Container image	Digest	Package	Fixed in
ghcr.io/miropshq/mirops/operator :v0.2.0	4b0b5fef9a6a	stdlib@go1.24.13	1.26.9
ghcr.io/miropshq/mirops/remediation :v0.2.0	976a7319ff4a	stdlib@go1.24.13	1.26.9

Open the chart page →

1,864

mlflow-servermlflowserver

0.1.9

1 of 3 See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.26.9

Open the chart page →

7,363

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	stdlib@go1.25.4	1.26.9

Open the chart page →

36,930

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	stdlib@go1.24.0	1.26.9

Open the chart page →

3,591

model-manager-servermodel-manager-server

1.27.0

1 of 1 See more

model-manager-server model-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	stdlib@go1.23.12	1.26.9

Open the chart page →

1,241

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9

Open the chart page →

16,167

redminemt190502

7.3.4

2 of 3 See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
library/postgres :18	5a5a84b19854	stdlib@go1.24.6	1.26.9
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.26.9

Open the chart page →

9,555

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	stdlib@go1.19.3	1.26.9

Open the chart page →

2,907

maddymya

22.4.12

1 of 2 See more

2,140

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.26.9

Open the chart page →

1,439

simple-gowikimy-helm-charts

0.2.0

1 of 1 See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.26.9

Open the chart page →

828

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.26.9

Open the chart page →

4,804

beszelnatpnk-k8s

1.0.0

2 of 2 See more

beszel natpnk-k8s 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
henrygd/beszel :latest	6b39a8b64f9b	stdlib@go1.27.1	1.26.9
henrygd/beszel-agent :latest	f27b1aa2c684	stdlib@go1.27.1	1.26.9

Open the chart page →

429

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.26.9

Open the chart page →

3,667

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	stdlib@go1.23.3	1.26.9

Open the chart page →

1,287

spring-helmnaveenalla-springboot

1.0.0

1 of 2 See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
library/postgres :latest	5a5a84b19854	stdlib@go1.24.6	1.26.9

Open the chart page →

1,924

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	stdlib@go1.21.8	1.26.9
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.26.9
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	stdlib@go1.20.13	1.26.9
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	stdlib@go1.18.4	1.26.9
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	stdlib@go1.21.7	1.26.9
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.26.9

Open the chart page →

46,049

netobserv-operatornetobserv

2.0.1

1 of 1 See more

netobserv-operator netobserv 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
quay.io/netobserv/network-observability-operatordigest-pinned	c05814f8d633	stdlib@go1.26.8	1.26.9

Open the chart page →

259

monitorneuvectorcharts

2.11.2

1 of 1 See more

monitor neuvectorcharts 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
neuvector/prometheus-exporter :1.0.19	ab4e4332053a	stdlib@go1.26.8	1.26.9

Open the chart page →

245

cluster-issuersnginx-cert-charts

0.3.0

4 of 4 See more

cluster-issuers nginx-cert-charts 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	stdlib@go1.25.6	1.26.9
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	stdlib@go1.25.6	1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.19.3	e51a06251338	stdlib@go1.25.6	1.26.9
quay.io/jetstack/cert-manager-webhook :v1.19.3	2625754083d5	stdlib@go1.25.6	1.26.9

Open the chart page →

3,948

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	stdlib@go1.16.15	1.26.9

Open the chart page →

2,958

cloud9nicholaswilde

1.0.0

1 of 1 See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :version-1.29.2	45c5fe102ff3	stdlib@go1.17.11	1.26.9

Open the chart page →

13,023

gotifynicholaswilde

1.0.0

1 of 1 See more

gotify nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
gotify/server-arm7 :2.0.23	d91e302ad1d0	stdlib@go1.16	1.26.9

Open the chart page →

3,984

installernicholaswilde

1.0.0

1 of 1 See more

installer nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.26.9

Open the chart page →

2,283

shiorinicholaswilde

1.0.1

1 of 1 See more

shiori nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	stdlib@go1.16.5	1.26.9

Open the chart page →

3,507

writefreelynicholaswilde

1.0.0

1 of 1 See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	stdlib@go1.15.12	1.26.9

Open the chart page →

9,505

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	stdlib@go1.20.4	1.26.9

Open the chart page →

1,948

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.26.9

Open the chart page →

15,959

nri-resource-policy-balloonsnri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-balloons nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons :v0.14.0	a8c8297c7274	stdlib@go1.26.0	1.26.9

Open the chart page →

699

nri-resource-policy-topology-awarenri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-topology-aware nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware :v0.14.0	e2443833726a	stdlib@go1.26.0	1.26.9

Open the chart page →

699

nutanix-csi-snapshotnutanix-helm-releases

8.3.0

1 of 1 See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	stdlib@go1.24.2	1.26.9

Open the chart page →

927

nvidia-gpu-exporternvidia-gpu-exporter

2.15.1

1 of 1 See more

nvidia-gpu-exporter nvidia-gpu-exporter 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :1.15.1	7aee2d42836a	stdlib@go1.27.1	1.26.9

Open the chart page →

525

octopuso7studios-octopus-helm-charts

1.2.3

4 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
library/nats :2.11.9-alpine	777787bbb4c7	stdlib@go1.24.7	1.26.9
natsio/nats-box :0.18.0	abdc9f9f0120	stdlib@go1.24.3	1.26.9
natsio/nats-server-config-reloader :0.19.1	81edf32a3680	stdlib@go1.24.5	1.26.9
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	stdlib@go1.24.3	1.26.9

Open the chart page →

8,180

oadaoada

5.0.6

1 of 11 See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	stdlib@go1.19.3	1.26.9

