CVE-2026-56857

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,554; of 18,071 indexed, latest versions
Container images: 6,411; deployed by those charts
Fix available: 1 of 1; affected package

Root.Mkdir(All) can follow junctions out of the root on Windows in os

Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,411

OSV records: GO-2026-6604
Trending: Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,554 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

92.2.0

5 of 6 See more

kube-prometheus-stack prometheus-community 92.2.0

5 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	stdlib@go1.26.7	1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	stdlib@go1.27.1	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	stdlib@go1.26.8	1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

788

cert-managercert-manager

1.21.2

4 of 4 See more

cert-manager cert-manager 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	stdlib@go1.26.8	1.26.9

Open the chart page →

318

argo-cdargo

10.10.1

2 of 3 See more

argo-cd argo 10.10.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	stdlib@go1.27.1	1.26.9
quay.io/argoproj/argocd :v3.5.4	49dff79439bb	stdlib@go1.25.3	1.26.9

Open the chart page →

2,402

ingress-nginxingress-nginx

4.15.1

2 of 2 See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	stdlib@go1.26.1	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	stdlib@go1.26.1	1.26.9

Open the chart page →

2,110

prometheusprometheus-community

29.36.1

6 of 6 See more

prometheus prometheus-community 29.36.1

6 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	stdlib@go1.26.8	1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	stdlib@go1.26.8	1.26.9
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.9
quay.io/prometheus/prometheus :v3.15.0	efd719c99d83	stdlib@go1.27.1	1.26.9
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	stdlib@go1.27.1	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

830

redisbitnami

28.3.1

1 of 1 See more

redis bitnami 28.3.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

traefiktraefik

41.7.0

1 of 1 See more

traefik traefik 41.7.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.14	575fa15b1350	stdlib@go1.26.8	1.26.9

Open the chart page →

kubernetes-dashboardk8s-dashboard

7.14.0

4 of 5 See more

kubernetes-dashboard k8s-dashboard 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	stdlib@go1.23.12	1.26.9
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	stdlib@go1.23.12	1.26.9
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	stdlib@go1.23.4	1.26.9
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	stdlib@go1.23.9	1.26.9

Open the chart page →

4,484

lokigrafana

7.3.0

3 of 6 See more

loki grafana 7.3.0

3 of the 6 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.11	44148ad243c0	stdlib@go1.26.2	1.26.9
grafana/loki-canary :3.6.12	1e9bfcff3867	stdlib@go1.26.4	1.26.9
prom/memcached-exporter :v0.15.4	b6763ecb3c47	stdlib@go1.25.3	1.26.9

Open the chart page →

4,981

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	stdlib@go1.26.4	1.26.9

Open the chart page →

333

vaulthashicorp

0.34.1

2 of 2 See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	stdlib@go1.26.5	1.26.9
hashicorp/vault-k8s :1.7.6	55e27b080c9b	stdlib@go1.26.5	1.26.9

Open the chart page →

928

gitlabgitlab

10.4.1

18 of 21 See more

gitlab gitlab 10.4.1

18 of the 21 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
envoyproxy/gateway :v1.9.1	0049bcb384c5	stdlib@go1.26.7	1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	stdlib@go1.26.8	1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	stdlib@go1.26.8	1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	stdlib@go1.26.8	1.26.9
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	stdlib@go1.26.6	1.26.9
registry.gitlab.com/gitlab-org/build/cng/certificates :v19.4.1	04019bb2e325	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign :v19.4.1	5dd7827fa474	stdlib@go1.22.0	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitaly :v19.4.1	98d46dc7e071	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-base :v19.4.1	9df7d5aa03fe	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry :v4.40.2-gitlab	b21661438ee9	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter :17.0.2	693bfdee8aa8	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas :v19.4.1	4ed6de4d77e1	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell :v14.57.3	180688274b2c	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee :v19.4.1	7419aa33eb17	stdlib@go1.26.7	1.26.9
registry.gitlab.com/gitlab-org/build/cng/kubectl :v19.4.1	a072f0a41f28	stdlib@go1.26.4	1.26.9
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	stdlib@go1.26.5	1.26.9

