CVE-2026-56858

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,609; of 17,821 indexed, latest versions
Container images: 5,337; deployed by those charts
Fix available: 1 of 2; affected packages

Fix Javascript regexp context tracking in html/template

Carried by container images the latest versions of 4,609 of 17,821 indexed charts deploy, on 5,337 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,337

OSV records: DEBIAN-CVE-2026-56858 GO-2026-6091
Also known as: BIT-golang-2026-56858

Charts affected

4,609 by stars

Chart

Latest

Affected images

Radar Score

openebsopenebs

4.6.1

20 of 35 See more

openebs openebs 4.6.1

20 of the 35 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.13
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.25.13
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.13
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.13
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.13
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.13
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.13
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.13
openebs/zfs-driver :2.11.1	16f1a74bb249	stdlib@go1.26.2	1.25.13
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.25.13

Open the chart page →

24,290

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.13

Open the chart page →

945

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.13

Open the chart page →

1,435

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.25.13
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.25.13

Open the chart page →

2,892

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.13

Open the chart page →

252

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	stdlib@go1.26.5	1.25.13

Open the chart page →

362

x509-certificate-exporterenix

4.2.0

1 of 1 See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/enix/x509-certificate-exporter :4.2.0	afef14dc3862	stdlib@go1.26.5	1.25.13

Open the chart page →

vpafairwinds-stable

5.1.0

4 of 4 See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.25.13

Open the chart page →

1,234

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	stdlib@go1.18.8	1.25.13

Open the chart page →

2,060

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.25.13

Open the chart page →

3,107

prometheus-pushgatewayprometheus-community

3.8.0

1 of 1 See more

prometheus-pushgateway prometheus-community 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	stdlib@go1.26.3	1.25.13

Open the chart page →

124

trinotrino

1.42.2

1 of 1 See more

1,317

dagsterdagster

1.13.23

1 of 5 See more

dagster dagster 1.13.23

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.25.13

Open the chart page →

3,578

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :16	a3b7f434b2dc	stdlib@go1.24.6	1.25.13
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.25.13
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.25.13

Open the chart page →

13,636

keycloakcloudpirates-keycloak

0.21.39

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.39

2 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.13
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

4,471

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.25.13

Open the chart page →

2,835

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	stdlib@go1.25.7	1.25.13
1password/connect-sync :1.8.2	6297ca6136c0	stdlib@go1.25.7	1.25.13

Open the chart page →

2,452

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	stdlib@go1.25.5	1.25.13

Open the chart page →

2,017

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13

Open the chart page →

2,614

openfaasopenfaas

15.0.13

4 of 6 See more

openfaas openfaas 15.0.13

4 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.13
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	stdlib@go1.26.3	1.25.13
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.13
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.13

Open the chart page →

3,581

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	stdlib@go1.26.5	1.25.13

Open the chart page →

flux2fluxcd-community

2.19.1

1 of 7 See more

flux2 fluxcd-community 2.19.1

1 of the 7 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
fluxcd/flux-cli :v2.9.5	704d55295355	stdlib@go1.26.2	1.25.13

Open the chart page →

2,467

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	stdlib@go1.22.3	1.25.13

Open the chart page →

569

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.25.13

Open the chart page →

5,579

netboxnetbox

8.3.83

1 of 5 See more

netbox netbox 8.3.83

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.36.2	06c7a7a97727	stdlib@go1.26.4	1.25.13

Open the chart page →

1,035

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

1,618

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	stdlib@go1.26.5	1.25.13
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	stdlib@go1.23.0	1.25.13

Open the chart page →

1,061

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.25.13

Open the chart page →

1,385

snapshot-controllerpiraeus-charts

5.3.0

1 of 1 See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.13

Open the chart page →

242

rocketchatrocketchat-server

7.0.2

6 of 12 See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.13
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.25.13
library/nats :2.12-alpine	b270f5e24283	stdlib@go1.25.12	1.25.13
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.25.13
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.13
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.25.13

Open the chart page →

12,307

zammadzammad

19.0.0

1 of 5 See more

zammad zammad 19.0.0

1 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.13

Open the chart page →

6,450

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.25.13
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.25.13

