StackRadar

CVE-2026-56857

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,554
of 18,071 indexed, latest versions
Container images
6,411
deployed by those charts
Fix available
1 of 1
affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,411
OSV records
GO-2026-6604
Trending
Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,554 by stars
ChartLatestAffected imagesRadar Score
appshini4iVerified publisher0.4.01 of 1See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
traefik/whoami:v1.10.21474027c3166
stdlib@go1.22.2
1.26.9

Open the chart page →

973
skypilotskypilotOfficialVerified publisher0.14.03 of 3See more

skypilot skypilot 0.14.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.0a8362d205365
stdlib@go1.26.2
1.26.9
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
stdlib@go1.24.4
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
stdlib@go1.24.4
1.26.9

Open the chart page →

5,717
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
stdlib@go1.20
1.26.9

Open the chart page →

2,415
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
stdlib@go1.14.2
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
stdlib@go1.14.2
1.26.9

Open the chart page →

18,189
forecastlestakaterVerified publisher2.1.31 of 1See more

forecastle stakater 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
stakater/forecastle:v2.0.2382cd9572352
stdlib@go1.26.4
1.26.9

Open the chart page →

976
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
stdlib@go1.24.13
1.26.9

Open the chart page →

863
tigera-operatorstevehipwellVerified publisher2.15.01 of 1See more

tigera-operator stevehipwell 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.9

Open the chart page →

76
vertical-pod-autoscalerstevehipwell-helm-charts-vertical-pod-autoscalerVerified publisher1.12.13 of 3See more

vertical-pod-autoscaler stevehipwell-helm-charts-vertical-pod-autoscaler 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.9

Open the chart page →

642
sn-platformstreamnative1.11.466 of 9See more

sn-platform streamnative 1.11.46

6 of the 9 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.9
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.9
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.26.9
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.26.9
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.9
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
stdlib@go1.19.7
1.26.9

Open the chart page →

77,633
stunnerstunner1.2.12 of 2See more

stunner stunner 1.2.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.2.10d2094060b72
stdlib@go1.26.4
1.26.9
l7mp/stunner-gateway-operator:1.2.10ea40a1d42d5
stdlib@go1.26.4
1.26.9

Open the chart page →

588
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
stdlib@go1.24.6
1.26.9

Open the chart page →

1,907
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9

Open the chart page →

12,101
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
stdlib@go1.24.4
1.26.9

Open the chart page →

4,667
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
stdlib@go1.20.5
1.26.9
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
stdlib@go1.19.12
1.26.9
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
stdlib@go1.19.12
1.26.9

Open the chart page →

17,778
feedbacksystemthm-mni-iiVerified publisher0.48.211 of 14See more

feedbacksystem thm-mni-ii 0.48.2

11 of the 14 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
stdlib@go1.21.5
1.26.9
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.9
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
stdlib@go1.21.5
1.26.9
library/docker:20.10.21-dind3153fa63f546
stdlib@go1.18.7
1.26.9
ghcr.io/thm-mni-ii/fbs-core:v2.0.734fd2032724c
stdlib@go1.26.7
1.26.9
ghcr.io/thm-mni-ii/fbs-core-web:v2.0.71a8121871436
stdlib@go1.26.8
1.26.9
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.711b619dcd155
stdlib@go1.26.7
1.26.9
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.7d5aa22a0ffe3
stdlib@go1.20.12
1.26.9
ghcr.io/thm-mni-ii/fbs-runner:v2.0.78a9f30ef6aa8
stdlib@go1.20.11
1.26.9
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.788c20bb35a99
stdlib@go1.26.8
1.26.9
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.72b7662853d7c
stdlib@go1.26.8
1.26.9

Open the chart page →

28,436
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
stdlib@go1.24.2
1.26.9

Open the chart page →

2,184
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
stdlib@go1.14.4
1.26.9

Open the chart page →

5,893
traefik-meshtraefikOfficialVerified publisher4.1.13 of 7See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
stdlib@go1.14.4
1.26.9
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.9
traefik/mesh:v1.4.8cf071f3e165c
stdlib@go1.19
1.26.9

Open the chart page →

12,803
ttl-controllerttl-controllerVerified publisher1.9.11 of 1See more

ttl-controller ttl-controller 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller:1.9.18092dd72f073
stdlib@go1.27.0-X:nodwarf5
1.26.9

Open the chart page →

72
k8s-ttl-controllertwin0.4.01 of 1See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/twin/k8s-ttl-controller:v1.4.00525a7def93d
stdlib@go1.24.1
1.26.9