Open the chart page →

19,183

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	stdlib@go1.26.4	1.26.9
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	stdlib@go1.26.4	1.26.9
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	stdlib@go1.26.4	1.26.9
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	stdlib@go1.26.4	1.26.9
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	stdlib@go1.26.4	1.26.9

Open the chart page →

2,723

jenkinsjenkinsci

5.9.67

1 of 2 See more

jenkins jenkinsci 5.9.67

1 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.580.1-jdk21	a660310e39ad	stdlib@go1.27.0	1.26.9

Open the chart page →

2,035

external-secretsexternal-secrets-operator

2.12.0

1 of 1 See more

external-secrets external-secrets-operator 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	stdlib@go1.26.6	1.26.9

Open the chart page →

133

external-dnsexternal-dns

1.23.0

1 of 1 See more

external-dns external-dns 1.23.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/external-dns/external-dns :v0.23.0	1854499e2b08	stdlib@go1.27.0	1.26.9

Open the chart page →

longhornlonghorn

1.13.0

3 of 3 See more

longhorn longhorn 1.13.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.13.0	7372f3c59239	stdlib@go1.26.8	1.26.9
longhornio/longhorn-share-manager :v1.13.0	53950f78b7af	stdlib@go1.26.8	1.26.9
longhornio/longhorn-ui :v1.13.0	f22fb0254ae5	stdlib@go1.26.8	1.26.9

Open the chart page →

300

gitlab-runnergitlab

0.93.0

1 of 1 See more

gitlab-runner gitlab 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	stdlib@go1.26.5	1.26.9

Open the chart page →

523

ciliumcilium

1.20.2

3 of 3 See more

cilium cilium 1.20.2

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.2	2939231d0d3e	stdlib@go1.26.8	1.26.9
quay.io/cilium/cilium-envoy :v1.37.6-1789133542-cbec91f666af0bf742da986d43832932dbb26b82	af7382699576	stdlib@go1.27.1	1.26.9
quay.io/cilium/operator-generic :v1.20.2	64d8798350e8	stdlib@go1.26.8	1.26.9

Open the chart page →

1,685

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	stdlib@go1.26.3	1.26.9

Open the chart page →

3,672

mongodbbitnami

20.0.0

1 of 1 See more

mongodb bitnami 20.0.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9

Open the chart page →

379

velerovmware-tanzu

12.2.1

1 of 1 See more

velero vmware-tanzu 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	stdlib@go1.25.11	1.26.9

Open the chart page →

1,393

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	stdlib@go1.25.9	1.26.9
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	stdlib@go1.25.8	1.26.9
quay.io/metallb/speaker :v0.16.1	16561e96531e	stdlib@go1.25.9	1.26.9

Open the chart page →

3,036

rancherrancher-stable

2.15.2

2 of 2 See more

rancher rancher-stable 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.2	0c3d8e570255	stdlib@go1.26.4	1.26.9
rancher/shell :v0.8.2	1eeed72d4eda	stdlib@go1.26.8	1.26.9

Open the chart page →

2,326

cloudnative-pgcloudnative-pg

0.29.1

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.1	923c267ec296	stdlib@go1.27.1	1.26.9

Open the chart page →

kyvernokyverno

3.9.1

1 of 7 See more

kyverno kyverno 3.9.1

1 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/readiness-checker :v1.19.1	31bb42ce7f5b	stdlib@go1.26.6	1.26.9

Open the chart page →

106

argo-workflowsargo

2.0.11

3 of 3 See more

argo-workflows argo 2.0.11

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.4	111ea7bba0ec	stdlib@go1.26.5	1.26.9
quay.io/argoproj/argocli :v4.1.4	c3c2bc505a7d	stdlib@go1.26.5	1.26.9
quay.io/argoproj/workflow-controller :v4.1.4	86a1acba574f	stdlib@go1.26.5	1.26.9

