CVE-2026-56857

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,323; of 18,117 indexed, latest versions
Container images: 6,150; deployed by those charts
Fix available: 1 of 1; affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,323 of 18,117 indexed charts deploy, on 6,150 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,150

OSV records: GO-2026-6604
Trending: Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,323 by stars

Chart

Latest

Affected images

Radar Score

jaegergpg-dev

3.3.3

4 of 5 See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	stdlib@go1.21.5	1.26.9
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.26.9
jaegertracing/jaeger-collector :1.53.0	7f1269222903	stdlib@go1.21.5	1.26.9
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	stdlib@go1.21.5	1.26.9

Open the chart page →

22,255

kube-prometheus-stackgpg-dev

84.0.0

5 of 6 See more

kube-prometheus-stack gpg-dev 84.0.0

5 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/grafana :13.0.1	0f86bada30d6	stdlib@go1.26.0	1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.1	4f6da0256b1b	stdlib@go1.26.2	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.90.1	52a6a92d915e	stdlib@go1.25.8	1.26.9
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	stdlib@go1.26.1	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.9

Open the chart page →

5,450

kubernetes-dashboardgpg-dev

7.5.0

4 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	stdlib@go1.22.3	1.26.9
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	stdlib@go1.22.2	1.26.9
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	stdlib@go1.22.1	1.26.9
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	stdlib@go1.22.3	1.26.9

Open the chart page →

7,915

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	stdlib@go1.21.8	1.26.9

Open the chart page →

1,539

opentelemetry-demogpg-dev

0.33.8

8 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	stdlib@go1.23.1	1.26.9
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	stdlib@go1.21.5	1.26.9
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	stdlib@go1.23.3	1.26.9
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	stdlib@go1.22.5	1.26.9
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	stdlib@go1.22.8	1.26.9
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	stdlib@go1.22.8	1.26.9
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	stdlib@go1.21.5	1.26.9
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	stdlib@go1.23.3	1.26.9

Open the chart page →

58,805

prometheusgpg-dev

29.2.1

6 of 6 See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.1	693faa0b8724	stdlib@go1.25.8	1.26.9
quay.io/prometheus/alertmanager :v0.32.0	58e117eabcce	stdlib@go1.26.2	1.26.9
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	stdlib@go1.26.1	1.26.9
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	stdlib@go1.26.2	1.26.9
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	stdlib@go1.25.3	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.9

Open the chart page →

5,747

prometheus-operator-admission-webhookgpg-dev

0.18.1

2 of 2 See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	stdlib@go1.23.4	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.9

Open the chart page →

3,053

thanosgpg-dev

0.5.3

1 of 1 See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
thanosio/thanos :v0.41.0	cf3e9b292e43	stdlib@go1.25.7	1.26.9

Open the chart page →

1,015

traefikgpg-dev

39.0.8

1 of 1 See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/traefik :v3.6.13	34d5089d0b41	stdlib@go1.25.8	1.26.9

Open the chart page →

1,791

velerogpg-dev

12.0.0

1 of 1 See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.0	e4d1e79be2ee	stdlib@go1.25.7	1.26.9

Open the chart page →

2,110

whoami-demogpg-dev

0.1.0

1 of 1 See more

whoami-demo gpg-dev 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
containous/whoami :latest	7d6a3c8f9147	stdlib@go1.14	1.26.9

Open the chart page →

2,369

spark-standalonegradiant-bigdata

0.1.0

1 of 2 See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :latest	c1a266f63a84	stdlib@go1.26.5	1.26.9

Open the chart page →

6,531

cloudcost-exportergrafana

1.1.16

1 of 1 See more

cloudcost-exporter grafana 1.1.16

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/cloudcost-exporter :v1.15.0	6c7f78bd104e	stdlib@go1.27.1	1.26.9

