CVE-2026-56857
UnscoredAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,511
- of 18,087 indexed, latest versions
- Container images
- 6,327
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,511 of 18,087 indexed charts deploy, on 6,327 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,327 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,511 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| error-pageserror-pagesOfficialVerified publisher | 4.2.5 | 1 of 1See more | 52 |
| paraerudikaVerified publisher | 0.3.0 | 1 of 1See more | 905 |
| httpbingoestahnVerified publisher | 0.1.1 | 1 of 1See more | 2,384 |
| beaconchain-explorerethereum-helm-chartsVerified publisher | 0.1.6 | 1 of 2See more | 3,738 |
| erigonethereum-helm-chartsVerified publisher | 2.0.2 | 1 of 2See more | 1,184 |
| ethereumjsethereum-helm-chartsVerified publisher | 0.1.2 | 1 of 2See more | 2,130 |
| genesis-generatorethereum-helm-chartsVerified publisher | 0.2.3 | 1 of 2See more | 4,459 |
| ipfs-clusterethereum-helm-chartsVerified publisher | 0.1.14 | 3 of 3See more | 6,248 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 13,196 |
| evccevccVerified publisher | 1.0.47 | 1 of 1See more | 1,515 |
| event-exporterevent-exporterVerified publisher | 0.1.17 | 1 of 1See more | 1,726 |
| events-exporterevents-exporter | 0.0.4 | 1 of 1See more | 2,828 |
| github-actions-runner-operatorevryfs-ossVerified publisher | 2.8.1 | 1 of 1See more | 1,791 |
| ext-postgres-operatorext-postgres-operatorVerified publisher | 3.0.0 | 1 of 1See more | 685 |
| akauntingf3k-techVerified publisher | 1.3121.0 | 1 of 4See more | 4,809 |
| vidcheckfactlyVerified publisher | 0.5.2 | 1 of 2See more | 4,754 |
| ecr-cleanupfairwinds-stableVerified publisher | 1.2.8 | 1 of 1See more | 1,656 |
| falco-operatorfalcosecurity | 0.3.1 | 1 of 1See more | 659 |
| fastapi-microservice-appfast-api-microservice-app | 1.3.0 | 1 of 4See more | 10,612 |
| featurehubfeaturehub | 4.1.6 | 3 of 7See more | 10,801 |
| federidfederidOfficialVerified publisher | 0.1.2 | 1 of 1See more | 2,638 |
| fencemasterfencemasterVerified publisher | 0.1.13 | 1 of 1See more | 511 |
| taigafermosit | 0.0.11 | 2 of 7See more | 9,956 |
| ferriskeyferriskey | 0.9.0 | 1 of 3See more | 2,413 |
| ai-gatewayferro-labsOfficialVerified publisher | 1.2.0 | 1 of 1See more | 252 |
| file-manager-serverfile-manager-server | 1.11.0 | 1 of 1See more | 1,151 |
| fission-corefission-chartsVerified publisher | 1.14.1 | 3 of 3See more | 10,039 |
| openldapfluktuid | 0.1.1 | 1 of 2See more | 5,111 |
| fluorite-chartfluorite-helmOfficialVerified publisher | 0.1.0 | 1 of 1See more | 108 |
| flyway-operatorflyway-operatorVerified publisher | 0.2.13 | 1 of 1See more | 1,010 |
| contentserverfoomoVerified publisher | 0.8.0 | 1 of 1See more | 423 |
| fqdn-controllerfqdn-controllerOfficialVerified publisher | 0.3.0 | 1 of 1See more | 153 |
| free5gcfree5gcVerified publisher | 0.1.3 | 12 of 12See more | 16,184 |
| fsmfsmOfficialVerified publisher | 0.2.11 | 2 of 5See more | 5,573 |
| function-mesh-operatorfunction-mesh | 0.2.45 | 1 of 1See more | 350 |
| adguard-homegabe565Verified publisher | 0.3.25 | 1 of 2See more | 1,226 |
| home-assistantgabe565Verified publisher | 0.17.0 | 1 of 1See more | 3,025 |
| memosgabe565Verified publisher | 0.17.0 | 1 of 1See more | 2,006 |
| dexgabibbo97 | 4.0.4 | 1 of 1See more | 4,490 |
| garage-uigarage-uiVerified publisher | 0.13.0 | 1 of 1See more | 89 |
