CVE-2026-56860

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,497; of 17,803 indexed, latest versions
Container images: 5,243; deployed by those charts
Fix available: 1 of 2; affected packages

Avoid quadratic complexity in resolvePath in net/url

Carried by container images the latest versions of 4,497 of 17,803 indexed charts deploy, on 5,243 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,243

OSV records: DEBIAN-CVE-2026-56860 GO-2026-6218
Also known as: BIT-golang-2026-56860

Charts affected

4,497 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

2 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.26.4	1.25.13
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.25.13

Open the chart page →

682

argo-cdargo

10.9.2

2 of 3 See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.13
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.26.4	1.25.13

Open the chart page →

3,032

ingress-nginxingress-nginx

4.15.1

2 of 2 See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	stdlib@go1.26.1	1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	stdlib@go1.26.1	1.25.13

Open the chart page →

1,541

prometheusprometheus-community

29.30.1

2 of 6 See more

prometheus prometheus-community 29.30.1

2 of the 6 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.25.13
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	stdlib@go1.26.3	1.25.13

Open the chart page →

466

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	stdlib@go1.26.4	1.25.13

Open the chart page →

171

vaulthashicorp

0.34.1

2 of 2 See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	stdlib@go1.26.5	1.25.13
hashicorp/vault-k8s :1.7.6	55e27b080c9b	stdlib@go1.26.5	1.25.13

Open the chart page →

552

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	stdlib@go1.26.4	1.25.13
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	stdlib@go1.26.4	1.25.13
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	stdlib@go1.26.4	1.25.13
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	stdlib@go1.26.4	1.25.13
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	stdlib@go1.26.4	1.25.13

Open the chart page →

1,738

jenkinsjenkinsci

5.9.63

1 of 2 See more

jenkins jenkinsci 5.9.63

1 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	stdlib@go1.25.3	1.25.13

Open the chart page →

2,557

longhornlonghorn

1.12.1

3 of 3 See more

longhorn longhorn 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	stdlib@go1.26.5	1.25.13
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	stdlib@go1.26.5	1.25.13
longhornio/longhorn-ui :v1.12.1	03a3ce6673df	stdlib@go1.25.12	1.25.13

Open the chart page →

623

gitlab-runnergitlab

0.93.0

1 of 1 See more

gitlab-runner gitlab 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	stdlib@go1.26.5	1.25.13

Open the chart page →

280

ciliumcilium

1.20.2

1 of 3 See more

cilium cilium 1.20.2

1 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.2	2939231d0d3e	stdlib@go1.26.5	1.25.13

Open the chart page →

1,002

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	stdlib@go1.26.3	1.25.13

Open the chart page →

3,244

mongodbbitnami

19.2.1

1 of 1 See more

mongodb bitnami 19.2.1

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	e46cffb66274	stdlib@go1.26.5	1.25.13

Open the chart page →

velerovmware-tanzu

12.2.0

1 of 1 See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	stdlib@go1.25.11	1.25.13

Open the chart page →

1,091

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	stdlib@go1.25.9	1.25.13
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	stdlib@go1.25.8	1.25.13
quay.io/metallb/speaker :v0.16.1	16561e96531e	stdlib@go1.25.9	1.25.13

Open the chart page →

2,173

cloudnative-pgcloudnative-pg

0.29.0

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	stdlib@go1.26.4	1.25.13

Open the chart page →

124

argo-workflowsargo

2.0.6

3 of 3 See more

argo-workflows argo 2.0.6

3 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.3	94a031823f2a	stdlib@go1.26.5	1.25.13
quay.io/argoproj/argocli :v4.1.3	fe3b85fcfaf8	stdlib@go1.26.5	1.25.13
quay.io/argoproj/workflow-controller :v4.1.3	3f8e77840d1f	stdlib@go1.26.5	1.25.13

Open the chart page →

279

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	stdlib@go1.26.5	1.25.13
rancher/shell :v0.8.1	f293af9c635f	stdlib@go1.25.12	1.25.13

Open the chart page →

1,528

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.13
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.13

Open the chart page →

8,972

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	stdlib@go1.26.4	1.25.13

Open the chart page →

154

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	stdlib@go1.26.2	1.25.13
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	stdlib@go1.26.2	1.25.13
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	stdlib@go1.26.2	1.25.13