Open the chart page →

213

grafana-cloud-onboardinggrafana

0.4.7

5 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

5 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/beyla-k8s-cache :2	53b2f561cb1b	stdlib@go1.25.3	1.26.9
ghcr.io/grafana/alloy-operator :1.8.1	ae85d68749c7	stdlib@go1.25.8	1.26.9
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	stdlib@go1.23.6	1.26.9
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	stdlib@go1.26.1	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.9

Open the chart page →

7,070

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	stdlib@go1.24.6	1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.26.9

Open the chart page →

4,719

k8s-injection-controllergrafana

0.2.1

1 of 1 See more

k8s-injection-controller grafana 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/k8s-injection-controller :0.2.0	c5bad40655a3	stdlib@go1.26.5	1.26.9

Open the chart page →

406

mimir-openshift-experimentalgrafana

2.1.0

1 of 4 See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	stdlib@go1.17.8	1.26.9

Open the chart page →

5,321

pyroscope-monitoringgrafana

0.1.1

5 of 6 See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	stdlib@go1.24.6	1.26.9
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	stdlib@go1.24.5	1.26.9
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	stdlib@go1.23.6	1.26.9
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	stdlib@go1.24.6	1.26.9

Open the chart page →

11,642

rollout-operatorgrafana

0.52.0

1 of 1 See more

rollout-operator grafana 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/rollout-operator :v0.40.0	c49161c368a5	stdlib@go1.27.1	1.26.9

Open the chart page →

209

snyk-exportergrafana

0.1.0

1 of 1 See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/snyk_exporter :v1.4.1	d3c9093401ca	stdlib@go1.21.0	1.26.9

Open the chart page →

1,234

synthetic-monitoring-agentgrafana-community

1.20.1

1 of 1 See more

synthetic-monitoring-agent grafana-community 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/synthetic-monitoring-agent :v0.66.1	d5f33ade9d66	stdlib@go1.26.6	1.26.9

Open the chart page →

325

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	stdlib@go1.23.3	1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	stdlib@go1.23.3	1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.26.9
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	stdlib@go1.23.1	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.26.9

Open the chart page →

8,781

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	stdlib@go1.13.10	1.26.9

Open the chart page →

9,503

grapple-installergrapple-installer

0.3.23

1 of 1 See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	stdlib@go1.18.10	1.26.9

Open the chart page →

90,639

grayloggraylog

1.0.2

1 of 4 See more

5,976

armada-executorgresearch

0.22.12

1 of 1 See more

armada-executor gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gresearch/armada-executor :latest	0ba37b0f5a3b	stdlib@go1.27.1	1.26.9

Open the chart page →

815

armada-lookout-ingestergresearch

0.22.12

1 of 1 See more

armada-lookout-ingester gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout-ingester :latest	c6fce922dec3	stdlib@go1.27.1	1.26.9

Open the chart page →

815

armada-lookout-migrationgresearch

0.22.12

1 of 1 See more

armada-lookout-migration gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout :latest	2e924223c0f7	stdlib@go1.27.1	1.26.9

Open the chart page →

815

armada-scheduler-migrationgresearch

0.22.12

1 of 1 See more

armada-scheduler-migration gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gresearch/armada-scheduler :latest	a5f8c2d040c0	stdlib@go1.27.1	1.26.9

Open the chart page →

815

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	stdlib@go1.21.10	1.26.9

Open the chart page →

2,012

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	stdlib@go1.15.2	1.26.9

Open the chart page →

16,379

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	stdlib@go1.22.7	1.26.9

Open the chart page →

3,246

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	stdlib@go1.17.13	1.26.9

Open the chart page →

3,099

routergroundcover

1.13.82

4 of 7 See more

router groundcover 1.13.82

4 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.55-grafana11.3.7	7d261462727d	stdlib@go1.26.1	1.26.9
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller :3.5.3-20260205	bf9db911deed	stdlib@go1.25.7	1.26.9
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	stdlib@go1.25.7	1.26.9
quay.io/groundcover/tools :20260929	e8a79ea4cf39	stdlib@go1.24.4	1.26.9

