StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,318
of 17,966 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,318 of 17,966 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,377
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,318 by stars
ChartLatestAffected imagesRadar Score
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,690
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

539
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,100
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,509
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,205
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,738
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

513
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

14,268
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

773
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,177
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,952
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,756
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,710
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,806
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,627
fluxer-helmfluxer-helm0.3.03 of 18See more

fluxer-helm fluxer-helm 0.3.0

3 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
github.com/klauspost/compress@v1.18.6
1.18.7
livekit/livekit-server:v1.12.0b1281e66e35e
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

30,173
flyte-devboxflyte0.1.07 of 14See more

flyte-devbox flyte 0.1.0

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,866
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,171
dbmatefrinx-helm-charts1.0.01 of 1See more

dbmate frinx-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amacneil/dbmate:2.6.03fdce58cc189
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,444
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

44,890
frinx-machine-monitoringfrinx-helm-charts0.1.23 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

10,779
krakendfrinx-helm-charts5.0.21 of 1See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,407
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

805
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,910
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

569
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

150
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

481
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

643
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,194
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,364
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,627
glassflow-etlglassflowVerified publisher0.5.216 of 16See more

glassflow-etl glassflow 0.5.21

6 of the 16 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,672
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

784
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.1-alpineb3f2bd84176a
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
rancher/local-path-provisioner:v0.0.329289da488b07
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/klauspost/compress@v1.18.3
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

13,794
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

24,691
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

3,493
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

20,021
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,470

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/klauspost/compress@v1.18.3
1.18.7
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/klauspost/compress@v1.16.6
1.18.7
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
github.com/klauspost/compress@v1.16.6
1.18.7
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
github.com/klauspost/compress@v1.17.7
1.18.7
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/tale/headplane:0.6.39476cc5adb12
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/thm-mni-ii/fbs-runner:v2.0.15d7506dce446
github.com/klauspost/compress@v1.16.0
1.18.7
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/klauspost/compress@v1.16.7
1.18.7
1
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/klauspost/compress@v1.17.6
1.18.7
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/klauspost/compress@v1.18.1
1.18.7
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
github.com/klauspost/compress@v1.18.2
1.18.7
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/klauspost/compress@v1.17.8
1.18.7
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/klauspost/compress@v1.18.0
1.18.7
1
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
github.com/klauspost/compress@v1.17.9
1.18.7
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/klauspost/compress@v1.17.11
1.18.7
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/klauspost/compress@v1.17.11
1.18.7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.7c3c80b940df6
github.com/klauspost/compress@v1.18.6
1.18.7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi:v1.27.9f99f5f7ae5fb
github.com/klauspost/compress@v1.18.6
1.18.7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v5.2.0afdfa3da79df
github.com/klauspost/compress@v1.17.11
1.18.7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v1.13.2fa8eba9843ff
github.com/klauspost/compress@v1.17.11
1.18.7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
github.com/klauspost/compress@v1.18.0
1.18.7
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/klauspost/compress@v1.17.11
1.18.7
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
github.com/klauspost/compress@v1.18.5
1.18.7
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
github.com/klauspost/compress@v1.17.11
1.18.7
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
github.com/klauspost/compress@v1.17.9
1.18.7
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/klauspost/compress@v1.17.11
1.18.7
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/klauspost/compress@v1.16.0
1.18.7
1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server:1.46.00bbb5f5ddf71
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.