Open the chart page →

2,945

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.25.13

Open the chart page →

2,110

ceph-csi-cephfsceph-csi

3.17.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.13

Open the chart page →

4,145

ceph-csi-rbdceph-csi

3.17.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.13

Open the chart page →

4,145

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.13
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	stdlib@go1.25.11	1.25.13
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	stdlib@go1.25.11	1.25.13
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	stdlib@go1.25.11	1.25.13

Open the chart page →

6,545

csi-driver-nfscsi-driver-nfs

4.13.4

6 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

6 of the 6 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.25.13
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	stdlib@go1.26.4	1.25.13

Open the chart page →

3,350

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	stdlib@go1.22.1	1.25.13

Open the chart page →

1,934

rabbitmqcloudpirates-rabbitmq

0.21.28

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.28

1 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	de62d9901fb7	stdlib@go1.22.2	1.25.13

Open the chart page →

825

codercoder-v2

2.37.2

1 of 1 See more

coder coder-v2 2.37.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.2	6ea19b670111	stdlib@go1.26.5	1.25.13

Open the chart page →

212

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.13

Open the chart page →

2,470

milvusmilvus

4.0.31

3 of 5 See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	stdlib@go1.18.2	1.25.13
milvusdb/milvus :v2.2.13	a3a55e1c1497	stdlib@go1.18.3	1.25.13
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	stdlib@go1.16.15	1.25.13

Open the chart page →

171,935

cockroachdbcockroachdb

22.0.3

1 of 3 See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	stdlib@go1.23.12	1.25.13

Open the chart page →

770

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	stdlib@go1.22.11	1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13

Open the chart page →

3,561

mesherymeshery

1.0.70

1 of 1 See more

meshery meshery 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	stdlib@go1.26.4	1.25.13

Open the chart page →

1,504

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	stdlib@go1.26.5	1.25.13

Open the chart page →

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.25.5	1.25.13

Open the chart page →

2,419

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	stdlib@go1.26.5	1.25.13

Open the chart page →

125

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.13

Open the chart page →

10,750

local-path-provisionercontaineroo

0.0.38

1 of 1 See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-56858.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.37	e757967a5ec3	stdlib@go1.26.5	1.25.13

Open the chart page →

Container images carrying it

5,337 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/csi-attacher :v4.5.1	9dcd469f02bb	stdlib@go1.21.5	1.25.13	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	stdlib@go1.24.6	1.25.13	1
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.1	2cddcc716c19	stdlib@go1.20.5	1.25.13	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	stdlib@go1.15	1.25.13	1
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	stdlib@go1.22.5	1.25.13	1
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.13.1	2a0b297cc7c4	stdlib@go1.23.1	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.10.1	4ecda2818f6d	stdlib@go1.21.5	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	stdlib@go1.16.2	1.25.13	1
registry.k8s.io/sig-storage/csi-resizer :v1.12.0	ab774734705a	stdlib@go1.22.5	1.25.13	1
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.0.2	5f051159c95f	stdlib@go1.22.5	1.25.13	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	stdlib@go1.23.6	1.25.13	1
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	stdlib@go1.16.2	1.25.13	1
registry.k8s.io/sig-storage/csi-snapshotter :v5.0.1	89e900a160a9	stdlib@go1.17.3	1.25.13	1
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	stdlib@go1.18	1.25.13	1
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/livenessprobe :v2.11.0	82adbebdf5d5	stdlib@go1.20.5	1.25.13	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	stdlib@go1.23.4	1.25.13	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	stdlib@go1.25.5	1.25.13	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	stdlib@go1.26.4	1.25.13	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	stdlib@go1.23.6	1.25.13	1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	stdlib@go1.15	1.25.13	1
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	stdlib@go1.24.11	1.25.13	1
registry.k8s.io/sig-storage/snapshot-controller :v8.2.1	472fa35a89da	stdlib@go1.23.6	1.25.13	1
registry.k8s.io/sig-storage/snapshot-controller :v4.2.1	95587f8777d7	stdlib@go1.16.2	1.25.13	1
registry.k8s.io/sig-storage/snapshot-controller :v6.2.1	98bab4eaf23c	stdlib@go1.19	1.25.13	1
registry.k8s.io/sig-storage/snapshot-controller :v6.3.1	ce6ca3c0e30b	stdlib@go1.20.5	1.25.13	1
registry.k8s.io/sig-storage/volume-data-source-validator :v1.0.0	d35884236461	stdlib@go1.17.3	1.25.13	1