CVE-2026-56858

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,578; of 17,821 indexed, latest versions
Container images: 5,291; deployed by those charts
Fix available: 1 of 2; affected packages

Fix Javascript regexp context tracking in html/template

Carried by container images the latest versions of 4,578 of 17,821 indexed charts deploy, on 5,291 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+191 more	1.25.13	5,291

OSV records: DEBIAN-CVE-2026-56858 GO-2026-6091
Also known as: BIT-golang-2026-56858

Charts affected

4,578 by stars

Chart

Latest

Affected images

Radar Score

openebsopenebs

4.6.1

20 of 35 See more

openebs openebs 4.6.1

20 of the 35 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.13
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.25.13
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.13
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.13
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.13
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.13
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.13
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.13
openebs/zfs-driver :2.11.1	16f1a74bb249	stdlib@go1.26.2	1.25.13
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.25.13

Open the chart page →

24,368

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.13

Open the chart page →

945

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.13

Open the chart page →

1,434

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.25.13
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.25.13

Open the chart page →

2,892

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.13

Open the chart page →

252

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	stdlib@go1.26.5	1.25.13

Open the chart page →

362

x509-certificate-exporterenix

4.2.0

1 of 1 See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/enix/x509-certificate-exporter :4.2.0	afef14dc3862	stdlib@go1.26.5	1.25.13

Open the chart page →

vpafairwinds-stable

5.1.0

4 of 4 See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.25.13

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	stdlib@go1.18.8	1.25.13

Open the chart page →

2,060

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.25.13

Open the chart page →

3,187

prometheus-pushgatewayprometheus-community

3.8.0

1 of 1 See more

prometheus-pushgateway prometheus-community 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	stdlib@go1.26.3	1.25.13

Open the chart page →

124

trinotrino

1.42.2

1 of 1 See more

1,317

dagsterdagster

1.13.23

1 of 5 See more

dagster dagster 1.13.23

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.25.13

Open the chart page →

3,576

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :16	a3b7f434b2dc	stdlib@go1.24.6	1.25.13
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.25.13
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.25.13

Open the chart page →

13,634

keycloakcloudpirates-keycloak

0.21.39

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.39

2 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.13
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

4,551

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.25.13

Open the chart page →

2,835

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	stdlib@go1.25.7	1.25.13
1password/connect-sync :1.8.2	6297ca6136c0	stdlib@go1.25.7	1.25.13

Open the chart page →

2,616

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	stdlib@go1.25.5	1.25.13

Open the chart page →

2,016

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13

Open the chart page →

2,614

openfaasopenfaas

15.0.13

4 of 6 See more

openfaas openfaas 15.0.13

4 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.13
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	stdlib@go1.26.3	1.25.13
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.13
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.13

Open the chart page →

3,581

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	stdlib@go1.26.5	1.25.13

Open the chart page →

flux2fluxcd-community

2.19.1

1 of 7 See more

flux2 fluxcd-community 2.19.1

1 of the 7 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
fluxcd/flux-cli :v2.9.5	704d55295355	stdlib@go1.26.2	1.25.13

Open the chart page →

2,467

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	stdlib@go1.22.3	1.25.13

Open the chart page →

569

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.25.13

Open the chart page →

5,578

netboxnetbox

8.3.83

1 See more

—

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

1,699

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	stdlib@go1.26.5	1.25.13
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	stdlib@go1.23.0	1.25.13

Open the chart page →

1,061

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.25.13

Open the chart page →

1,385

snapshot-controllerpiraeus-charts

5.3.0

1 of 1 See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.13

Open the chart page →

242

rocketchatrocketchat-server

7.0.2

6 of 12 See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.13
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.25.13
library/nats :2.12-alpine	b270f5e24283	stdlib@go1.25.12	1.25.13
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.25.13
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.13
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.25.13

Open the chart page →

12,307

zammadzammad

19.0.0

1 of 5 See more

zammad zammad 19.0.0

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.13

Open the chart page →

6,649

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.25.13
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.25.13

Open the chart page →

2,944

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.25.13

Open the chart page →

2,109

ceph-csi-cephfsceph-csi

3.17.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.13

Open the chart page →

4,144

ceph-csi-rbdceph-csi

3.17.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.13

Open the chart page →

4,144

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.13
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	stdlib@go1.25.11	1.25.13
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	stdlib@go1.25.11	1.25.13
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	stdlib@go1.25.11	1.25.13

