StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,318
of 17,957 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,318 of 17,957 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,377
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,318 by stars
ChartLatestAffected imagesRadar Score
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

6,513
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

4,159
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,189
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,886
monitoringcluster-deploy0.3.04 of 11See more

monitoring cluster-deploy 0.3.0

4 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/klauspost/compress@v1.18.2
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

8,404
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

7,603
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gitea/act_runner:latestb5c35d6bdbb9
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

7,377
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

484
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,588
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

784
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/klauspost/compress@v1.16.7
1.18.7
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,984
coder-ai-gatewaycoder-v2Verified publisher2.37.31 of 1See more

coder-ai-gateway coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
coder-provisionercoder-v2OfficialVerified publisher2.37.31 of 1See more

coder-provisioner coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/grafana:13.1.17cb8c64c4d57
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

5,794
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

792
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

443
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,999
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

15,646
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,961
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,367
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,946
csghubcsghubVerified publisher2.5.09 of 34See more

csghub csghub 2.5.0

9 of the 34 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
github.com/klauspost/compress@v1.18.0
1.18.7
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/gitlab-shell:v19.2.580a65ac370da
github.com/klauspost/compress@v1.18.5
1.18.7
opencsghq/lws:v0.6.1de15437db41b
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

52,989
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,731
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
github.com/klauspost/compress@v1.18.0
1.18.7
ipfs/kubo:v0.41.00661819c2e09
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,662
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,006
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

309
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

17,520
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,834
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,028
dapr-agentsdapr-agents-devVerified publisher0.1.58 of 31See more

dapr-agents dapr-agents-dev 0.1.5

8 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.6.5847c287ada0e
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.5fbb984bab741
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/klauspost/compress@v1.18.3
1.18.7
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,432
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,249
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,242
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

625
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,754
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,432
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron48.0.07 of 28See more

devtron-enterprise devtron 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
migrantdevtron0.0.31 of 1See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron-labs48.0.07 of 28See more

devtron-enterprise devtron-labs 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

34,129
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
direktivdirektivVerified publisher0.10.03 of 6See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/klauspost/compress@v1.17.11
1.18.7
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,872

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/etcd:latest99b408c15272
github.com/klauspost/compress@v1.17.9
1.18.7
3
caddy/ingress:v0.2.118d1366fc0e9
github.com/klauspost/compress@v1.17.2
1.18.7
3
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/klauspost/compress@v1.18.0
1.18.7
3
derailed/popeye:v0.22.18e68e22c7663
github.com/klauspost/compress@v1.17.11
1.18.7
3
ethpandaops/tracoor:latestd8514b9f4c59
github.com/klauspost/compress@v1.17.5
1.18.7
3
grafana/grafana:13.1.0121a7a9ece6d
github.com/klauspost/compress@v1.18.6
1.18.7
3
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
3
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
3
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
3
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/klauspost/compress@v1.16.7
1.18.7
3
library/docker:dind:latest3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7
3
library/nats:2.10-alpineb83efabe3e7d
github.com/klauspost/compress@v1.18.0
1.18.7
3
library/registry:3.1.1:latest1be55279f18a
github.com/klauspost/compress@v1.18.4
1.18.7
3
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
3
meshery/meshery:stable-latest44b64ee128fb
github.com/klauspost/compress@v1.18.5
1.18.7
3
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/klauspost/compress@v1.18.0
1.18.7
3
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
3
prom/alertmanager:v0.28.0d5155cfac40a
github.com/klauspost/compress@v1.17.9
1.18.7
3
prom/prometheus:v3.0.1565ee8650122
github.com/klauspost/compress@v1.17.10
1.18.7
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/klauspost/compress@v1.17.2
1.18.7
3
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/klauspost/compress@v1.17.9
1.18.7
3
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/klauspost/compress@v1.18.1
1.18.7
3
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
github.com/klauspost/compress@v1.17.9
1.18.7
3
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7
3
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
github.com/klauspost/compress@v1.18.1
1.18.7
3
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7
3
quay.io/cilium/cilium:v1.20.22939231d0d3e
github.com/klauspost/compress@v1.18.6
1.18.7
3
quay.io/cilium/operator-generic:v1.20.264d8798350e8
github.com/klauspost/compress@v1.18.6
1.18.7
3
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7
3
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/klauspost/compress@v1.17.8
1.18.7
3
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7
3
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/klauspost/compress@v1.18.4
1.18.7
3
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/klauspost/compress@v1.17.9
1.18.7
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/klauspost/compress@v1.17.9
1.18.7
3

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.