StackRadar

CVE-2026-56857

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,533
of 18,090 indexed, latest versions
Container images
6,378
deployed by those charts
Fix available
2 of 2
affected packages

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,378
ingress-nginx-controller-1.15apk1.15.10-r31.15.10-r81
OSV records
CGA-3j79-hxrj-98c9GO-2026-6604
Also known as
CGA-28rp-569c-vjc3, CGA-4j4m-4mp6-xp7x, CGA-85gw-4745-j8q8, CGA-929x-9pxj-5mv4, CGA-jc7p-vgxm-j32v
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,533 by stars
ChartLatestAffected imagesRadar Score
natsnatsVerified publisher2.15.03 of 3See more

nats nats 2.15.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/nats:2.15.0-alpineac8f88a6494b
stdlib@go1.27.1
1.26.9
natsio/nats-box:0.19.7ffce8bd10338
stdlib@go1.26.3
1.26.9
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.9

Open the chart page →

2,984
dexdexVerified publisher0.26.01 of 1See more

dex dex 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.9

Open the chart page →

541
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.9

Open the chart page →

36,792
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.9

Open the chart page →

12,805
falcofalcosecurity9.2.03 of 3See more

falco falcosecurity 9.2.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.0788f1129c542
stdlib@go1.26.8
1.26.9
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
stdlib@go1.26.8
1.26.9
falcosecurity/falcoctl:0.14.290ba9627886e
stdlib@go1.27.1
1.26.9

Open the chart page →

3,910
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.9

Open the chart page →

372
alertmanagerprometheus-communityOfficialVerified publisher2.1.02 of 2See more

alertmanager prometheus-community 2.1.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9

Open the chart page →

487
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.9

Open the chart page →

922
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.9

Open the chart page →

3,512
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.9

Open the chart page →

2,138
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.59.01 of 1See more

prometheus-node-exporter prometheus-community 4.59.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9

Open the chart page →

350
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.9
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.9

Open the chart page →

2,052
grafanagrafana-communityVerified publisher13.5.01 of 1See more

grafana grafana-community 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9

Open the chart page →

314
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.9

Open the chart page →

1,604
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.95.25 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.95.2

5 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.9
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

1,633
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.9

Open the chart page →

2,279
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.9

Open the chart page →

523
home-assistanthelm-hassVerified publisher0.3.861 of 1See more

home-assistant helm-hass 0.3.86

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
stdlib@go1.23.3
1.26.9

Open the chart page →

2,810
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.9

Open the chart page →

1,550
openebsopenebsOfficialVerified publisher4.6.220 of 35See more

openebs openebs 4.6.2

20 of the 35 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.9
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.9
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.9
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.9
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.9
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.9
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.9
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.9
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.9
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.9
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.9

Open the chart page →

35,759
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.9

Open the chart page →

205
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.9

Open the chart page →

2,349
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.9

Open the chart page →

4,466
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.9

Open the chart page →

549
corednscorednsVerified publisher1.48.21 of 1See more

coredns coredns 1.48.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.9

Open the chart page →

539
apisixapisix2.18.01 of 3See more

apisix apisix 2.18.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.9

Open the chart page →

3,650
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.9

Open the chart page →

2,804
x509-certificate-exporterenixOfficialVerified publisher4.2.01 of 1See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/enix/x509-certificate-exporter:4.2.0afef14dc3862
stdlib@go1.26.5
1.26.9

Open the chart page →

350
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.9

Open the chart page →

2,935
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.124.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.124.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.160.05323a0df9508
stdlib@go1.26.8
1.26.9

Open the chart page →

201
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
stdlib@go1.26.1
1.26.9

Open the chart page →

1,833
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9

Open the chart page →

205
dagsterdagsterVerified publisher1.13.261 of 5See more

dagster dagster 1.13.26

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.9

Open the chart page →

4,109
prometheus-redis-exporterprometheus-communityVerified publisher6.33.01 of 1See more

prometheus-redis-exporter prometheus-community 6.33.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.93.06ca518a72f30
stdlib@go1.27.1
1.26.9

Open the chart page →

145
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:161a6ab3f5345e
stdlib@go1.24.6
1.26.9
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.9
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.9

Open the chart page →

16,176
keycloakcloudpirates-keycloakVerified publisher0.21.462 of 3See more

keycloak cloudpirates-keycloak 0.21.46

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.9
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

5,304
graylogkong-zVerified publisher3.0.361 of 5See more

graylog kong-z 3.0.36

1 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.9

Open the chart page →

3,290
netdatanetdataVerified publisher3.7.1751 of 1See more

netdata netdata 3.7.175

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.01e50cc0b11f0
stdlib@go1.27.0
1.26.9

Open the chart page →

3,056
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
stdlib@go1.26.8
1.26.9
1password/connect-sync:1.8.3a760350c941a
stdlib@go1.26.8
1.26.9

Open the chart page →

482
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.9

Open the chart page →

2,606
opencostopencostOfficialVerified publisher2.5.321 of 2See more

opencost opencost 2.5.32

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.9

Open the chart page →

478
openfaasopenfaas15.0.136 of 6See more

openfaas openfaas 15.0.13

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.9
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.9
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.9
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.9
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
stdlib@go1.26.6
1.26.9
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.9

Open the chart page →

5,691
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.9

Open the chart page →

376
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.9
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.9

Open the chart page →

4,421
gitlab-agentgitlabVerified publisher2.32.01 of 1See more

gitlab-agent gitlab 2.32.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.4.04d3498887bee
stdlib@go1.27.1
1.26.9

