StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,304
of 17,966 indexed, latest versions
Container images
1,361
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,304 of 17,966 indexed charts deploy, on 1,361 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,361
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,304 by stars
ChartLatestAffected imagesRadar Score
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

484
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,588
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

784
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/klauspost/compress@v1.16.7
1.18.7
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,984
coder-ai-gatewaycoder-v2Verified publisher2.37.31 of 1See more

coder-ai-gateway coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
coder-provisionercoder-v2OfficialVerified publisher2.37.31 of 1See more

coder-provisioner coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/grafana:13.1.17cb8c64c4d57
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

5,794
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

792
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

443
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,999
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

15,646
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,961
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,367
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,946
csghubcsghubVerified publisher2.5.09 of 34See more

csghub csghub 2.5.0

9 of the 34 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
github.com/klauspost/compress@v1.18.0
1.18.7
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/gitlab-shell:v19.2.580a65ac370da
github.com/klauspost/compress@v1.18.5
1.18.7
opencsghq/lws:v0.6.1de15437db41b
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

52,989
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,731
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
github.com/klauspost/compress@v1.18.0
1.18.7
ipfs/kubo:v0.41.00661819c2e09
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,662
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,006
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

309
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

17,520
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,834
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,028
dapr-agentsdapr-agents-devVerified publisher0.1.58 of 31See more

dapr-agents dapr-agents-dev 0.1.5

8 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.6.5847c287ada0e
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.5fbb984bab741
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/klauspost/compress@v1.18.3
1.18.7
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,432
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,249
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,242
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

625
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,754
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,432
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron48.0.07 of 28See more

devtron-enterprise devtron 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
migrantdevtron0.0.31 of 1See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron-labs48.0.07 of 28See more

devtron-enterprise devtron-labs 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

34,129
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
direktivdirektivVerified publisher0.10.03 of 6See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/klauspost/compress@v1.17.11
1.18.7
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,872
graphite-exporterdjjudas21Verified publisher0.1.91 of 1See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
prom/graphite-exporter:v0.16.0e54bca6645ea
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

779
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,460
netbirddmdhrumilmistryVerified publisher0.1.03 of 6See more

netbird dmdhrumilmistry 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netbirdio/management:latest3c3bed2a982c
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/relay:latest0ef3133050c7
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/signal:latest04c401eb167e
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

3,729
dnation-kubernetes-monitoring-stackdnationcloud5.0.06 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.0

6 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/klauspost/compress@v1.17.11
1.18.7
grafana/grafana:13.1.0121a7a9ece6d
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.2.0882e30c20683
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/loki-canary:3.2.049e03f80d361
github.com/klauspost/compress@v1.17.9
1.18.7
prom/memcached-exporter:v0.15.0bb01ad25e9fc
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,915
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,172
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,238
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

3,680

Container images carrying it

1,361 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubedb/kubedb-schema-manager:v0.42.04e2a3cce7ce8
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubedb/kubedb-ui-server:v0.42.0e93dfe7454d4
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kuberecord/kuberecord:v0.5.071ba8d272db1
github.com/klauspost/compress@v1.18.3
1.18.7
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/klauspost/compress@v1.17.4
1.18.7
1
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/kubiyabot/kubiya-operator:runner_v26bf945565865
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/kuoss/eventrouter:v0.4.1300b48beff3ae
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/klauspost/compress@v1.17.5
1.18.7
1
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/klauspost/compress@v1.17.0
1.18.7
1
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/loafoe/picoclaw:v0.0.1942e1b6862913
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/lockdep/stackradar-scanner:0.4.073cbeb990cf4
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/klauspost/compress@v1.17.2
1.18.7
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/klauspost/compress@v1.16.5
1.18.7
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/klauspost/compress@v1.17.2
1.18.7
1
ghcr.io/loft-sh/vcluster-platform:4.12.19bc88940affc
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/klauspost/compress@v1.16.6
1.18.7
1
ghcr.io/mailcow/prometheus-exporter:2.1.0cb76395b84eb
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/marthydavid/kafka-keda-golang-consumer:0.0.4e07644865dd1
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/marthydavid/kafka-keda-golang-producer:0.0.454b242c7bf2b
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/mattn/picoclaw:latest517556c8b144
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/metio/jaas:2026.6.15e28772028e56
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/metio/stageset-controller:2026.6.14234b66bb3319
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/metrico/gigapipe:v4.1.6caeb2652ce5e
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.507011b628e6b
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/klauspost/compress@v1.17.9
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.