| garmgarmVerified publisher | 4.2.0 | 1 of 3See more | 1,072 |
| gateboardgateboard | 1.12.5 | 1 of 1See more | 1,854 |
| gateboard-discoverygateboard | 1.9.5 | 1 of 1See more | 1,561 |
| gboxgboxVerified publisher | 1.0.5 | 1 of 2See more | 3,434 |
| adguard-homegeek-cookbookVerified publisher | 5.5.2 | 1 of 2See more | 2,623 |
| alertmanager-botgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 4,682 |
| bazarrgeek-cookbookVerified publisher | 10.6.2 | 1 of 1See more | 19,125 |
| filebrowsergeek-cookbookVerified publisher | 1.4.2 | 1 of 1See more | 4,520 |
| focalboardgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 5,160 |
| gollumgeek-cookbookVerified publisher | 3.4.2 | 1 of 3See more | 5,315 |
Container images carrying it
6,327 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mikefarah/ | 6fc625c402de | stdlib | 1.26.9 | 3 |
| minio/ | 54393e03f3b2 | stdlib | 1.26.9 | 3 |
| mintel/ | caf71cee7b9a | stdlib | 1.26.9 | 3 |
| natsio/ | a3381560aab6 | stdlib | 1.26.9 | 3 |
| natsio/ | b3359eeb10bf | stdlib | 1.26.9 | 3 |
| natsio/ | 26c826662ac8 | stdlib | 1.26.9 | 3 |
| oamdev/ | 231c423c2b17 | stdlib | 1.26.9 | 3 |
| oliver006/ | 6ca518a72f30 | stdlib | 1.26.9 | 3 |
| opencsghq/ | b98600564e07 | stdlib | 1.26.9 | 3 |
| opencsghq/ | 0491782f7bac | stdlib | 1.26.9 | 3 |
| openebs/ | f6c18b0f8c8a | stdlib | 1.26.9 | 3 |
| openebs/ | 6afe2123c457 | stdlib | 1.26.9 | 3 |
| openebs/ | aea39e49bb97 | stdlib | 1.26.9 | 3 |
| oryd/ | 2c93beb5e5f2 | stdlib | 1.26.9 | 3 |
| otel/ | 310a800ad69e | stdlib | 1.26.9 | 3 |
| pgsty/ | b616a0cf8cb2 | stdlib | 1.26.9 | 3 |
| prom/ | d5155cfac40a | stdlib | 1.26.9 | 3 |
| prom/ | d8a61419b841 | stdlib | 1.26.9 | 3 |
| prom/ | 565ee8650122 | stdlib | 1.26.9 | 3 |
| prom/ | bfad037f95e5 | stdlib | 1.26.9 | 3 |
| prom/ | 0a9031142481 | stdlib | 1.26.9 | 3 |
| prom/ | 8305a33fb80a | stdlib | 1.26.9 | 3 |
| prom/ | a5df60347882 | stdlib | 1.26.9 | 3 |
| prom/ | d23aca343b86 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 10f66b5df886 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 4cd5366a9f51 | stdlib | 1.26.9 | 3 |
| rancher/ | 090bef429ed1 | stdlib | 1.26.9 | 3 |
| rancher/ | 61b68d4372ba | stdlib | 1.26.9 | 3 |
| rcdelacruz/ | 38007f358355 | stdlib | 1.26.9 | 3 |
| rss3/ | d1d2ae6efd05 | stdlib | 1.26.9 | 3 |
| signoz/ | fcc4a3288154 | stdlib | 1.26.9 | 3 |
| solace/ | 3c8a8b7fdcae | stdlib | 1.26.9 | 3 |
| stakater/ | 83fef483d497 | stdlib | 1.26.9 | 3 |
| tykio/ | 1161bd297135 | stdlib | 1.26.9 | 3 |
| tykio/ | 50b3e4f5398a | stdlib | 1.26.9 | 3 |
| tykio/ | 55b4d31c7a01 | stdlib | 1.26.9 | 3 |
| tykio/ | 1489b58f642b | stdlib | 1.26.9 | 3 |
| tykio/ | 205215b815a4 | stdlib | 1.26.9 | 3 |
| vikunja/ | ed1f3ed467fe | stdlib | 1.26.9 | 3 |
| wallabag/ | 4a527e027e0d | stdlib | 1.26.9 | 3 |
| yugabytedb/ | b6dba322c734 | stdlib | 1.26.9 | 3 |
| gcr.io/ | 2a685a38dd01 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 93fa0daf603c | stdlib | 1.26.9 | 3 |
| ghcr.io/ | d1036b07e348 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | a27779ed1085 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 38a4cfc548b0 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | b776dae45d08 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 7a3c4f7e038f | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 5f6cd61e6da6 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | d1e7285865d8 | stdlib | 1.26.9 | 3 |