Open the chart page →

861
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
stdlib@go1.19.6
1.26.9
quay.io/argoproj/argocd:v2.8.6acaf37352569
stdlib@go1.20.4
1.26.9

Open the chart page →

12,349
crossplaneupbound-stable2.4.2-up.11 of 5See more

crossplane upbound-stable 2.4.2-up.1

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:14c2427de38f99
stdlib@go1.24.6
1.26.9

Open the chart page →

1,753
uptraceuptrace2.0.22 of 2See more

uptrace uptrace 2.0.2

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:latestfd328de25524
stdlib@go1.26.8
1.26.9
uptrace/uptrace:2.0.234a02c3b2d12
stdlib@go1.24.10
1.26.9

Open the chart page →

2,073
valkey-operatorvalkeyVerified publisher0.7.01 of 1See more

valkey-operator valkey 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.7.1bfa3be0b1173
stdlib@go1.26.8
1.26.9

Open the chart page →

260
vaultvaultVerified publisher1.22.04 of 4See more

vault vault 1.22.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
stdlib@go1.26.0
1.26.9
hashicorp/vault:2.0.1755355002715
stdlib@go1.26.3
1.26.9
prom/statsd-exporter:v0.29.0632f70580492
stdlib@go1.26.0
1.26.9
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
stdlib@go1.26.3
1.26.9

Open the chart page →

5,768
victoria-logs-clustervictoriametricsVerified publisher0.2.91 of 1See more

victoria-logs-cluster victoriametrics 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.53.0251121fa882a
stdlib@go1.27.1
1.26.9

Open the chart page →

52
victoria-metrics-authvictoriametricsVerified publisher0.43.01 of 1See more

victoria-metrics-auth victoriametrics 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
victoriametrics/vmauth:v1.153.04ebf2f21490d
stdlib@go1.27.1
1.26.9

Open the chart page →

65
vouchvouchVerified publisher3.2.01 of 1See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/vouch/vouch-proxy:0.39d34e220de3cf
stdlib@go1.18.10
1.26.9

Open the chart page →

1,727
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
stdlib@go1.20.7
1.26.9

Open the chart page →

1,939
gethvulcanlink1.10.231 of 1See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.23cce21b423165
stdlib@go1.18.5
1.26.9

Open the chart page →

3,020
api-firewallwallarmVerified publisher0.9.61 of 1See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/api-firewall:v0.9.64d45db0ff240
stdlib@go1.25.8
1.26.9

Open the chart page →

1,376
wallarm-ingresswallarmVerified publisher5.3.10-12 of 2See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/ingress-controller:5.3.10.1a1fecfdf987e
stdlib@go1.23.1
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.26.9

Open the chart page →

2,108
wallarm-sidecarwallarmOfficialVerified publisher6.13.22 of 3See more

wallarm-sidecar wallarm 6.13.2

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
wallarm/node-helpers:6.13.2290a87f01799
stdlib@go1.26.8
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.9

Open the chart page →

1,569
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
stdlib@go1.21.5
1.26.9

Open the chart page →

4,066
prometheuswener29.36.16 of 6See more

prometheus wener 29.36.1

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.9
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

830
argo-cdwenerme10.10.12 of 3See more

argo-cd wenerme 10.10.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.9
quay.io/argoproj/argocd:v3.5.449dff79439bb
stdlib@go1.25.3
1.26.9

Open the chart page →

2,402
daprwenerme1.18.55 of 5See more

dapr wenerme 1.18.5

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dapr/injector:1.18.50c6735a025dc
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/operator:1.18.59bc91e9d1f8e
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/placement:1.18.52a2b99d466e8
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/scheduler:1.18.5734c1e29d1d9
stdlib@go1.26.6
1.26.9
ghcr.io/dapr/sentry:1.18.556faf97016d6
stdlib@go1.26.6
1.26.9

Open the chart page →

380
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.26.9

Open the chart page →

7,182
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:15.186eb0add3b77c
stdlib@go1.24.6
1.26.9

Open the chart page →

9,028
wharf-helmwharf-helmOfficialVerified publisher3.2.64 of 5See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
stdlib@go1.18.1
1.26.9
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
stdlib@go1.18.2
1.26.9
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
stdlib@go1.18.2
1.26.9
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
stdlib@go1.18.2
1.26.9

Open the chart page →

13,563
windmillwindmill4.0.2801 of 3See more

windmill windmill 4.0.280

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

1,636
buildkitdwiremindVerified publisher0.33.11 of 1See more

buildkitd wiremind 0.33.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
stdlib@go1.25.7
1.26.9

