CVE-2026-56857
CriticalAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,323
- of 18,117 indexed, latest versions
- Container images
- 6,150
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Carried by container images the latest versions of 5,323 of 18,117 indexed charts deploy, on 6,150 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,150 |
- OSV records
- GO-2026-6604
- Trending
- Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,323 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mysqlhelmcourseVerified publisher | 0.2.4 | 1 of 1See more | 2,384 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 10,735 |
| jasperreportshelm-dojo | 8.0.0-v1.3 | 1 of 2See more | 7,784 |
| dwpkhelm-dwpkVerified publisher | 1.0.0 | 3 of 3See more | 714 |
| helmfile-gitops-agenthelmfile-gitops-agentVerified publisher | 1.1.99 | 3 of 3See more | 2,854 |
| adguard-homehelmforgeVerified publisher | 1.5.2 | 1 of 2See more | 424 |
| affinehelmforgeVerified publisher | 1.0.2 | 1 of 3See more | 4,856 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,543 |
| answerhelmforgeVerified publisher | 1.5.3 | 1 of 1See more | 893 |
| appwritehelmforgeVerified publisher | 2.0.3 | 2 of 5See more | 5,439 |
| automatischhelmforgeVerified publisher | 1.3.9 | 2 of 4See more | 6,617 |
| booklorehelmforgeVerified publisher | 2.0.2 | 1 of 3See more | 2,485 |
| castopodhelmforgeVerified publisher | 1.2.10 | 2 of 3See more | 10,910 |
| certimatehelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 266 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 8,936 |
| ckanhelmforgeVerified publisher | 1.3.10 | 2 of 6See more | 11,676 |
| cloudflaredhelmforgeVerified publisher | 1.5.17 | 1 of 1See more | 631 |
| countlyhelmforgeVerified publisher | 1.2.8 | 2 of 3See more | 75,755 |
| dawarichhelmforgeVerified publisher | 1.0.3 | 2 of 4See more | 12,684 |
| ddns-updaterhelmforgeVerified publisher | 1.4.12 | 1 of 1See more | 581 |
| discount-bandithelmforgeVerified publisher | 2.0.9 | 2 of 3See more | 36,261 |
| druidhelmforgeVerified publisher | 1.3.6 | 2 of 4See more | 10,181 |
| drupalhelmforgeVerified publisher | 1.2.15 | 1 of 2See more | 4,539 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 5,255 |
| ghosthelmforgeVerified publisher | 1.2.10 | 2 of 3See more | 3,927 |
| ghostfoliohelmforgeVerified publisher | 1.0.1 | 1 of 4See more | 5,158 |
| giteahelmforgeVerified publisher | 1.1.21 | 1 of 1See more | 913 |
| github-mcp-serverhelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 751 |
| glancehelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 383 |
| gophishhelmforgeVerified publisher | 0.1.6 | 1 of 1See more | 4,212 |
| hermes-agenthelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 7,001 |
| hoppscotchhelmforgeVerified publisher | 1.1.12 | 2 of 2See more | 2,699 |
| immichhelmforgeVerified publisher | 1.2.10 | 1 of 5See more | 13,214 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 3,476 |
| komgahelmforgeVerified publisher | 1.4.16 | 1 of 1See more | 37,399 |
| kubernetes-mcp-serverhelmforgeVerified publisher | 1.0.7 | 1 of 1See more | 318 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 3 of 3See more | 3,728 |
| medikeephelmforgeVerified publisher | 2.0.2 | 2 of 3See more | 6,592 |
| memoshelmforgeVerified publisher | 2.0.2 | 1 of 2See more | 516 |
| metabasehelmforgeVerified publisher | 1.2.30 | 1 of 3See more | 1,955 |
