CVE-2026-56857
UnscoredAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,554
- of 18,071 indexed, latest versions
- Container images
- 6,411
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,411 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,554 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| paperless-ngxadnoctemVerified publisher | 0.5.0 | 3 of 5See more | 25,719 |
| agentareaagentareaVerified publisher | 0.0.26 | 8 of 17See more | 17,180 |
| traefikaigisukVerified publisher | 0.1.1 | 1 of 1See more | 3,817 |
| ais-operatoraistoreVerified publisher | 4.1.0 | 1 of 1See more | 72 |
| akeyless-api-gatewayakeyless-services-helmVerified publisher | 1.62.28 | 1 of 1See more | 3,052 |
| visa-k8s-controlleralba-visa-helm-charts | 1.0.0 | 1 of 1See more | 260 |
| adguard-homealekcVerified publisher | 3.2.0 | 1 of 2See more | 288 |
| cloudflaredalekcVerified publisher | 1.9.0 | 1 of 1See more | 495 |
| alertmanager-discordalertmanagerdiscordVerified publisher | 0.3.2 | 1 of 1See more | 766 |
| alertmanager-matrixalertmanager-matrixVerified publisher | 0.1.16 | 1 of 1See more | 664 |
| paperless-ngxalexmorbo-paperless-ngxVerified publisher | 0.2.0 | 1 of 2See more | 14,048 |
| clearml-agentallegroaiVerified publisher | 5.3.3 | 1 of 1See more | 73,257 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 6 of 9See more | 25,073 |
| pact-brokeralmorgvVerified publisher | 0.1.0 | 1 of 1See more | 6,095 |
| mariadbalphani-helm-chartsVerified publisher | 10.10.3 | 1 of 1See more | 9,588 |
| soft-servealphani-helm-chartsVerified publisher | 0.4.0 | 1 of 1See more | 3,884 |
| smockerandrcunsVerified publisher | 0.0.4 | 1 of 1See more | 2,884 |
| cloudflare-operatorankra-chartsVerified publisher | 0.2.0 | 1 of 1See more | 858 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 7,457 |
| upcloud-csiankra-chartsVerified publisher | 0.4.1 | 8 of 8See more | 22,013 |
| annotations-exporterannotations-exporter | 0.5.0 | 1 of 1See more | 1,852 |
| alazanteonVerified publisher | 0.12.0 | 1 of 1See more | 4,094 |
| anteonanteonVerified publisher | 2.6.4 | 5 of 13See more | 27,363 |
| antreaantreaVerified publisher | 2.7.0 | 2 of 2See more | 4,673 |
| api-usage-serverapi-usage-server | 1.16.0 | 1 of 1See more | 1,105 |
| gateway-helmappscodeVerified publisher | 0.0.0-latest | 1 of 2See more | 1,657 |
| kubedb-opscenterappscodeVerified publisher | 2026.7.10 | 1 of 1See more | 431 |
| kubedb-provisionerappscodeVerified publisher | 0.66.0 | 1 of 1See more | 874 |
| scannerappscodeVerified publisher | 2026.1.15 | 3 of 3See more | 6,966 |
| smtprelayappscodeVerified publisher | 2026.9.11 | 1 of 1See more | 1,280 |
| stash-enterpriseappscodeVerified publisher | 0.42.0 | 4 of 4See more | 5,664 |
| virtual-secrets-serverappscodeVerified publisher | 2026.8.14 | 1 of 1See more | 484 |
| argocd-backup-s3argocd-backup-s3Verified publisher | 0.9.5 | 1 of 1See more | 6,446 |
| argocd-rbac-operatorargocd-rbac-operator | 0.4.5 | 1 of 1See more | 1,311 |
| kedaarieotechVerified publisher | 0.1.0 | 2 of 3See more | 3,459 |
| s3dartur9010Verified publisher | 1.0.1 | 1 of 1See more | 2,108 |
| arvancloud-webhookarvancloud-webhookVerified publisher | 1.0.1 | 1 of 1See more | 736 |
| cert-exporterarzu | 3.0.1 | 1 of 1See more | 3,896 |
| soarv113assist-iot-cybersecurity-monitoring-soar | 0.1.3 | 1 of 5See more | 20,312 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 12,347 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 5 of 9See more | 196,388 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 5 of 9See more | 196,368 |
