StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,297
of 17,966 indexed, latest versions
Container images
1,353
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,297 of 17,966 indexed charts deploy, on 1,353 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,353
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,297 by stars
ChartLatestAffected imagesRadar Score
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,588
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

784
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/klauspost/compress@v1.16.7
1.18.7
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,984
coder-ai-gatewaycoder-v2Verified publisher2.37.31 of 1See more

coder-ai-gateway coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
coder-provisionercoder-v2OfficialVerified publisher2.37.31 of 1See more

coder-provisioner coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/grafana:13.1.17cb8c64c4d57
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

5,794
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

792
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

443
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,999
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

15,646
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,961
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,367
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,946
csghubcsghubVerified publisher2.5.09 of 34See more

csghub csghub 2.5.0

9 of the 34 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
github.com/klauspost/compress@v1.18.0
1.18.7
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/gitlab-shell:v19.2.580a65ac370da
github.com/klauspost/compress@v1.18.5
1.18.7
opencsghq/lws:v0.6.1de15437db41b
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

52,989
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,731
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
github.com/klauspost/compress@v1.18.0
1.18.7
ipfs/kubo:v0.41.00661819c2e09
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,662
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,006
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

309
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

17,520
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,834
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,028
dapr-agentsdapr-agents-devVerified publisher0.1.58 of 31See more

dapr-agents dapr-agents-dev 0.1.5

8 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.6.5847c287ada0e
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.5fbb984bab741
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/klauspost/compress@v1.18.3
1.18.7
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,432
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,249
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,242
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

625
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,754
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,432
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron48.0.07 of 28See more

devtron-enterprise devtron 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
migrantdevtron0.0.31 of 1See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron-labs48.0.07 of 28See more

devtron-enterprise devtron-labs 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

34,129
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
direktivdirektivVerified publisher0.10.03 of 6See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/klauspost/compress@v1.17.11
1.18.7
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,872
graphite-exporterdjjudas21Verified publisher0.1.91 of 1See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
prom/graphite-exporter:v0.16.0e54bca6645ea
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

779
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,460
netbirddmdhrumilmistryVerified publisher0.1.03 of 6See more

netbird dmdhrumilmistry 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netbirdio/management:latest3c3bed2a982c
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/relay:latest0ef3133050c7
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/signal:latest04c401eb167e
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

3,729
dnation-kubernetes-monitoring-stackdnationcloud5.0.06 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.0

6 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/klauspost/compress@v1.17.11
1.18.7
grafana/grafana:13.1.0121a7a9ece6d
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.2.0882e30c20683
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/loki-canary:3.2.049e03f80d361
github.com/klauspost/compress@v1.17.9
1.18.7
prom/memcached-exporter:v0.15.0bb01ad25e9fc
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,915
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,172
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,238
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

3,680
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,602

Container images carrying it

1,353 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
webdevops/kube-pool-manager:24.9.04fad7e14ad67
github.com/klauspost/compress@v1.17.9
1.18.7
1
wernight/ngrok:latestd211f29ebcfe
github.com/klauspost/compress@v1.17.0
1.18.7
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
github.com/klauspost/compress@v1.17.9
1.18.7
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/klauspost/compress@v1.17.11
1.18.7
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/klauspost/compress@v1.17.8
1.18.7
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/klauspost/compress@v1.18.0
1.18.7
1
gcr.io/kasten-images/prometheus:9.0.6c1b27f6698ca
github.com/klauspost/compress@v1.18.6
1.18.7
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
github.com/klauspost/compress@v1.18.1
1.18.7
1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier15a601147ef4
github.com/klauspost/compress@v1.17.11
1.18.7
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/klauspost/compress@v1.16.6
1.18.7
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
github.com/klauspost/compress@v1.17.11
1.18.7
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/klauspost/compress@v1.16.0
1.18.7
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
github.com/klauspost/compress@v1.17.11
1.18.7
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
github.com/klauspost/compress@v1.16.7
1.18.7
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
github.com/klauspost/compress@v1.16.7
1.18.7
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
github.com/klauspost/compress@v1.16.7
1.18.7
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/abcdesktopio/mongo:safe8.09a1f085b0530
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/akash-network/node:0.36.08763983b31f1
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.9e301fbb8fae0
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/amoylab/unla/mcp-gateway:latest960cb3cfce77
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/klauspost/compress@v1.17.1
1.18.7
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/appscode/catalog-manager:v0.14.091cf84624081
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/cluster-connector:v0.0.140efd9d9ef6ca
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/kube-ui-server:v0.7.0c76693a329c1
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/appscode/outboxsyncer:v0.6.0d70d784176c1
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/appscode/petset:v0.2.0913f0858eb24
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/appscode/trickster:v2.0.0cdbbed831f28
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/klauspost/compress@v1.16.5
1.18.7
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
github.com/klauspost/compress@v1.17.9
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.