StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,318
of 17,966 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,318 of 17,966 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,377
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,318 by stars
ChartLatestAffected imagesRadar Score
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,690
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

539
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,100
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,509
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,205
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,738
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

513
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

14,268
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

773
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,177
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,952
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,756
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,710
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,806
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,627
fluxer-helmfluxer-helm0.3.03 of 18See more

fluxer-helm fluxer-helm 0.3.0

3 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
github.com/klauspost/compress@v1.18.6
1.18.7
livekit/livekit-server:v1.12.0b1281e66e35e
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

30,173
flyte-devboxflyte0.1.07 of 14See more

flyte-devbox flyte 0.1.0

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,866
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,171
dbmatefrinx-helm-charts1.0.01 of 1See more

dbmate frinx-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amacneil/dbmate:2.6.03fdce58cc189
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,444
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

44,890
frinx-machine-monitoringfrinx-helm-charts0.1.23 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

10,779
krakendfrinx-helm-charts5.0.21 of 1See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,407
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

805
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,910
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

569
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

150
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

481
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

643
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,194
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,364
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,627
glassflow-etlglassflowVerified publisher0.5.216 of 16See more

glassflow-etl glassflow 0.5.21

6 of the 16 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,672
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

784
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.1-alpineb3f2bd84176a
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
rancher/local-path-provisioner:v0.0.329289da488b07
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/klauspost/compress@v1.18.3
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

13,794
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

24,691
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

3,493
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

20,021
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,470

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/orkspace/orkestra:0.7.1863356a41fbef
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/klauspost/compress@v1.17.3
1.18.7
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/performancecopilot/archive-analysis:latestba9f5a44ad68
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
github.com/klauspost/compress@v1.17.10
1.18.7
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/cadenceea676e4999bc
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/cilium-operator128b7cf631cb
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/coroote492d5b43bf8
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/quenchworks/images/distribution068b0760670d
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/easegress4aa77f7d3fe6
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/flux-notification-controllercf142b6dbb1d
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/quenchworks/images/flux-source-controller92497be696e0
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/giteaafea10a56d10
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/gogse2360322d49c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-corefdd355a617e2
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-jobserviceaef039822244
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/harbor-registryfd8d3f9a59fa
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/quenchworks/images/headscalea405e978531f
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/influxdbd0bac73a6e4c
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/quenchworks/images/opencost420c082184a3
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/perses6c149b5aaa24
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/quenchworks/images/thanos5b2b20911e3b
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/tykfe1008b023c9
github.com/klauspost/compress@v1.18.4
1.18.7
1
ghcr.io/quenchworks/images/victorialogsfac657be565e
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/quenchworks/images/zitadel5a637f43c309
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/runatlantis/atlantis:v0.48.08dd77ed01565
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/sagernet/sing-box:v1.12.03c1ee82d450d
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
github.com/klauspost/compress@v1.16.5
1.18.7
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/shopware/shopware-operator:1.9.0567cf4acfaac
github.com/klauspost/compress@v1.18.6
1.18.7
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/spegel-org/spegel26c60b05e08a
github.com/klauspost/compress@v1.18.5
1.18.7
1
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.