StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,298
of 17,966 indexed, latest versions
Container images
1,354
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,298 of 17,966 indexed charts deploy, on 1,354 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,354
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,298 by stars
ChartLatestAffected imagesRadar Score
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

4,182
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
github.com/klauspost/compress@v1.17.5
1.18.7

Open the chart page →

5,826
kubestellar-consolekubestellar-consoleVerified publisher0.3.421 of 2See more

kubestellar-console kubestellar-console 0.3.42

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

4,478
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

5,156
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.46 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

6 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/kubiyabot/kubiya-operator:runner_v26bf945565865
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/klauspost/compress@v1.18.0
1.18.7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

21,336
lethe-stackkuossOfficialVerified publisher0.2.31 of 3See more

lethe-stack kuoss 0.2.3

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/kuoss/eventrouter:v0.4.1300b48beff3ae
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,776
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

68,623
dynatrace-operatorkvalitetsitVerified publisher1.3.01 of 1See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,346
kitarguskvalitetsitVerified publisher0.0.0-2026-03-09-091234-10013c41 of 1See more

kitargus kvalitetsit 0.0.0-2026-03-09-091234-10013c4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

983
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,566
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,323
everest-lakefs-csi-driverlakefsVerified publisher1.3.01 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

900
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,367
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

1,392
speedtestlbenicio-communityVerified publisher0.1.01 of 1See more

speedtest lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

326
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

36,169
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
github.com/klauspost/compress@v1.17.5
1.18.7

Open the chart page →

1,143
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.34 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

3,475
linkerd-dashboardlinkerd-dashboardOfficial0.11.21 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

945
litefunctionslitefunctions0.1.14 of 19See more

litefunctions litefunctions 0.1.1

4 of the 19 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ashupednekar535/litefunctions-ingestor:latestd605f539da90
github.com/klauspost/compress@v1.18.0
1.18.7
library/docker:28.3.3-dinda56b3bdde893
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

14,823
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

11,286
livekit-serverlivekit-server1.9.01 of 1See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.9.03602a85840d5
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,597
llmarinerllmariner1.53.16 of 21See more

llmariner llmariner 1.53.1

6 of the 21 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
github.com/klauspost/compress@v1.17.11
1.18.7
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
github.com/klauspost/compress@v1.17.11
1.18.7
public.ecr.aws/cloudnatix/llmariner/inference-manager-server:1.45.090b890f800ab
github.com/klauspost/compress@v1.17.11
1.18.7
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
github.com/klauspost/compress@v1.17.11
1.18.7
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
github.com/klauspost/compress@v1.17.11
1.18.7
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.7.0f1f6b884b325
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

12,753
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

2,122
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,232
picoclawloafoe0.1.11 of 2See more

picoclaw loafoe 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loafoe/picoclaw:v0.0.1942e1b6862913
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

479
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

2,152
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,091
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

7,753
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

36,169
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

3,267
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

3,267
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,349
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,684
nightingalelogic3579Verified publisher0.3.13 of 6See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
github.com/klauspost/compress@v1.18.5
1.18.7
flashcatcloud/nightingale:8.5.1421acb36181b
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

9,593
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

17,394
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

792
cloudflare-tunnel-remotelovemew67Verified publisher0.1.21 of 1See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

452
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.00d23a6fd60c4
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,312
lumenvox-external-serviceslumenvox8.0.01 of 3See more

lumenvox-external-services lumenvox 8.0.0

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:8.2.12e0ce8c35124d
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

6,904
gitea-runnerm0sh1-helm-charts0.2.32 of 2See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.08368754bb612
github.com/klauspost/compress@v1.17.9
1.18.7
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,302
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

10,139
magistralamagistrala-devopsVerified publisher0.16.29 of 42See more

magistrala magistrala-devops 0.16.2

9 of the 42 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7
library/nats:2.10.17-alpineb7752304692b
github.com/klauspost/compress@v1.17.9
1.18.7
natsio/nats-box:0.14.31cc420186664
github.com/klauspost/compress@v1.17.7
1.18.7
prom/alertmanager:v0.28.0d5155cfac40a
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/prometheus/pushgateway:v1.11.099392035ae99
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

25,277
consumermarthydavidVerified publisher0.1.61 of 1See more

consumer marthydavid 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/marthydavid/kafka-keda-golang-consumer:0.0.4e07644865dd1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

829
producermarthydavidVerified publisher0.1.61 of 1See more

producer marthydavid 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/marthydavid/kafka-keda-golang-producer:0.0.454b242c7bf2b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

829
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

4,260
mayastormayastorVerified publisher2.12.112 of 31See more

mayastor mayastor 2.12.1

12 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
library/nats:2.9.17-alpine1a7b320b2942
github.com/klauspost/compress@v1.16.5
1.18.7
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/klauspost/compress@v1.16.5
1.18.7
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,344
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