Open the chart page →

230
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.9

Open the chart page →

1,149
policy-reporterpolicy-reporterOfficialVerified publisher3.11.01 of 1See more

policy-reporter policy-reporter 3.11.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.00f6eabff483b
stdlib@go1.27.1
1.26.9

Open the chart page →

230
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.9

Open the chart page →

6,642
netboxnetboxOfficialVerified publisher8.3.913 of 5See more

netbox netbox 8.3.91

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnami/valkey:latest3ab4091a7e3c
stdlib@go1.26.8
1.26.9
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.9
ghcr.io/netbox-community/netbox:v4.7.26f7177d3ff4d
stdlib@go1.26.7
1.26.9

Open the chart page →

1,935
valkeybitnamiVerified publisher6.3.41 of 1See more

valkey bitnami 6.3.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container imageDigestPackageFixed in
bitnami/valkey:latest3ab4091a7e3c
stdlib@go1.26.8
1.26.9

Open the chart page →

141

Container images carrying it

6,378 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
stakater/workshop-operator:v0.0.3897bf456cc97c
stdlib@go1.16.13
1.26.9
1
stakkato95/twitter-service-analytics:0.1.05d48906d66b3
stdlib@go1.18.3
1.26.9
1
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
stdlib@go1.18.3
1.26.9
1
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
stdlib@go1.18.3
1.26.9
1
stakkato95/twitter-service-users:0.1.1456049efee9a
stdlib@go1.18.3
1.26.9
1
stashapp/stash:latest24dbd7607174
stdlib@go1.13.15
1.26.9
1
stashapp/stash:v0.31.1df744af5a0c9
stdlib@go1.24.3
1.26.9
1
stashapp/stash-box:latesta534c8afdf39
stdlib@go1.23.10
1.26.9
1
staslevchenko/kent:0.4.0e1b5de030254
stdlib@go1.25.14
1.26.9
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
stdlib@go1.18.10
1.26.9
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
stdlib@go1.19.10
1.26.9
1
statping/statping:v0.90.6532f26fffca46
stdlib@go1.14.8
1.26.9
1
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
stdlib@go1.26.4
1.26.9
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
stdlib@go1.15.6
1.26.9
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.26.9
1
streamnative/function-mesh:v0.29.04176923db03c
stdlib@go1.25.13
1.26.9
1
streamnative/pulsar-resources-operator:v0.21.282434bb2a8ad
stdlib@go1.25.12
1.26.9
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.26.9
1
streamnative/sn-operator:v0.20.17e492b6608418
stdlib@go1.26.6
1.26.9
1
stubin87/tiny-api:v1.1.02e5c42e92ec8
stdlib@go1.19.1
1.26.9
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.26.9
1
subspacecommunity/subspace:1.5.0e2042b63fb35
stdlib@go1.14.6
1.26.9
1
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.9
1
sumuduliya/hello-world:latestb7788a2984a3
stdlib@go1.19.13
1.26.9
1
supabase/gotrue:v2.189.0385184459f57
stdlib@go1.25.8
1.26.9
1
supabase/gotrue:v2.91.07174d551d720
stdlib@go1.20.7
1.26.9
1
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.26.9
1
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.26.9
1
superorbital/cludod:0.0.2-alphad59732f61d6e
stdlib@go1.17.6
1.26.9
1
superque/smokeping-prober:v0.11.028ca636d1dee
stdlib@go1.26.1
1.26.9
1
superseriousbusiness/gotosocial:0.22.10078ca451dda
stdlib@go1.25.12
1.26.9
1
supporttools/do-database-metrics-adapter:1.0.2ab55fd5a69c3
stdlib@go1.22.3
1.26.9
1
supporttools/go-redis-proxy:0.0.7cbd45f6b02b8
stdlib@go1.21.6
1.26.9
1
supporttools/k8s-ns-purger:v3bd3001f01f6e
stdlib@go1.23.5
1.26.9
1
supporttools/placeholder:v455dc50d660e149
stdlib@go1.22.4
1.26.9
1
supporttools/powerdns-admin-proxy:5e3687d66bcfa
stdlib@go1.21.3
1.26.9
1
supporttools/rancherresourcescanner:v3d76207db0fa7
stdlib@go1.22.4
1.26.9
1
supporttools/rancher-upgrade-tool:v216f4dc8ef6dd2d
stdlib@go1.22.4
1.26.9
1
supporttools/reflow-ingress-logs:v11aa7194c4c851
stdlib@go1.23.5
1.26.9
1
supporttools/uptime-kuma:v2.6f8a49ed65809
stdlib@go1.19.6
1.26.9
1
supporttools/website:v132603fdbc9e708e
stdlib@go1.22.4
1.26.9
1
surajwarbhe/grafana:v185248611e9f1
stdlib@go1.14.3
1.26.9
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
stdlib@go1.20.4
1.26.9
1
svtechnmaa/svtech_icingadb:v1.1.26d91c2e4e882
stdlib@go1.21.5
1.26.9
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
stdlib@go1.21.6
1.26.9
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
stdlib@go1.20.5
1.26.9
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
stdlib@go1.21.5
1.26.9
1
syepes/network_exporter:1.8.000af1691570e
stdlib@go1.25.1
1.26.9
1
syncthing/syncthing:2.1.07c60eb0ec887
stdlib@go1.26.3
1.26.9
1
syncthing/syncthing:1.18.2966433161272
stdlib@go1.17
1.26.9
1

syft 1.42.1 · advisories as of 11 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.