Open the chart page →

680

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9

Open the chart page →

10,159

oauth2-proxyoauth2-proxy

10.7.1

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.5	8498b0d0ef0a	stdlib@go1.26.8	1.26.9

Open the chart page →

nginxbitnami

25.2.1

1 of 1 See more

nginx bitnami 25.2.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/nginx :latest	b8d42f076789	stdlib@go1.26.8	1.26.9

Open the chart page →

wordpressbitnami

34.1.3

2 of 2 See more

wordpress bitnami 34.1.3

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/mariadb :latest	354e5aec2045	stdlib@go1.26.8	1.26.9
bitnami/wordpress :latest	845d250ecd73	stdlib@go1.26.8	1.26.9

Open the chart page →

544

sealed-secretsbitnami-labs

2.18.6

1 of 1 See more

sealed-secrets bitnami-labs 2.18.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.37.0	3fe0103896b8	stdlib@go1.26.3	1.26.9

Open the chart page →

547

kedakedacore

2.21.0

3 of 3 See more

keda kedacore 2.21.0

3 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.21.0	81fe6547ce8d	stdlib@go1.26.8	1.26.9
ghcr.io/kedacore/keda-admission-webhooks :2.21.0	e1969628cca6	stdlib@go1.26.8	1.26.9
ghcr.io/kedacore/keda-metrics-apiserver :2.21.0	255375037fe5	stdlib@go1.26.8	1.26.9

Open the chart page →

228

nginx-ingressnginx

2.7.3

1 of 1 See more

nginx-ingress nginx 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :5.6.3	13dafd0b7bf5	stdlib@go1.27.1	1.26.9

Open the chart page →

1,514

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.26.9

Open the chart page →

3,865

artifact-hubartifact-hub

1.23.0

6 of 7 See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	stdlib@go1.25.7	1.26.9
artifacthub/db-migrator :v1.23.0	28c13565ac5c	stdlib@go1.26.4	1.26.9
artifacthub/hub :v1.23.0	7d3a91c539dc	stdlib@go1.26.4	1.26.9
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
artifacthub/scanner :v1.23.0	2d8365601f0e	stdlib@go1.25.7	1.26.9
artifacthub/tracker :v1.23.0	5368d21a6e5c	stdlib@go1.24.4	1.26.9

Open the chart page →

14,174

kube-state-metricsprometheus-community

8.6.0

1 of 1 See more

kube-state-metrics prometheus-community 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

185

consulhashicorp

2.0.4

2 of 2 See more

consul hashicorp 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
hashicorp/consul :2.0.4	1c59f007df8e	stdlib@go1.26.7	1.26.9
hashicorp/consul-k8s-control-plane :2.0.4	9334d7f4bcf0	stdlib@go1.26.7	1.26.9

Open the chart page →

187

mariadbbitnami

28.1.1

1 of 1 See more

mariadb bitnami 28.1.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
bitnami/mariadb :latest	354e5aec2045	stdlib@go1.26.8	1.26.9

Open the chart page →

alloygrafana

1.13.1

2 of 2 See more

alloy grafana 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.20.1	2aa2099af76c	stdlib@go1.26.7	1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	stdlib@go1.26.8	1.26.9

Open the chart page →

692

prometheus-blackbox-exporterprometheus-community

11.20.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.20.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.29.0	9613f2884689	stdlib@go1.27.1	1.26.9

Open the chart page →

reloaderstakater

2.2.18

1 of 1 See more

reloader stakater 2.2.18

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/stakater/reloader :v1.4.22	def2480040ad	stdlib@go1.26.8	1.26.9

Open the chart page →

argo-rolloutsargo

2.43.6

1 of 1 See more

argo-rollouts argo 2.43.6

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	stdlib@go1.26.7	1.26.9

Open the chart page →

232

deschedulerdescheduler

0.37.0

1 of 1 See more

descheduler descheduler 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.37.0	88deef34ff5c	stdlib@go1.26.0	1.26.9