Open the chart page →

1,133

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.25.13

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

6 of 7 See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	stdlib@go1.25.7	1.25.13
artifacthub/db-migrator :v1.23.0	28c13565ac5c	stdlib@go1.26.4	1.25.13
artifacthub/hub :v1.23.0	7d3a91c539dc	stdlib@go1.26.4	1.25.13
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.13
artifacthub/scanner :v1.23.0	2d8365601f0e	stdlib@go1.25.7	1.25.13
artifacthub/tracker :v1.23.0	5368d21a6e5c	stdlib@go1.24.4	1.25.13

Open the chart page →

11,020

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	stdlib@go1.25.9	1.25.13

Open the chart page →

1,183

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	stdlib@go1.25.5	1.25.13

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	stdlib@go1.26.0	1.25.13

Open the chart page →

583

argo-cdargo-cd-oci

10.9.2

2 of 3 See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.13
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.26.4	1.25.13

Open the chart page →

3,032

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	stdlib@go1.26.5	1.25.13

Open the chart page →

320

jupyterhubjupyterhub

4.4.2

2 of 7 See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-image-awaiter :4.4.2	c4df1176d152	stdlib@go1.23.12	1.25.13
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	stdlib@go1.23.10	1.25.13

Open the chart page →

8,295

mimir-distributedgrafana

6.2.0

4 of 6 See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	stdlib@go1.26.5	1.25.13
grafana/rollout-operator :v0.38.1	32fe838b79dd	stdlib@go1.26.5	1.25.13
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13

Open the chart page →

4,696

natsnats

2.14.6

2 of 3 See more

nats nats 2.14.6

2 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	stdlib@go1.26.3	1.25.13
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.25.13

Open the chart page →

2,308

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	stdlib@go1.26.5	1.25.13

Open the chart page →

733

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	stdlib@go1.25.0	1.25.13

Open the chart page →

1,775

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.13

Open the chart page →

30,645

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.25.13

Open the chart page →

11,436

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	stdlib@go1.25.10	1.25.13
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	stdlib@go1.25.7	1.25.13
falcosecurity/falcoctl :0.13.0	0eeb79adc580	stdlib@go1.26.2	1.25.13

Open the chart page →

5,523

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	stdlib@go1.16.2	1.25.13

Open the chart page →

2,315

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :3.5	979f12864a13	stdlib@go1.25.12	1.25.13

Open the chart page →

1,210

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	stdlib@go1.24.1	1.25.13

Open the chart page →

1,513

prometheus-node-exporterprometheus-community

4.57.0

1 of 1 See more

prometheus-node-exporter prometheus-community 4.57.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.25.13

Open the chart page →

rook-cephrook

1.20.7

2 of 2 See more

rook-ceph rook 1.20.7

2 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.25.13
quay.io/cephcsi/ceph-csi-operator :v1.0.4	c62933fd4083	stdlib@go1.25.11	1.25.13

Open the chart page →

1,472

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	stdlib@go1.25.6	1.25.13

Open the chart page →

1,093

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.26.4	1.25.13

Open the chart page →

449

victoria-metrics-k8s-stackvictoriametrics

0.92.1

5 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

5 of the 7 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	stdlib@go1.26.3	1.25.13
victoriametrics/operator :v0.74.1	7310c4a80b94	stdlib@go1.26.5	1.25.13
ghcr.io/victoriametrics/sync-job :v0.0.17	b6f233532a85	stdlib@go1.26.4-X:jsonv2	1.25.13
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	stdlib@go1.26.1	1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.25.13

Open the chart page →

1,953

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.25.13

Open the chart page →

1,445

kuredkured

6.1.0

1 of 1 See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
ghcr.io/kubereboot/kured :1.23.0	8dfd3c2e8893	stdlib@go1.26.4	1.25.13

Open the chart page →

231

openebsopenebs

4.6.1

20 of 35 See more

openebs openebs 4.6.1

20 of the 35 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.13
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.25.13
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.13
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.13
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.13
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.13
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.13
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.13
openebs/zfs-driver :2.11.1	16f1a74bb249	stdlib@go1.26.2	1.25.13
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.13
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.13
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.25.13

Open the chart page →

24,469

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.13

Open the chart page →

945

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.13

Open the chart page →

1,433

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56860.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.25.13
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.25.13

