CVE-2026-63209
UnscoredAdvisory
Published 27 Jul 2026In the index since 30 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.004
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,318
- of 17,966 indexed, latest versions
- Container images
- 1,377
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OOB read in github.com/klauspost/compress/s2
Carried by container images the latest versions of 1,318 of 17,966 indexed charts deploy, on 1,377 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more | 1.18.7 | 1,377 |
- OSV records
- GO-2026-5841
- Also known as
- GHSA-259r-337f-4rfw
Charts affected
1,318 by stars
Container images carrying it
1,377 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 76cd6bbc3ab6 | github.com/ | 1.18.7 | 1 |
| library/ | 851f91d24121 | github.com/ | 1.18.7 | 1 |
| library/ | a56b3bdde893 | github.com/ | 1.18.7 | 1 |
| library/ | aa3df78ecf32 | github.com/ | 1.18.7 | 1 |
| library/ | afa5d5134900 | github.com/ | 1.18.7 | 1 |
| library/ | dd43b430341a | github.com/ | 1.18.7 | 1 |
| library/ | 05d6fb735bc2 | github.com/ | 1.18.7 | 1 |
| library/ | 8812029260b5 | github.com/ | 1.18.7 | 1 |
| library/ | af89d51080c9 | github.com/ | 1.18.7 | 1 |
| library/ | b0f9fc41ed79 | github.com/ | 1.18.7 | 1 |
| library/ | 0032d2ca20db | github.com/ | 1.18.7 | 1 |
| library/ | 02eb14a1130c | github.com/ | 1.18.7 | 1 |
| library/ | 3b6c281e1c08 | github.com/ | 1.18.7 | 1 |
| library/ | 4968f22d0c6c | github.com/ | 1.18.7 | 1 |
| library/ | 88785f6f665a | github.com/ | 1.18.7 | 1 |
| library/ | ae1cf99fa7bf | github.com/ | 1.18.7 | 1 |
| library/ | dca8d11fe467 | github.com/ | 1.18.7 | 1 |
| library/ | e0ce8c35124d | github.com/ | 1.18.7 | 1 |
| library/ | 1cfc36e2e5e6 | github.com/ | 1.18.7 | 1 |
| library/ | 2d5fce3229ae | github.com/ | 1.18.7 | 1 |
| library/ | 3290c829aa05 | github.com/ | 1.18.7 | 1 |
| library/ | 777787bbb4c7 | github.com/ | 1.18.7 | 1 |
| library/ | 952d157e28d5 | github.com/ | 1.18.7 | 1 |
| library/ | b3f2bd84176a | github.com/ | 1.18.7 | 1 |
| library/ | b7752304692b | github.com/ | 1.18.7 | 1 |
| library/ | bca70839d953 | github.com/ | 1.18.7 | 1 |
| library/ | c8cd23806eef | github.com/ | 1.18.7 | 1 |
| library/ | d402af4147fc | github.com/ | 1.18.7 | 1 |
| library/ | d6c6ae7df4a0 | github.com/ | 1.18.7 | 1 |
| library/ | df3dbf761551 | github.com/ | 1.18.7 | 1 |
| library/ | 0ad6861379c9 | github.com/ | 1.18.7 | 1 |
| library/ | ced93c701875 | github.com/ | 1.18.7 | 1 |
| library/ | fd374bae807c | github.com/ | 1.18.7 | 1 |
| library/ | 507a3eecf809 | github.com/ | 1.18.7 | 1 |
| library/ | 0a5157f742d2 | github.com/ | 1.18.7 | 1 |
| library/ | 104204dadedf | github.com/ | 1.18.7 | 1 |
| library/ | 1957e3314f43 | github.com/ | 1.18.7 | 1 |
| library/ | 34d5089d0b41 | github.com/ | 1.18.7 | 1 |
| lightstep/ | c800e05e1eff | github.com/ | 1.18.7 | 1 |
| linuxserver/ | 33c5e4260f5d | github.com/ | 1.18.7 | 1 |
| linuxserver/ | dca67384e3e9 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3d5752dac834 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | c79a67657baf | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3d00485e64dc | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3e7d05ded625 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 0970dfe5dc8f | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 8145c3dc83c8 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | e0b8d2d8ca28 | github.com/ | 1.18.7 | 1 |
| livekit/ | 1ab01641b366 | github.com/ | 1.18.7 | 1 |