StackRadar

CVE-2026-63209

Unscored

Advisory

Published 27 Jul 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,318
of 17,966 indexed, latest versions
Container images
1,377
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,318 of 17,966 indexed charts deploy, on 1,377 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,377
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,318 by stars
ChartLatestAffected imagesRadar Score
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

3,470
spire-ha-agentspiffeVerified publisher0.3.21 of 2See more

spire-ha-agent spiffe 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

377
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,958
sqs-prometheus-exportersqs-prometheus-exporterVerified publisher2.0.31 of 1See more

sqs-prometheus-exporter sqs-prometheus-exporter 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

373
retail-store-sample-catalog-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-catalog-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

775
stageset-controllerstageset-controllerOfficialVerified publisher2026.6.15+1543421 of 1See more

stageset-controller stageset-controller 2026.6.15+154342

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/metio/stageset-controller:2026.6.14234b66bb3319
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

305
mongodbstakaterVerified publisher1.0.31 of 1See more

mongodb stakater 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bitnami/mongodb:latest84254ace18df
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

86
stakefishstakefish0.1.02 of 8See more

stakefish stakefish 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/klauspost/compress@v1.17.8
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2706cde441321
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

21,027
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

3,182
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,274
mev-booststakewise1.7.41 of 1See more

mev-boost stakewise 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
flashbots/mev-boost:1.8.07c486b5789da
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,278
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

7,372
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,274
snapshot-controllerstevehipwellVerified publisher0.1.01 of 1See more

snapshot-controller stevehipwell 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

503
snapshot-controllerstevehipwell-helm-charts-snapshot-controllerVerified publisher0.1.01 of 1See more

snapshot-controller stevehipwell-helm-charts-snapshot-controller 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

503
sn-operatorstreamnative0.20.31 of 1See more

sn-operator streamnative 0.20.3

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
streamnative/sn-operator:v0.20.14193f1d4fa093
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

33
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
headscale/headscale:0.27.1cd37b3001857
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

5,626
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,970
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,827
lingosubstratusVerified publisher0.2.11 of 1See more

lingo substratus 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,628
hello-worldsupporttools185.0.01 of 1See more

hello-world supporttools 185.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
supporttools/hello-world:v185fab12b15c832
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

410
placeholdersupporttools455.0.01 of 2See more

placeholder supporttools 455.0.0

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
supporttools/placeholder:v455dc50d660e149
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

937
push-to-k8ssupporttools1.1.21 of 1See more

push-to-k8s supporttools 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
cube8021/push-to-k8s:v1.1.21be9baf096ff
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

538
rancher-upgrade-toolsupporttools216.0.01 of 1See more

rancher-upgrade-tool supporttools 216.0.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
supporttools/rancher-upgrade-tool:v216f4dc8ef6dd2d
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,258
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,820
switchbladeswitchblade0.0.191 of 1See more

switchblade switchblade 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,373
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

8,883
synadia-serversynadiaVerified publisher1.1.101 of 2See more

synadia-server synadia 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

1,985
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

7,353
explorersynapse0.2.162 of 6See more

explorer synapse 0.2.16

2 of the 6 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

8,835
omnirpcsynapse0.2.921 of 2See more

omnirpc synapse 0.2.92

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,153
screenersynapse0.2.51 of 4See more

screener synapse 0.2.5

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,121
scribesynapse0.2.162 of 7See more

scribe synapse 0.2.16

2 of the 7 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/klauspost/compress@v1.17.9
1.18.7
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,756
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

5,158
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.12.6-alpine1cfc36e2e5e6
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

3,499
act-runnertektonops0.1.22 of 2See more

act-runner tektonops 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
gitea/act_runner:nightly7940221bcfc9
github.com/klauspost/compress@v1.18.4
1.18.7
library/docker:23.0.6-dindafa5d5134900
github.com/klauspost/compress@v1.16.3
1.18.7

Open the chart page →

4,272
terminusterminusVerified publisher1.1.01 of 1See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

677
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,411
the0the0Verified publisher0.9.103 of 9See more

the0 the0 0.9.10

3 of the 9 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/mongo:7-jammy84c4a18b60a0
github.com/klauspost/compress@v1.18.6
1.18.7
library/nats:2.10-alpineb83efabe3e7d
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/alexanderwanyoike/the0/runtime:1.14.9e301fbb8fae0
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,867
tile38tile380.6.11 of 2See more

tile38 tile38 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
tile38/tile38:1.38.05b61c6f3b32e
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

419
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

7,381
netbirdtotmicro1.8.21 of 4See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,487
orchestratremolo3.1.561 of 5See more

orchestra tremolo 3.1.56

1 of the 5 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

3,107
trident-protecttrident-protect100.2606.02 of 2See more

trident-protect trident-protect 100.2606.0

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netapp/controller:26.06.08235a77cfc92
github.com/klauspost/compress@v1.18.0
1.18.7
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,416
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,246
trident-protect-consoletrident-protect100.2609.0-console2 of 3See more

trident-protect-console trident-protect 100.2609.0-console

2 of the 3 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
netapp/controller:26.09.0-console46a0066e1cf6
github.com/klauspost/compress@v1.18.6
1.18.7
netapp/trident-protect-utils:v3.0.0cad26cd945d1
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,487
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

2,504
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,334
tfy-distributortruefoundryVerified publisher0.0.12 of 4See more

tfy-distributor truefoundry 0.0.1

2 of the 4 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
github.com/klauspost/compress@v1.17.4
1.18.7
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

18,177
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-63209.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:2.9.1063a2e57a5b14
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

2,847

Container images carrying it

1,377 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.2.16927e0919a14
github.com/klauspost/compress@v1.17.11
1.18.7
1
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/klauspost/compress@v1.17.8
1.18.7
1
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
github.com/klauspost/compress@v1.17.9
1.18.7
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/klauspost/compress@v1.16.5
1.18.7
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/klauspost/compress@v1.16.0
1.18.7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
github.com/klauspost/compress@v1.18.5
1.18.7
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/klauspost/compress@v1.16.7
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/xrow-public/ci-tools/tools:mainaa62b23f2b5e
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.