Open the chart page →

8,767

temporalgroundcover

1.13.82

2 of 2 See more

temporal groundcover 1.13.82

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260929-1	f21c0eb520a9	stdlib@go1.26.8	1.26.9
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	stdlib@go1.26.3	1.26.9

Open the chart page →

2,486

mysqlgroundhog2k

3.1.4

1 of 1 See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/mysql :9.7.2	e2bde46db656	stdlib@go1.24.6	1.26.9

Open the chart page →

887

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	stdlib@go1.19.2-ts3fd24dee31	1.26.9

Open the chart page →

2,728

minifluxhajowieland

1.0.0

1 of 1 See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	stdlib@go1.24.2	1.26.9

Open the chart page →

1,887

hakoniwahakoniwa

0.1.0

1 of 1 See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/aplulu/hakoniwa :0.1.0	accf0b921388	stdlib@go1.25.5	1.26.9

Open the chart page →

763

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.26.9

Open the chart page →

3,631

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	stdlib@go1.16.3	1.26.9

Open the chart page →

5,760

mautrix-signalhalkeye

0.3.0

1 of 2 See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
signald/signald :0.23.2	edbff058278c	stdlib@go1.18.10	1.26.9

Open the chart page →

2,401

thunderdome-planning-pokerhalkeye

0.1.1

1 of 1 See more

thunderdome-planning-poker halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
stevenweathers/thunderdome-planning-poker :latest	c7eb7b10f186	stdlib@go1.26.4	1.26.9

Open the chart page →

775

whoamihalkeye

1.0.1

1 of 1 See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
containous/whoami :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.26.9

Open the chart page →

2,369

hcp-terraform-operatorhashicorp

2.12.1

2 of 2 See more

hcp-terraform-operator hashicorp 2.12.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
hashicorp/hcp-terraform-operator :2.12.1	5a15932f6838	stdlib@go1.26.5	1.26.9
quay.io/brancz/kube-rbac-proxy :v0.20.1	f5fbfec6a2b2	stdlib@go1.25.4	1.26.9

Open the chart page →

1,399

hatchet-apihatchet

0.20.0

4 of 4 See more

hatchet-api hatchet 0.20.0

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate :v0.110.5	b2112d73f37a	stdlib@go1.26.8	1.26.9

Open the chart page →

2,449

hatchet-frontendhatchet

0.20.0

1 of 1 See more

hatchet-frontend hatchet 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/hatchet-dev/hatchet/hatchet-frontend :v0.110.5	136c6a29a81a	stdlib@go1.26.8	1.26.9

Open the chart page →

213

hatchet-hahatchet

0.20.0

6 of 8 See more

hatchet-ha hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend :v0.110.5	136c6a29a81a	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate :v0.110.5	b2112d73f37a	stdlib@go1.26.8	1.26.9

Open the chart page →

9,539

hatchet-stackhatchet

0.20.0

6 of 8 See more

hatchet-stack hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend :v0.110.5	136c6a29a81a	stdlib@go1.26.8	1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate :v0.110.5	b2112d73f37a	stdlib@go1.26.8	1.26.9

Open the chart page →

9,539

hauler-helmhauler

2.4.1

1 of 1 See more

hauler-helm hauler 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
hauler/hauler :2.1.1	3f36bf6bc92d	stdlib@go1.27.0-X:boringcrypto	1.26.9

