StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,304
of 17,966 indexed, latest versions
Container images
1,361
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,304 of 17,966 indexed charts deploy, on 1,361 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,361
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,304 by stars
ChartLatestAffected imagesRadar Score
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

484
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,588
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

784
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/klauspost/compress@v1.16.7
1.18.7
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,984
coder-ai-gatewaycoder-v2Verified publisher2.37.31 of 1See more

coder-ai-gateway coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
coder-provisionercoder-v2OfficialVerified publisher2.37.31 of 1See more

coder-provisioner coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/grafana:13.1.17cb8c64c4d57
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

5,794
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

792
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

443
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,999
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

15,646
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,961
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,367
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,946
csghubcsghubVerified publisher2.5.09 of 34See more

csghub csghub 2.5.0

9 of the 34 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
github.com/klauspost/compress@v1.18.0
1.18.7
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/gitlab-shell:v19.2.580a65ac370da
github.com/klauspost/compress@v1.18.5
1.18.7
opencsghq/lws:v0.6.1de15437db41b
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

52,989
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,731
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
github.com/klauspost/compress@v1.18.0
1.18.7
ipfs/kubo:v0.41.00661819c2e09
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,662
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,006
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

309
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

17,520
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,834
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,028
dapr-agentsdapr-agents-devVerified publisher0.1.58 of 31See more

dapr-agents dapr-agents-dev 0.1.5

8 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.6.5847c287ada0e
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.5fbb984bab741
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/klauspost/compress@v1.18.3
1.18.7
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,432
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,249
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,242
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

625
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,754
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,432
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron48.0.07 of 28See more

devtron-enterprise devtron 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
migrantdevtron0.0.31 of 1See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron-labs48.0.07 of 28See more

devtron-enterprise devtron-labs 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

34,129
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
direktivdirektivVerified publisher0.10.03 of 6See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/klauspost/compress@v1.17.11
1.18.7
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,872
graphite-exporterdjjudas21Verified publisher0.1.91 of 1See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
prom/graphite-exporter:v0.16.0e54bca6645ea
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

779
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,460
netbirddmdhrumilmistryVerified publisher0.1.03 of 6See more

netbird dmdhrumilmistry 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netbirdio/management:latest3c3bed2a982c
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/relay:latest0ef3133050c7
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/signal:latest04c401eb167e
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

3,729
dnation-kubernetes-monitoring-stackdnationcloud5.0.06 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.0

6 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/klauspost/compress@v1.17.11
1.18.7
grafana/grafana:13.1.0121a7a9ece6d
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.2.0882e30c20683
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/loki-canary:3.2.049e03f80d361
github.com/klauspost/compress@v1.17.9
1.18.7
prom/memcached-exporter:v0.15.0bb01ad25e9fc
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,915
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,172
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,238
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

3,680

Container images carrying it

1,361 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/huseyinbabal/kubetag:lateste161eddc59a0
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/inspektor-gadget/inspektor-gadget:v0.56.1d1c34335183b
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/juanfont/headscale:0.29.3:v0.29.30e7f1c6e4ce6
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/juanfont/headscale:0.29.4-debug2380cdb4951e
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/juanfont/headscale:0.29.48833f828b414
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/keel-hq/keel:0.22.409872633675d
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/kluster-manager/cluster-profile:v0.13.0048e041157d0
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/krateoplatformops/chart-inspector:1.0.0264ba5302f8e
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/krateoplatformops/composition-watcher:0.1.4ef3b17c07cfc
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/core-provider:0.10.2205bcfac23e3
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/krateoplatformops/finops-composition-definition-parser:0.1.2d9d82c32f418
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/finops-database-handler-uploader:0.2.131ee1096bc9c
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/finops-http-rest-queue:0.1.0eaa0801e29a7
github.com/klauspost/compress@v1.17.2
1.18.7
1
ghcr.io/krateoplatformops/finops-nats-subscriber:0.1.0761d96bf2d9c
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/finops-operator-exporter:0.5.17444eb2107f6
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/finops-operator-focus:0.4.346a16edcb62e
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/finops-operator-scraper:0.5.15523ff02e511
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/ghcr.io/loft-sh/vcluster:0.19.68849703f0ff8
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/krateoplatformops/github-provider:0.2.2c9438109f23d
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/krateoplatformops/opa:1.4.2-static3c995dc8a59f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubedb/kubedb-kibana:v0.42.0735dd5d2709d
github.com/klauspost/compress@v1.18.5
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.