StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,318
of 17,966 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,318 of 17,966 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,377
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,318 by stars
ChartLatestAffected imagesRadar Score
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest423ff2b7b568
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

727
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,690
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

539
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,100
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,509
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,205
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,738
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

513
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

14,268
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

773
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,177
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,952
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,756
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,710
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,806
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,627
fluxer-helmfluxer-helm0.3.03 of 18See more

fluxer-helm fluxer-helm 0.3.0

3 of the 18 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
github.com/klauspost/compress@v1.18.6
1.18.7
livekit/livekit-server:v1.12.0b1281e66e35e
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

30,173
flyte-devboxflyte0.1.07 of 14See more

flyte-devbox flyte 0.1.0

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,866
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,171
dbmatefrinx-helm-charts1.0.01 of 1See more

dbmate frinx-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
amacneil/dbmate:2.6.03fdce58cc189
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,444
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

44,890
frinx-machine-monitoringfrinx-helm-charts0.1.23 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/klauspost/compress@v1.17.4
1.18.7
grafana/promtail:2.9.3b338a29de45e
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

10,779
krakendfrinx-helm-charts5.0.21 of 1See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
frinx/krakend:7.0.0bf8edd4f52f3
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,407
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

805
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

12,251
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,380
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:lateste1fdac6133ad
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,910
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

569
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

150
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

481
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

643
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,194
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,364
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,627
glassflow-etlglassflowVerified publisher0.5.216 of 16See more

glassflow-etl glassflow 0.5.21

6 of the 16 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
github.com/klauspost/compress@v1.18.2
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,672
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

784
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/klauspost/compress@v1.18.0
1.18.7
library/nats:2.12.1-alpineb3f2bd84176a
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7
rancher/local-path-provisioner:v0.0.329289da488b07
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/klauspost/compress@v1.18.3
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

13,794
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

24,691
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/klauspost/compress@v1.18.0
1.18.7
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

3,493
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/klauspost/compress@v1.17.4
1.18.7
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

20,021
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,470

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.2.16927e0919a14
github.com/klauspost/compress@v1.17.11
1.18.7
1
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/klauspost/compress@v1.17.8
1.18.7
1
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
github.com/klauspost/compress@v1.17.9
1.18.7
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/klauspost/compress@v1.16.5
1.18.7
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/klauspost/compress@v1.16.0
1.18.7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
github.com/klauspost/compress@v1.18.5
1.18.7
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/klauspost/compress@v1.16.7
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/xrow-public/ci-tools/tools:mainaa62b23f2b5e
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.