Open the chart page →

227

Container images carrying it

6,150 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
webhookrelay/webhookrelay-operator :0.8.0	afffa826f068	stdlib@go1.27.1	1.26.9	1
weblate/weblate :3.11.3-1	82848df56ecd	stdlib@go1.13.5	1.26.9	1
weblate/weblate :2026.10.1.1	b0f200f38d70	stdlib@go1.26.7	1.26.9	1
wernight/ngrok :latest	d211f29ebcfe	stdlib@go1.21.6	1.26.9	1
willnorris/imageproxy :latest	21d0c90f4c31	stdlib@go1.16.8	1.26.9	1
wistefan/vcbackend :0.0.1	3bd436164b51	stdlib@go1.18.3	1.26.9	1
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :v1.9.9	464d11e36e10	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :latest	ac252dba4165	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.26.9	1
woodpeckerci/woodpecker-agent :v3.19.0	f85f163e0949	stdlib@go1.27.1	1.26.9	1
woodpeckerci/woodpecker-server :v3.19.0	6ca167a3c58b	stdlib@go1.27.1	1.26.9	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	stdlib@go1.20.12	1.26.9	1
wuhan005/forklift :daemon	4e6da210e449	stdlib@go1.19.8	1.26.9	1
wuhan005/forklift :controller	bfbe82d59850	stdlib@go1.19.8	1.26.9	1
xhofe/alist :v3.24.0	33f15a31be6c	stdlib@go1.20.5	1.26.9	1
xingse/kubernetes-oom-event-generator :v1.2.0	9f9d5492e4bf	stdlib@go1.13	1.26.9	1
xosphere/xonodepools :1.0.7	1458097b6f85	stdlib@go1.26.2	1.26.9	1
xperimental/nextcloud-exporter :0.9.1	3e90a3897651	stdlib@go1.26.1	1.26.9	1
yandex/clickhouse-server :latest	1cbf75aabe1e	stdlib@go1.16.7	1.26.9	1
yetiplatform/bloomcheck :dev	85683ddfccbb	stdlib@go1.24.2	1.26.9	1
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.26.9	1
yidadaa/chatgpt-next-web :latest	eaaa469ddeeb	stdlib@go1.20.12	1.26.9	1
ymuski/geo-checker :5.0.0	5ba7fd8c7bdc	stdlib@go1.25.3	1.26.9	1
yonahdissen/kor :latest	1a85158c82bb	stdlib@go1.26.0	1.26.9	1
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	stdlib@go1.26.1	1.26.9	1
yukimochi/activity-relay :v2.0.11	5798afb69216	stdlib@go1.25.12	1.26.9	1
yungwood/ical-filter-proxy :0.3.1	ddc3f30ab05f	stdlib@go1.26.5	1.26.9	1
yungwood/synergy-wholesale-exporter :0.1.1	054dce85989b	stdlib@go1.26.5	1.26.9	1
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.26.9	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	stdlib@go1.18.1	1.26.9	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.26.9	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9	1
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	stdlib@go1.26.1	1.26.9	1
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	stdlib@go1.20.5	1.26.9	1
zeetdev/tailscale-relay :v1.24.2	1967aa2840b6	stdlib@go1.18.1-ts710a0d8610	1.26.9	1
zer0tonin/mikochi :1.12.1	654af3e65245	stdlib@go1.26.7	1.26.9	1
zooproject/zoo-project :dru-51e7d55383f24594959b69e58518961c6aa66740	da112e8d03f1	stdlib@go1.26.8	1.26.9	1
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	stdlib@go1.17.12	1.26.9	1
zufardhiyaulhaq/devopsweekly :v2.1.0	46625567fb60	stdlib@go1.17.13	1.26.9	1
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	stdlib@go1.17.12	1.26.9	1
zufardhiyaulhaq/istio-ratelimit-operator :v2.15.0	692cfc9d6614	stdlib@go1.19.13	1.26.9	1
zufardhiyaulhaq/javascriptweekly :v2.1.0	86424bd0b2a4	stdlib@go1.17.13	1.26.9	1
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	stdlib@go1.16.15	1.26.9	1
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	stdlib@go1.16.15	1.26.9	1
zufardhiyaulhaq/nodejsweekly :v1.1.0	306859a3f167	stdlib@go1.16.15	1.26.9	1
gcr.io/cadvisor/cadvisor :v0.40.0	135327c978de	stdlib@go1.13.15	1.26.9	1
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	stdlib@go1.19.9	1.26.9	1
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	stdlib@go1.24.1	1.26.9	1
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	stdlib@go1.13.5	1.26.9	1