6,120
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

442
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

427

Container images carrying it

1,354 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
johnblack77/clustereye-api:latest16c25fd2128c
github.com/klauspost/compress@v1.18.3
1.18.7
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/klauspost/compress@v1.16.3
1.18.7
1
komodorio/helm-dashboard:2.1.3258a9044e658
github.com/klauspost/compress@v1.18.0
1.18.7
1
kubearmor/kubearmor:stablea08141311045
github.com/klauspost/compress@v1.18.6
1.18.7
1
kubearmor/sidekick:latestb7b92a447f15
github.com/klauspost/compress@v1.16.5
1.18.7
1
kubebb/core:lateste366c34a9b8d
github.com/klauspost/compress@v1.16.7
1.18.7
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/klauspost/compress@v1.16.5
1.18.7
1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
github.com/klauspost/compress@v1.16.5
1.18.7
1
kubesec/kubesec:latest025a365d9f18
github.com/klauspost/compress@v1.17.11
1.18.7
1
kubeshark/hub:v53.46d3f22525a0e
github.com/klauspost/compress@v1.18.0
1.18.7
1
kubeshark/worker:v53.4b226490dfa11
github.com/klauspost/compress@v1.18.6
1.18.7
1
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
github.com/klauspost/compress@v1.17.8
1.18.7
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
github.com/klauspost/compress@v1.18.0
1.18.7
1
kubeshop/testkube-logs-server:latest094186b19698
github.com/klauspost/compress@v1.17.11
1.18.7
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
github.com/klauspost/compress@v1.18.0
1.18.7
1
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
github.com/klauspost/compress@v1.17.11
1.18.7
1
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/klauspost/compress@v1.17.3
1.18.7
1
kubeskoop/controller:v1.0.0-rc.137a3eb73325d
github.com/klauspost/compress@v1.16.7
1.18.7
1
kubesphere/ks-extensions-museum:latest29681958f220
github.com/klauspost/compress@v1.16.0
1.18.7
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/klauspost/compress@v1.16.0
1.18.7
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/klauspost/compress@v1.17.11
1.18.7
1
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
github.com/klauspost/compress@v1.18.2
1.18.7
1
kvalitetsit/kitcaddy:1.5.110e66907ea266
github.com/klauspost/compress@v1.18.6
1.18.7
1
l7mp/stunner-auth-server:1.1.02f8114477ba6
github.com/klauspost/compress@v1.17.11
1.18.7
1
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
github.com/klauspost/compress@v1.17.11
1.18.7
1
langgenius/dify-ee-audit:3.9.8-ubi9e99aed151fc5
github.com/klauspost/compress@v1.18.6
1.18.7
1
langgenius/dify-ee-collector:3.9.8-ubi9a9b91fd62c94
github.com/klauspost/compress@v1.18.6
1.18.7
1
langgenius/dify-ee-gateway:3.9.8-ubi99e314c29a61f
github.com/klauspost/compress@v1.18.6
1.18.7
1
langgenius/dify-ee-plugin-daemon-serverless:3.9.8-ubi9d2b8df196d08
github.com/klauspost/compress@v1.18.0
1.18.7
1
langgenius/dify-ee-plugin-manager:3.9.8-ubi9207b343013a0
github.com/klauspost/compress@v1.18.6
1.18.7
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
github.com/klauspost/compress@v1.18.0
1.18.7
1
layer5/meshery:stable-latest78a8be21bef3
github.com/klauspost/compress@v1.18.0
1.18.7
1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/klauspost/compress@v1.17.0
1.18.7
1
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/klauspost/compress@v1.17.0
1.18.7
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/klauspost/compress@v1.17.0
1.18.7
1
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7
1
library/caddy:2.11.2-alpine834468128c76
github.com/klauspost/compress@v1.18.4
1.18.7
1
library/caddy:2.9-alpineb4e3952384eb
github.com/klauspost/compress@v1.17.11
1.18.7
1
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/klauspost/compress@v1.18.4
1.18.7
1
library/docker:24.0.2-dind1d148deae16a
github.com/klauspost/compress@v1.16.3
1.18.7
1
library/docker:dind-rootless1f029db43a32
github.com/klauspost/compress@v1.18.5
1.18.7
1
library/docker:27.0.1-dind2416984b43dd
github.com/klauspost/compress@v1.17.4
1.18.7
1
library/docker:28.5.2-dind2a232a42256f
github.com/klauspost/compress@v1.18.0
1.18.7
1
library/docker:29.8.1-dind76cd6bbc3ab6
github.com/klauspost/compress@v1.18.5
1.18.7
1
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
1
library/docker:28.3.3-dinda56b3bdde893
github.com/klauspost/compress@v1.18.0
1.18.7
1
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7
1
library/docker:23.0.6-dindafa5d5134900
github.com/klauspost/compress@v1.16.3
1.18.7
1
library/docker:26.1-dinddd43b430341a
github.com/klauspost/compress@v1.17.9
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.