Open the chart page →

2,890

Container images carrying it

5,243 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	stdlib@go1.24.2	1.25.13	1
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.25.13	1
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	stdlib@go1.19.2	1.25.13	1
ghcr.io/caas-team/gokubedownscaler :1.3.4	cea3dd2f1312	stdlib@go1.25.10	1.25.13	1
ghcr.io/cableship/argocd-source-tracker :0.0.6	ff7dd45aa774	stdlib@go1.24.2	1.25.13	1
ghcr.io/cableship/chart-sentinel :0.1.0	a037f1042b28	stdlib@go1.24.2	1.25.13	1
ghcr.io/camilorivera/cert-manager-acm-sync :0.7.4	89a83796a550	stdlib@go1.26.4	1.25.13	1
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	stdlib@go1.23.5	1.25.13	1
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	stdlib@go1.21.3	1.25.13	1
ghcr.io/caninehq/canine :latest	a058034ca006	stdlib@go1.22.7	1.25.13	1
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	stdlib@go1.25.10	1.25.13	1
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	stdlib@go1.23.6	1.25.13	1
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	stdlib@go1.24.6	1.25.13	1
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	stdlib@go1.23.0	1.25.13	1
ghcr.io/cerbos/cerbos :0.55.0	4b9d3b58c4f1	stdlib@go1.26.5	1.25.13	1
ghcr.io/cerbos/cerbos :0.51.0	8d35a64e4a99	stdlib@go1.25.6	1.25.13	1
ghcr.io/cfgate/cfgate :0.2.0-alpha.5	c7025330acec	stdlib@go1.26.3	1.25.13	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	stdlib@go1.22.10	1.25.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	stdlib@go1.25.11	1.25.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	stdlib@go1.25.11	1.25.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	stdlib@go1.16.2	1.25.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	stdlib@go1.18	1.25.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	stdlib@go1.24.4	1.25.13	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	stdlib@go1.20.8	1.25.13	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	stdlib@go1.18	1.25.13	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	stdlib@go1.25.11	1.25.13	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	stdlib@go1.24.4	1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.0	091b906a0b13	stdlib@go1.24.4	1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	stdlib@go1.18	1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	stdlib@go1.20.8	1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	stdlib@go1.25.11	1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.3	bdb31f3121a2	stdlib@go1.25.11	1.25.13	1
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.25.13	1
ghcr.io/chilledornaments/redirector :latest	94d48447d967	stdlib@go1.26.4	1.25.13	1
ghcr.io/chmouel/gosmee :v0.32.0	60b8db1f68cc	stdlib@go1.26.5	1.25.13	1
ghcr.io/chronicleprotocol/challenger-go :0.1.2	c8d5a3c0e966	stdlib@go1.22.12	1.25.13	1
ghcr.io/chronicleprotocol/ghost :0.78.5	951d71162065	stdlib@go1.26.5	1.25.13	1
ghcr.io/chronicleprotocol/gofer :0.61	3915d2e41e04	stdlib@go1.24.6	1.25.13	1
ghcr.io/chronicleprotocol/oracles-updates-exporter :0.0.4	992d0e793af6	stdlib@go1.19.13	1.25.13	1
ghcr.io/chronicleprotocol/spectre :0.68.3	4e872bc016e8	stdlib@go1.25.5	1.25.13	1
ghcr.io/chronicleprotocol/spire :0.68.3	79df4fb20322	stdlib@go1.25.5	1.25.13	1
ghcr.io/chrxmvtik/gitlab-mr-conform :0.5.2	b2eb79fc99cb	stdlib@go1.25.9	1.25.13	1
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	stdlib@go1.18	1.25.13	1
ghcr.io/ckotzbauer/access-manager	dd584fcda0ff	stdlib@go1.22.1	1.25.13	1
ghcr.io/ckotzbauer/chekr	f299baf467b5	stdlib@go1.17.3	1.25.13	1
ghcr.io/ckotzbauer/vulnerability-operator :0.28.16	7008df32715c	stdlib@go1.26.4	1.25.13	1
ghcr.io/clastix/kamaji-console :v0.2.1	29ecf8d4fa65	stdlib@go1.23.7	1.25.13	1
ghcr.io/cleanuparr/cleanuparr :2.10.6	8136c3beda7a	stdlib@go1.22.2	1.25.13	1
ghcr.io/clickhouse/clickhouse-operator :v0.0.7	d51ca53f0967	stdlib@go1.26.5	1.25.13	1
ghcr.io/cloudeteer/m365-exporter :3.9.3	a13a11fe9558	stdlib@go1.26.5	1.25.13	1