StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,304
of 17,966 indexed, latest versions
Container images
1,361
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,304 of 17,966 indexed charts deploy, on 1,361 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,361
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,304 by stars
ChartLatestAffected imagesRadar Score
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

704
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,647
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

536
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,053
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,431
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,126
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,737
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

511
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

14,098
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

772
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,076
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,862
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,752
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,629
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,748
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,575
fluxer-helmfluxer-helm0.3.03 of 18See more

fluxer-helm fluxer-helm 0.3.0

3 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
github.com/klauspost/compress@v1.18.6
1.18.7
livekit/livekit-server:v1.12.0b1281e66e35e
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

29,747
flyte-devboxflyte0.1.07 of 14See more

flyte-devbox flyte 0.1.0

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,733
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,094
dbmatefrinx-helm-charts1.0.01 of 1See more

dbmate frinx-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amacneil/dbmate:2.6.03fdce58cc189
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,442
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

44,552
frinx-machine-monitoringfrinx-helm-charts0.1.23 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

10,752
krakendfrinx-helm-charts5.0.21 of 1See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,406
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

804
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,227
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,377
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,227
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,377
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,850
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

568
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

147
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

452
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

642
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,162
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,268
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,626
glassflow-etlglassflowVerified publisher0.5.216 of 16See more

glassflow-etl glassflow 0.5.21

6 of the 16 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,534
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

784
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.1-alpineb3f2bd84176a
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
rancher/local-path-provisioner:v0.0.329289da488b07
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/klauspost/compress@v1.18.3
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

13,674
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22,464
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

24,643
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

3,492
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

19,898
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,432
opentelemetry-demogpg-dev0.33.85 of 27See more

opentelemetry-demo gpg-dev 0.33.8

5 of the 27 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/klauspost/compress@v1.17.9
1.18.7
jaegertracing/all-in-one:1.53.060e65bfffe1f
github.com/klauspost/compress@v1.17.4
1.18.7
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

52,401
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,281
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,699
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

598
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,346
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,679