Open the chart page →

1,536
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
stdlib@go1.13.8
1.26.9

Open the chart page →

5,906
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
stdlib@go1.18.4
1.26.9

Open the chart page →

5,721
yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter0.38.01 of 1See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
stdlib@go1.22.4
1.26.9

Open the chart page →

1,284
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
stdlib@go1.23.12
1.26.9

Open the chart page →

5,306
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
stdlib@go1.24.4
1.26.9

Open the chart page →

4,678
adcs-issueradcs-issuer3.0.21 of 1See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
djkormo/adcs-issuer:2.1.29f34e87e7586
stdlib@go1.22.6
1.26.9

Open the chart page →

1,256
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
stdlib@go1.23.7
1.26.9

Open the chart page →

2,364
no-latest-tag-webhookadmission-webhook-no-latest1.0.141 of 1See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest:sha-33165455976a1d3236a
stdlib@go1.26.3
1.26.9

Open the chart page →

356

Container images carrying it

6,411 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.26.9
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.26.9
3
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.9
3
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
stdlib@go1.20.5
1.26.9
3
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.26.9
3
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.9
3
oliver006/redis_exporter:v1.93.06ca518a72f30
stdlib@go1.27.1
1.26.9
3
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.9
3
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.9
3
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.26.9
3
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.26.9
3
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.26.9
3
oryd/hydra:v2.2.02c93beb5e5f2
stdlib@go1.21.5
1.26.9
3
otel/opentelemetry-collector-contrib:latest39923a8e431b
stdlib@go1.26.8
1.26.9
3
pgsty/silo:RELEASE.2026-09-03T13-18-01Zb616a0cf8cb2
stdlib@go1.27.1
1.26.9
3
prom/alertmanager:v0.28.0d5155cfac40a
stdlib@go1.23.4
1.26.9
3
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.9
3
prom/prometheus:v3.0.1565ee8650122
stdlib@go1.23.3
1.26.9
3
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.26.9
3
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.26.9
3
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.26.9
3
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.26.9
3
prom/statsd-exporter:v0.18.0d23aca343b86
stdlib@go1.14.7
1.26.9
3
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.26.9
3
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.26.9
3
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.26.9
3
rancher/system-upgrade-controller:v0.20.261b68d4372ba
stdlib@go1.26.8
1.26.9
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
stdlib@go1.19.4
1.26.9
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
stdlib@go1.21.3
1.26.9
3
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.9
3
solace/solace-pubsub-standard:latest3c8a8b7fdcae
stdlib@go1.26.8
1.26.9
3
stakater/proxyinjector:v0.0.2383fef483d497
stdlib@go1.13.1
1.26.9
3
tykio/tyk-dashboard:v5.13.21161bd297135
stdlib@go1.26.7
1.26.9
3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
stdlib@go1.26.7
1.26.9
3
tykio/tyk-k8s-bootstrap-post:v2.2.055b4d31c7a01
stdlib@go1.22.7
1.26.9
3
tykio/tyk-k8s-bootstrap-pre-delete:v2.2.01489b58f642b
stdlib@go1.22.7
1.26.9
3
tykio/tyk-k8s-bootstrap-pre-install:v2.2.0205215b815a4
stdlib@go1.22.7
1.26.9
3
vikunja/vikunja:0.24.6ed1f3ed467fe
stdlib@go1.23.4
1.26.9
3
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.9
3
yugabytedb/yugabyte:2026.1.2.0-b137b6dba322c734
stdlib@go1.26.7
1.26.9
3
gcr.io/trillian-opensource-ci/db_server2a685a38dd01
stdlib@go1.18.2
1.26.9
3
ghcr.io/appscode/petset:v0.1.093fa0daf603c
stdlib@go1.25.10
1.26.9
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
stdlib@go1.25.11
1.26.9
3
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.9
3
ghcr.io/coder/coder:v2.38.038a4cfc548b0
stdlib@go1.26.4
1.26.9
3
ghcr.io/dapr/injector:1.18.50c6735a025dc
stdlib@go1.26.6
1.26.9
3
ghcr.io/dapr/operator:1.18.59bc91e9d1f8e
stdlib@go1.26.6
1.26.9
3
ghcr.io/dapr/placement:1.18.52a2b99d466e8
stdlib@go1.26.6
1.26.9
3
ghcr.io/dapr/scheduler:1.18.5734c1e29d1d9
stdlib@go1.26.6
1.26.9
3
ghcr.io/dapr/sentry:1.18.556faf97016d6
stdlib@go1.26.6
1.26.9
3

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.