StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,304
of 17,966 indexed, latest versions
Container images
1,361
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,304 of 17,966 indexed charts deploy, on 1,361 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,361
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,304 by stars
ChartLatestAffected imagesRadar Score
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

484
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,588
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

784
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/klauspost/compress@v1.16.7
1.18.7
library/docker:27-cli851f91d24121
github.com/klauspost/compress@v1.17.11
1.18.7
library/docker:27-dindaa3df78ecf32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

19,984
coder-ai-gatewaycoder-v2Verified publisher2.37.31 of 1See more

coder-ai-gateway coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
coder-provisionercoder-v2OfficialVerified publisher2.37.31 of 1See more

coder-provisioner coder-v2 2.37.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.3a48f82c2c437
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

245
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/grafana:13.1.17cb8c64c4d57
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.6.1144148ad243c0
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

5,794
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

792
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

443
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,999
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/docker:dind3f3c01aaaebf
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

15,646
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,961
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

1,367
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,946
csghubcsghubVerified publisher2.5.09 of 34See more

csghub csghub 2.5.0

9 of the 34 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/klauspost/compress@v1.17.11
1.18.7
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
github.com/klauspost/compress@v1.18.0
1.18.7
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/gitlab-shell:v19.2.580a65ac370da
github.com/klauspost/compress@v1.18.5
1.18.7
opencsghq/lws:v0.6.1de15437db41b
github.com/klauspost/compress@v1.17.9
1.18.7
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

52,989
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,731
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
github.com/klauspost/compress@v1.18.0
1.18.7
ipfs/kubo:v0.41.00661819c2e09
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,662
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,006
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

309
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

17,520
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

2,834
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,028
dapr-agentsdapr-agents-devVerified publisher0.1.58 of 31See more

dapr-agents dapr-agents-dev 0.1.5

8 of the 31 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki:3.6.5847c287ada0e
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.5fbb984bab741
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
mcp/grafana:latest9362bcf6aa0e
github.com/klauspost/compress@v1.18.5
1.18.7
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/klauspost/compress@v1.18.3
1.18.7
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/klauspost/compress@v1.18.0
1.18.7
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,432
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,249
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,242
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

625
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,754
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,432
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest0c994536bddb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron48.0.07 of 28See more

devtron-enterprise devtron 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
migrantdevtron0.0.31 of 1See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,172
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,576
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/caddy:latest14a9c00d4e83
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

249
devtron-enterprisedevtron-labs48.0.07 of 28See more

devtron-enterprise devtron-labs 48.0.0

7 of the 28 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

71,602
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,073
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

34,129
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
migrate/migrate:latest76cc2074cb66
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

122
direktivdirektivVerified publisher0.10.03 of 6See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/klauspost/compress@v1.17.11
1.18.7
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
github.com/klauspost/compress@v1.17.11
1.18.7
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,872
graphite-exporterdjjudas21Verified publisher0.1.91 of 1See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
prom/graphite-exporter:v0.16.0e54bca6645ea
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

779
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,460
netbirddmdhrumilmistryVerified publisher0.1.03 of 6See more

netbird dmdhrumilmistry 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netbirdio/management:latest3c3bed2a982c
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/relay:latest0ef3133050c7
github.com/klauspost/compress@v1.18.3
1.18.7
netbirdio/signal:latest04c401eb167e
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

3,729
dnation-kubernetes-monitoring-stackdnationcloud5.0.06 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.0

6 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/klauspost/compress@v1.17.11
1.18.7
grafana/grafana:13.1.0121a7a9ece6d
github.com/klauspost/compress@v1.18.6
1.18.7
grafana/loki:3.2.0882e30c20683
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/loki-canary:3.2.049e03f80d361
github.com/klauspost/compress@v1.17.9
1.18.7
prom/memcached-exporter:v0.15.0bb01ad25e9fc
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

23,915
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,172
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,238
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

3,680

Container images carrying it

1,361 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/prymitive/karma:v0.13190a10c5c6793
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
github.com/klauspost/compress@v1.17.10
1.18.7
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/cadenceea676e4999bc
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/cilium-operator128b7cf631cb
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/distribution068b0760670d
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/easegress4aa77f7d3fe6
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/flux-notification-controllercf142b6dbb1d
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/quenchworks/images/flux-source-controller92497be696e0
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/gogse2360322d49c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-corefdd355a617e2
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-jobserviceaef039822244
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-registryfd8d3f9a59fa
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/quenchworks/images/headscalea405e978531f
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/influxdbd0bac73a6e4c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/opencost420c082184a3
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/perses6c149b5aaa24
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/quenchworks/images/thanos5b2b20911e3b
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/tykfe1008b023c9
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/victorialogsfac657be565e
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/runatlantis/atlantis:v0.48.08dd77ed01565
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/sagernet/sing-box:v1.12.03c1ee82d450d
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
github.com/klauspost/compress@v1.16.5
1.18.7
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/shopware/shopware-operator:1.9.0567cf4acfaac
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/spegel-org/spegel26c60b05e08a
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/klauspost/compress@v1.18.3
1.18.7
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/klauspost/compress@v1.16.6
1.18.7
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
github.com/klauspost/compress@v1.16.6
1.18.7
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
github.com/klauspost/compress@v1.17.7
1.18.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.