StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,304
of 17,966 indexed, latest versions
Container images
1,361
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,304 of 17,966 indexed charts deploy, on 1,361 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,361
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,304 by stars
ChartLatestAffected imagesRadar Score
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

704
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,647
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

536
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,053
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,431
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,126
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,737
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

511
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

14,098
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

772
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,076
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,862
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,752
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,629
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,748
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,575
fluxer-helmfluxer-helm0.3.03 of 18See more

fluxer-helm fluxer-helm 0.3.0

3 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
github.com/klauspost/compress@v1.18.6
1.18.7
livekit/livekit-server:v1.12.0b1281e66e35e
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

29,747
flyte-devboxflyte0.1.07 of 14See more

flyte-devbox flyte 0.1.0

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,733
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,094
dbmatefrinx-helm-charts1.0.01 of 1See more

dbmate frinx-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amacneil/dbmate:2.6.03fdce58cc189
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,442
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

44,552
frinx-machine-monitoringfrinx-helm-charts0.1.23 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

10,752
krakendfrinx-helm-charts5.0.21 of 1See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,406
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

804
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,227
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,377
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,227
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,377
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,850
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

568
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

147
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

452
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

642
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,162
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,268
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,626
glassflow-etlglassflowVerified publisher0.5.216 of 16See more

glassflow-etl glassflow 0.5.21

6 of the 16 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,534
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

784
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.1-alpineb3f2bd84176a
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
rancher/local-path-provisioner:v0.0.329289da488b07
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/klauspost/compress@v1.18.3
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

13,674
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22,464
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

24,643
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

3,492
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

19,898
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,432
opentelemetry-demogpg-dev0.33.85 of 27See more

opentelemetry-demo gpg-dev 0.33.8

5 of the 27 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/klauspost/compress@v1.17.9
1.18.7
jaegertracing/all-in-one:1.53.060e65bfffe1f
github.com/klauspost/compress@v1.17.4
1.18.7
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

52,401
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,281
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,699
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

598
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,346
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,679

Container images carrying it

1,361 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.44-alpine-edgeac7c4c5d4d07
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/cloudtty/cloudshell:v0.8.1023e8d178e02c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/devangradadiya/k8s-s3-bucket-operator:0.2.258288de9f9fa
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/eraser-dev/eraser-manager:v1.4.2cda6025d1152
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fission/pre-upgrade-checks:v1.27.0b053fc3539b4
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/gabe565/ascii-movie:1.9.627f85bb98da3
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/gabe565/domain-watch:latest34c5a1e351d6
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/grycap/oscar:latest0c58ff972451
github.com/klauspost/compress@v1.18.0
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.