Container images carrying it

1,361 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
superseriousbusiness/gotosocial:0.22.10078ca451dda
github.com/klauspost/compress@v1.18.6
1.18.7
1
supporttools/hello-world:v185fab12b15c832
github.com/klauspost/compress@v1.17.9
1.18.7
1
supporttools/placeholder:v455dc50d660e149
github.com/klauspost/compress@v1.17.9
1.18.7
1
supporttools/rancher-upgrade-tool:v216f4dc8ef6dd2d
github.com/klauspost/compress@v1.17.11
1.18.7
1
sysadminsmedia/homebox:0.26.056e880b62309
github.com/klauspost/compress@v1.18.6
1.18.7
1
tailscale/k8s-operator:v1.70.08edd06cf5bac
github.com/klauspost/compress@v1.17.4
1.18.7
1
tailscale/tailscale:v1.96.5dbeff02d2337
github.com/klauspost/compress@v1.18.2
1.18.7
1
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/klauspost/compress@v1.17.9
1.18.7
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/klauspost/compress@v1.18.0
1.18.7
1
temporalio/admin-tools:1.28cfde8170c92f
github.com/klauspost/compress@v1.18.0
1.18.7
1
temporalio/auto-setup:1.29.15b3502a3b685
github.com/klauspost/compress@v1.18.0
1.18.7
1
temporalio/auto-setup:1.27.2b44cbfeb43db
github.com/klauspost/compress@v1.18.0
1.18.7
1
temporalio/server:1.26.21e2626efcbc1
github.com/klauspost/compress@v1.17.9
1.18.7
1
temporalio/server:1.29.1c1e3326b2ce1
github.com/klauspost/compress@v1.18.0
1.18.7
1
thelande/openmeteo_exporter:v1.0.77e9072ace15f
github.com/klauspost/compress@v1.17.9
1.18.7
1
thetorproject/snowflake-proxy:v2.11.01ddc5069d354
github.com/klauspost/compress@v1.17.11
1.18.7
1
tile38/tile38:1.38.05b61c6f3b32e
github.com/klauspost/compress@v1.18.0
1.18.7
1
tile38/tile38:1.33.4afb7e82f9485
github.com/klauspost/compress@v1.17.2
1.18.7
1
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
github.com/klauspost/compress@v1.18.6
1.18.7
1
treeverse/lakefs:1.87.0c65f25722f26
github.com/klauspost/compress@v1.18.0
1.18.7
1
truebyteinnovationllp/redis-exporter:v1.86.01c6a945af653
github.com/klauspost/compress@v1.18.0
1.18.7
1
twinproduction/gatus:v5.34.03fff895e77d3
github.com/klauspost/compress@v1.18.0
1.18.7
1
tykio/portal:v1.19.078ffedae485e
github.com/klauspost/compress@v1.18.4
1.18.7
1
udhos/gateboard:1.12.53acc0e7599bf
github.com/klauspost/compress@v1.18.0
1.18.7
1
udhos/lambdaping:1.0.46bd2cf2ac732
github.com/klauspost/compress@v1.17.11
1.18.7
1
udhos/mongoping:1.3.103b08b63f524
github.com/klauspost/compress@v1.18.0
1.18.7
1
uptrace/uptrace:2.0.234a02c3b2d12
github.com/klauspost/compress@v1.18.0
1.18.7
1
v2fly/v2fly-core:latestd06727b221fe
github.com/klauspost/compress@v1.17.4
1.18.7
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/klauspost/compress@v1.16.0
1.18.7
1
velero/velero:v1.18.4c89fb5b6d1fd
github.com/klauspost/compress@v1.18.2
1.18.7
1
velero/velero:v1.18.0e4d1e79be2ee
github.com/klauspost/compress@v1.18.2
1.18.7
1
versity/versitygw:v1.0.145192635d0353
github.com/klauspost/compress@v1.18.0
1.18.7
1
versity/versitygw:v1.1.0f730e0dbc1ef
github.com/klauspost/compress@v1.18.2
1.18.7
1
vespaengine/vespa:8.526.1569b160f58211
github.com/klauspost/compress@v1.18.0
1.18.7
1
victoriametrics/operator:v0.65.0716b89a3ed79
github.com/klauspost/compress@v1.18.0
1.18.7
1
victoriametrics/operator:v0.47.271be93cfafb6
github.com/klauspost/compress@v1.17.9
1.18.7
1
victoriametrics/operator:v0.68.3f52e1bd679cb
github.com/klauspost/compress@v1.18.0
1.18.7
1
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
1
victoriametrics/victoria-metrics:v1.93.577a9815d0640
github.com/klauspost/compress@v1.17.0
1.18.7
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
github.com/klauspost/compress@v1.18.0
1.18.7
1
victoriametrics/victoria-metrics:v1.95.1f52723a08a44
github.com/klauspost/compress@v1.17.3
1.18.7
1
victoriametrics/vmalert:v1.96.0150cd08fde94
github.com/klauspost/compress@v1.17.4
1.18.7
1
wait4x/wait4x:3.3.14dcd86307de1
github.com/klauspost/compress@v1.18.0
1.18.7
1
wallarm/api-firewall:v0.9.64d45db0ff240
github.com/klauspost/compress@v1.18.5
1.18.7
1
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
github.com/klauspost/compress@v1.17.7
1.18.7
1
wallarm/ingress-controller:5.3.10.1a1fecfdf987e
github.com/klauspost/compress@v1.17.9
1.18.7
1
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/klauspost/compress@v1.17.8
1.18.7
1
wallarm/node-helpers:6.10.1aecd88b24c51
github.com/klauspost/compress@v1.18.0
1.18.7
1
wallarm/node-native-processing:0.23.07db2da8fce0b
github.com/klauspost/compress@v1.18.4
1.18.7
1
wallarm/node-next:0.5.24314f3d2b918
github.com/klauspost/compress@v1.17.9
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.