Open the chart page →

6,694

csi-driver-nfscsi-driver-nfs

4.13.4

6 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	stdlib@go1.26.4	1.25.13

Open the chart page →

3,419

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	stdlib@go1.22.1	1.25.13

Open the chart page →

1,934

rabbitmqcloudpirates-rabbitmq

0.21.28

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.28

1 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	de62d9901fb7	stdlib@go1.22.2	1.25.13

Open the chart page →

824

codercoder-v2

2.37.2

1 of 1 See more

coder coder-v2 2.37.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.2	6ea19b670111	stdlib@go1.26.5	1.25.13

Open the chart page →

212

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.13

Open the chart page →

2,470

milvusmilvus

4.0.31

3 of 5 See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	stdlib@go1.18.2	1.25.13
milvusdb/milvus :v2.2.13	a3a55e1c1497	stdlib@go1.18.3	1.25.13
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	stdlib@go1.16.15	1.25.13

Open the chart page →

171,921

cockroachdbcockroachdb

22.0.3

1 of 3 See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	stdlib@go1.23.12	1.25.13

Open the chart page →

770

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	stdlib@go1.22.11	1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13

Open the chart page →

3,561

mesherymeshery

1.0.70

1 of 1 See more

meshery meshery 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	stdlib@go1.26.4	1.25.13

Open the chart page →

1,503

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	stdlib@go1.26.5	1.25.13

Open the chart page →

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.25.5	1.25.13

Open the chart page →

2,419

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	stdlib@go1.26.5	1.25.13

Open the chart page →

125

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.13

Open the chart page →

10,817

local-path-provisionercontaineroo

0.0.38

1 of 1 See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.37	e757967a5ec3	stdlib@go1.26.5	1.25.13

Open the chart page →

Container images carrying it

5,291 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	stdlib@go1.19.13	1.25.13	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	stdlib@go1.21.9	1.25.13	1
quay.io/redhat-developer/servicebinding-operator	16286ac84ddd	stdlib@go1.20.6	1.25.13	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	stdlib@go1.23.9	1.25.13	1
quay.io/rhdh/rhdh-hub-rhel9 :latest	0b26358f5793	stdlib@go1.26.4	1.25.13	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	stdlib@go1.16	1.25.13	1
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	stdlib@go1.16.7	1.25.13	1
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	stdlib@go1.18	1.25.13	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	stdlib@go1.21.0	1.25.13	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	stdlib@go1.18.1	1.25.13	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	stdlib@go1.18.1	1.25.13	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	stdlib@go1.18.1	1.25.13	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	stdlib@go1.18.1	1.25.13	1
quay.io/spotahome/redis-operator :latest	8c772955184e	stdlib@go1.20.7	1.25.13	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	stdlib@go1.25.4	1.25.13	1
quay.io/superq/smokeping-prober :v0.12.0	2524b895bdae	stdlib@go1.26.4	1.25.13	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	stdlib@go1.20.5	1.25.13	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	stdlib@go1.25.3	1.25.13	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	stdlib@go1.15	1.25.13	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	stdlib@go1.21.13	1.25.13	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	stdlib@go1.15.2	1.25.13	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.25.13	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	stdlib@go1.13.15	1.25.13	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	stdlib@go1.13.8	1.25.13	1
quay.io/utilitywarehouse/kube-summary-exporter :v0.4.8	f1b148782af1	stdlib@go1.26.4	1.25.13	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.25.13	1
quay.io/wi_stefan/dsba-db-migrations :0.0.12	5b986cd14a08	stdlib@go1.18.9	1.25.13	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	stdlib@go1.23.10	1.25.13	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	stdlib@go1.22.7	1.25.13	1
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/kafka-operator :0.4.0	0a0b4c39c1ba	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/listener-csi-driver :0.4.0	b69bed123b02	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/listener-operator :0.4.0	68b92dae8d75	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/nifi-operator :0.4.0	bb4e26ff5e2f	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/spark-k8s-operator :0.4.0	d3f2b10c4a6d	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/superset-operator :0.4.0	102e66e32218	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/trino-operator :0.4.0	4f516757aee3	stdlib@go1.25.8	1.25.13	1
quay.io/zncdatadev/zookeeper-operator :0.4.0	b4f33d89ac45	stdlib@go1.25.8	1.25.13	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	stdlib@go1.19.1	1.25.13	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	stdlib@go1.16.4	1.25.13	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	stdlib@go1.18.1	1.25.13	1
registry.gitlab.com/av1o/go-prism :4fdcff7d3870c28e5f024b6947cb552d4b956ee2	7a6f84b81c4e	stdlib@go1.16.2	1.25.13	1
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	stdlib@go1.16	1.25.13	1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	stdlib@go1.19.10	1.25.13	1