Open the chart page →

488

argo-cdargo-cd-oci

10.10.1

2 of 3 See more

argo-cd argo-cd-oci 10.10.1

2 of the 3 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	stdlib@go1.27.1	1.26.9
quay.io/argoproj/argocd :v3.5.4	49dff79439bb	stdlib@go1.25.3	1.26.9

Open the chart page →

2,402

jaegerjaegertracing

4.14.1

1 of 1 See more

jaeger jaegertracing 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.21.0	3d0ac795ff98	stdlib@go1.27.1	1.26.9

Open the chart page →

271

jupyterhubjupyterhub

4.4.2

2 of 7 See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-image-awaiter :4.4.2	c4df1176d152	stdlib@go1.23.12	1.26.9
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	stdlib@go1.23.10	1.26.9

Open the chart page →

9,827

mimir-distributedgrafana

6.2.1

3 of 5 See more

mimir-distributed grafana 6.2.1

3 of the 5 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.1	92838f113ba5	stdlib@go1.26.7	1.26.9
grafana/rollout-operator :v0.38.1	32fe838b79dd	stdlib@go1.26.5	1.26.9
pgsty/silo :RELEASE.2026-09-03T13-18-01Z	b616a0cf8cb2	stdlib@go1.27.1	1.26.9

Open the chart page →

2,665

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	stdlib@go1.26.7	1.26.9

Open the chart page →

396

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56857.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	stdlib@go1.26.5	1.26.9

Open the chart page →

1,111

Container images carrying it

6,411 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	stdlib@go1.25.0	1.26.9	3
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.26.9	3
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	stdlib@go1.25.5	1.26.9	3
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.26.9	3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	stdlib@go1.25.6	1.26.9	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	stdlib@go1.16.10	1.26.9	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	stdlib@go1.25.5	1.26.9	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	stdlib@go1.14.15	1.26.9	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.26.9	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	stdlib@go1.20.4	1.26.9	3
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	stdlib@go1.25.0	1.26.9	3
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	stdlib@go1.25.0	1.26.9	3
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	stdlib@go1.25.5	1.26.9	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	stdlib@go1.20.7	1.26.9	3
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	stdlib@go1.25.5	1.26.9	3
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.26.9	3
quay.io/devtron/nats-box :latest	48cdd3054b20	stdlib@go1.19.2	1.26.9	3
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.26.9	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.26.9	3
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.26.9	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	stdlib@go1.18.10	1.26.9	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	stdlib@go1.14.9	1.26.9	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	stdlib@go1.19.5	1.26.9	3
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.26.9	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	stdlib@go1.20.10	1.26.9	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	stdlib@go1.20.7	1.26.9	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	stdlib@go1.15.8	1.26.9	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	stdlib@go1.20.6	1.26.9	3
quay.io/prometheus/node-exporter :v1.8.0	8a57af80a4c7	stdlib@go1.22.2	1.26.9	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	stdlib@go1.16.7	1.26.9	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	stdlib@go1.26.8	1.26.9	3
quay.io/prometheus-operator/prometheus-operator :v0.90.1	52a6a92d915e	stdlib@go1.25.8	1.26.9	3
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	stdlib@go1.22.3	1.26.9	3
quay.io/prometheus-operator/prometheus-operator :v0.92.1	7d9247d23514	stdlib@go1.26.4	1.26.9	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.26.9	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	stdlib@go1.23.2	1.26.9	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	stdlib@go1.16.2	1.26.9	3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.26.9	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	stdlib@go1.17.3	1.26.9	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	stdlib@go1.19.7	1.26.9	3
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	stdlib@go1.22.6	1.26.9	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	stdlib@go1.23.1	1.26.9	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	stdlib@go1.22.1	1.26.9	3
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	stdlib@go1.25.5	1.26.9	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	stdlib@go1.16.8	1.26.9	3
quay.io/tigera/operator :v1.44.0	066c2e8d6745	stdlib@go1.27.1-X:boringcrypto	1.26.9	3
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.26.9	3
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.26.9	3
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.26.9	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	stdlib@go1.19.2	1.26.9	3