| metrics-serverhelmforgeVerified publisher | 1.0.4 | 1 of 1See more | 469 |
| middlewarehelmforgeVerified publisher | 1.2.8 | 2 of 4See more | 10,741 |
| minecrafthelmforgeVerified publisher | 1.5.5 | 1 of 1See more | 5,324 |
| mongodbhelmforgeVerified publisher | 1.8.2 | 1 of 1See more | 1,378 |
| moodlehelmforgeVerified publisher | 1.1.3 | 1 of 2See more | 7,285 |
| mysqlhelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 804 |
| netboxhelmforgeVerified publisher | 2.0.3 | 2 of 4See more | 4,996 |
| nextcloudhelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 7,850 |
| ntfyhelmforgeVerified publisher | 1.2.2 | 1 of 1See more | 408 |
| oauth2-proxyhelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 279 |
Container images carrying it
6,150 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| voidxmh/ | 93e42a569ca8 | stdlib | 1.26.9 | 1 |
| voidxmh/ | 1b7397412320 | stdlib | 1.26.9 | 1 |
| voidxmh/ | 2ff3f2146547 | stdlib | 1.26.9 | 1 |
| volantmq/ | 9bfe7857ebc3 | stdlib | 1.26.9 | 1 |
| volcanosh/ | 3815883c32f6 | stdlib | 1.26.9 | 1 |
| volcanosh/ | 9063355ee23b | stdlib | 1.26.9 | 1 |
| volcanosh/ | 7e9875e5897f | stdlib | 1.26.9 | 1 |
| volcanosh/ | b24ea8af2d16 | stdlib | 1.26.9 | 1 |
| volcanosh/ | 9231c5626249 | stdlib | 1.26.9 | 1 |
| volcanosh/ | f8b50088a732 | stdlib | 1.26.9 | 1 |
| voltha/ | d90403d58016 | stdlib | 1.26.9 | 1 |
| voltha/ | 259fc3a03f4e | stdlib | 1.26.9 | 1 |
| voltha/ | 762b272d439e | stdlib | 1.26.9 | 1 |
| vultr/ | 541c3e0aec58 | stdlib | 1.26.9 | 1 |
| vultr/ | 1806f17d620c | stdlib | 1.26.9 | 1 |
| vultr/ | 41d26735d437 | stdlib | 1.26.9 | 1 |
| wagnermanganelli164/ | d4ef27a4f180 | stdlib | 1.26.9 | 1 |
| wait4x/ | 4dcd86307de1 | stdlib | 1.26.9 | 1 |
| wallarm/ | 4d45db0ff240 | stdlib | 1.26.9 | 1 |
| wallarm/ | c8920e60c726 | stdlib | 1.26.9 | 1 |
| wallarm/ | a321bc974a19 | stdlib | 1.26.9 | 1 |
| wallarm/ | a1fecfdf987e | stdlib | 1.26.9 | 1 |
| wallarm/ | a591b9c91570 | stdlib | 1.26.9 | 1 |
| wallarm/ | 5cb2ae08b40f | stdlib | 1.26.9 | 1 |
| wallarm/ | 95ea2632326c | stdlib | 1.26.9 | 1 |
| wallarm/ | aecdb35c4def | stdlib | 1.26.9 | 1 |
| wallarm/ | b55ff6cecbd5 | stdlib | 1.26.9 | 1 |
| wallarm/ | 097cadc42336 | stdlib | 1.26.9 | 1 |
| wallarm/ | aecd88b24c51 | stdlib | 1.26.9 | 1 |
| wallarm/ | 7db2da8fce0b | stdlib | 1.26.9 | 1 |
| wallarm/ | 4314f3d2b918 | stdlib | 1.26.9 | 1 |
| wateim/ | 2520149ee574 | stdlib | 1.26.9 | 1 |
| wavefronthq/ | ded77b38c7c6 | stdlib | 1.26.9 | 1 |
| wavefronthq/ | af5fef9a4768 | stdlib | 1.26.9 | 1 |
| wazuh/ | 1da5c38c6a78 | stdlib | 1.26.9 | 1 |
| wazuh/ | 21994f40e0da | stdlib | 1.26.9 | 1 |
| wazuh/ | 5a065930682d | stdlib | 1.26.9 | 1 |
| wazuh/ | f09282d281f6 | stdlib | 1.26.9 | 1 |
| weaveworks/ | 174307de1b36 | stdlib | 1.26.9 | 1 |
| weaveworks/ | a9c2e9df4227 | stdlib | 1.26.9 | 1 |
| weaveworks/ | 3cdac6928a63 | stdlib | 1.26.9 | 1 |
| webdevops/ | 2446baee7b69 | stdlib | 1.26.9 | 1 |
| webdevops/ | f333704ecd60 | stdlib | 1.26.9 | 1 |
| webdevops/ | 051845d06d85 | stdlib | 1.26.9 | 1 |
| webdevops/ | 1d3b453fba99 | stdlib | 1.26.9 | 1 |
| webdevops/ | 381136dda026 | stdlib | 1.26.9 | 1 |
| webdevops/ | d3e1842ad419 | stdlib | 1.26.9 | 1 |
| webdevops/ | 7acd46a8a972 | stdlib | 1.26.9 | 1 |
| webdevops/ | 4fad7e14ad67 | stdlib | 1.26.9 | 1 |
| webdevops/ | 83b95faf10a0 | stdlib | 1.26.9 | 1 |