlib@go1.23.12
1.26.9
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
stdlib@go1.25.14
1.26.9
1
softonic/homing-pigeon:0.9.6f26d467b7b82
stdlib@go1.23.10
1.26.9
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
stdlib@go1.14.6
1.26.9
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.