| astradnsastradnsVerified publisher | 0.2.9 | 2 of 2See more | 3,442 |
| deployautoml | 0.1.0 | 2 of 3See more | 4,267 |
| cso-proxyav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 5,375 |
| dex-k8sav1o-chartsVerified publisher | 0.2.1 | 1 of 1See more | 4,490 |
| kube-image-webhookav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 4,751 |
| prismav1o-chartsVerified publisher | 0.3.1 | 1 of 1See more | 2,211 |
| kubebrowseravistoOfficialVerified publisher | 1.4.0 | 1 of 1See more | 1,058 |
| azuredisk-csi-driverazuredisk-csi-driverVerified publisher | 1.36.0 | 7 of 8See more | 633 |
Container images carrying it
6,411 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 54393e03f3b2 | stdlib | 1.26.9 | 3 |
| mintel/ | caf71cee7b9a | stdlib | 1.26.9 | 3 |
| natsio/ | a3381560aab6 | stdlib | 1.26.9 | 3 |
| natsio/ | b3359eeb10bf | stdlib | 1.26.9 | 3 |
| natsio/ | 26c826662ac8 | stdlib | 1.26.9 | 3 |
| oamdev/ | 231c423c2b17 | stdlib | 1.26.9 | 3 |
| oliver006/ | 6ca518a72f30 | stdlib | 1.26.9 | 3 |
| opencsghq/ | b98600564e07 | stdlib | 1.26.9 | 3 |
| opencsghq/ | 0491782f7bac | stdlib | 1.26.9 | 3 |
| openebs/ | f6c18b0f8c8a | stdlib | 1.26.9 | 3 |
| openebs/ | 6afe2123c457 | stdlib | 1.26.9 | 3 |
| openebs/ | aea39e49bb97 | stdlib | 1.26.9 | 3 |
| oryd/ | 2c93beb5e5f2 | stdlib | 1.26.9 | 3 |
| otel/ | 39923a8e431b | stdlib | 1.26.9 | 3 |
| pgsty/ | b616a0cf8cb2 | stdlib | 1.26.9 | 3 |
| prom/ | d5155cfac40a | stdlib | 1.26.9 | 3 |
| prom/ | d8a61419b841 | stdlib | 1.26.9 | 3 |
| prom/ | 565ee8650122 | stdlib | 1.26.9 | 3 |
| prom/ | bfad037f95e5 | stdlib | 1.26.9 | 3 |
| prom/ | 0a9031142481 | stdlib | 1.26.9 | 3 |
| prom/ | 8305a33fb80a | stdlib | 1.26.9 | 3 |
| prom/ | a5df60347882 | stdlib | 1.26.9 | 3 |
| prom/ | d23aca343b86 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 10f66b5df886 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 4cd5366a9f51 | stdlib | 1.26.9 | 3 |
| rancher/ | 090bef429ed1 | stdlib | 1.26.9 | 3 |
| rancher/ | 61b68d4372ba | stdlib | 1.26.9 | 3 |
| rcdelacruz/ | 38007f358355 | stdlib | 1.26.9 | 3 |
| rss3/ | d1d2ae6efd05 | stdlib | 1.26.9 | 3 |
| signoz/ | fcc4a3288154 | stdlib | 1.26.9 | 3 |
| solace/ | 3c8a8b7fdcae | stdlib | 1.26.9 | 3 |
| stakater/ | 83fef483d497 | stdlib | 1.26.9 | 3 |
| tykio/ | 1161bd297135 | stdlib | 1.26.9 | 3 |
| tykio/ | 50b3e4f5398a | stdlib | 1.26.9 | 3 |
| tykio/ | 55b4d31c7a01 | stdlib | 1.26.9 | 3 |
| tykio/ | 1489b58f642b | stdlib | 1.26.9 | 3 |
| tykio/ | 205215b815a4 | stdlib | 1.26.9 | 3 |
| vikunja/ | ed1f3ed467fe | stdlib | 1.26.9 | 3 |
| wallabag/ | 4a527e027e0d | stdlib | 1.26.9 | 3 |
| yugabytedb/ | b6dba322c734 | stdlib | 1.26.9 | 3 |
| gcr.io/ | 2a685a38dd01 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 93fa0daf603c | stdlib | 1.26.9 | 3 |
| ghcr.io/ | d1036b07e348 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | a27779ed1085 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 38a4cfc548b0 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 0c6735a025dc | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 9bc91e9d1f8e | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 2a2b99d466e8 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 734c1e29d1d9 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 56faf97016d6 | stdlib | 1.26.9 | 3 |