Open the chart page →

15,454

opengistobeone

1.1.6

1 of 1 See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/thomiceli/opengist :1.15.1	038d47937d3b	stdlib@go1.26.5	1.26.9

Open the chart page →

796

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	stdlib@go1.20.11	1.26.9

Open the chart page →

1,862

oci-native-ingress-controlleroci-native-ingress-controller

1.0.0

1 of 1 See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	stdlib@go1.23.7	1.26.9

Open the chart page →

945

ociregistryociregistry

1.20.0

1 of 1 See more

ociregistry ociregistry 1.20.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
quay.io/appzygy/ociregistry :1.20.0	52cfc157ed62	stdlib@go1.27.1	1.26.9

Open the chart page →

213

growthbookone-acre-fund

0.3.0

1 of 3 See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.26.9

Open the chart page →

1,834

oom-oracleoom-oracle

0.1.2

1 of 1 See more

oom-oracle oom-oracle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle :0.1.2	538ed30a4c62	stdlib@go1.26.8	1.26.9

Open the chart page →

209

open5gs-hssopen5gs-hss

2.3.3

1 of 2 See more

open5gs-hss open5gs-hss 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9

Open the chart page →

701

open5gs-pcrfopen5gs-pcrf

2.3.3

1 of 2 See more

open5gs-pcrf open5gs-pcrf 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9

Open the chart page →

701

open5gs-scpopen5gs-scp

2.3.4

1 of 2 See more

open5gs-scp open5gs-scp 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9

Open the chart page →

701

open5gs-udropen5gs-udr

2.3.4

1 of 2 See more

open5gs-udr open5gs-udr 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9

Open the chart page →

701

open5gs-webuiopen5gs-webui

2.3.3

1 of 2 See more

open5gs-webui open5gs-webui 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.26.9

Open the chart page →

7,192

Container images carrying it

6,105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/rabbitmq/cluster-operator :2.17.2	5d690e6cd856	stdlib@go1.25.4	1.26.9	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	stdlib@go1.26.2	1.26.9	1
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.26.9	1
ghcr.io/rafpe/kube-oidc-proxy :1.8.1	300f51feb1a7	stdlib@go1.26.6	1.26.9	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	stdlib@go1.20.7	1.26.9	1
ghcr.io/razvanmacovei/x402-k8s-operator :0.1.0	bf3407fad182	stdlib@go1.25.7	1.26.9	1
ghcr.io/recyclarr/recyclarr :8.7.3	9c6c74d52cfc	stdlib@go1.26.8	1.26.9	1
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	stdlib@go1.25.5	1.26.9	1
ghcr.io/ricardozd/agentgateway-route-reconciler :0.3.1	846f6e407c96	stdlib@go1.24.13	1.26.9	1
ghcr.io/riesinger/plausible-exporter :1.1.0	61112cda1be5	stdlib@go1.19.7	1.26.9	1
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	stdlib@go1.19.4	1.26.9	1
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	stdlib@go1.17.13	1.26.9	1
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	stdlib@go1.18.3	1.26.9	1
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.26.9	1
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	stdlib@go1.23.0	1.26.9	1
ghcr.io/runatlantis/atlantis :v0.48.1	42bde40e38ec	stdlib@go1.26.6	1.26.9	1
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	stdlib@go1.26.4	1.26.9	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.4	914e75d9f445	stdlib@go1.25.5	1.26.9	1
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	stdlib@go1.25.8	1.26.9	1
ghcr.io/rybbit-io/rybbit-backend :latest	e0d1b397e33c	stdlib@go1.20.7	1.26.9	1
ghcr.io/sagernet/sing-box :v1.12.0	3c1ee82d450d	stdlib@go1.24.5	1.26.9	1
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	stdlib@go1.27.1	1.26.9	1
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	stdlib@go1.27.1	1.26.9	1
ghcr.io/salaboy/fmtok8s-email-service :v0.2.0-native	b52d5dbac2ca	stdlib@go1.17.11	1.26.9	1
ghcr.io/salaboy/fmtok8s-email-service :v0.1.0-native	cf28472bc460	stdlib@go1.17.11	1.26.9	1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.26.9	1
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	stdlib@go1.18.10	1.26.9	1
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	stdlib@go1.16.15	1.26.9	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	stdlib@go1.23.3	1.26.9	1
ghcr.io/sapcc/ntp_exporter :v2.9.0	79c40c65f5d4	stdlib@go1.24.6	1.26.9	1
ghcr.io/schaka/janitorr :native-stable	7cfe1e0c41da	stdlib@go1.24.6	1.26.9	1
ghcr.io/schmitzis/cert-manager-webhook-bunny :latest	125e31c8e85a	stdlib@go1.19.13	1.26.9	1
ghcr.io/seanmorley15/adventurelog-frontend :v0.13.0	51ee22428b41	stdlib@go1.23.12	1.26.9	1
ghcr.io/sergelogvinov/hybrid-csi-provisioner :v0.3.1	221e07794a8a	stdlib@go1.25.5	1.26.9	1
ghcr.io/sergelogvinov/karpenter-provider-proxmox :v0.13.0	c529be73ddc3	stdlib@go1.27.1	1.26.9	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	stdlib@go1.18.10	1.26.9	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	stdlib@go1.23.8	1.26.9	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	stdlib@go1.23.8	1.26.9	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	stdlib@go1.24.4	1.26.9	1
ghcr.io/sergelogvinov/node-labels-exporter :v0.5.1	dd6875a0a963	stdlib@go1.25.5	1.26.9	1
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	stdlib@go1.24.6	1.26.9	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.24.6	1.26.9	1
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager :v0.16.1	474dbfd3be5c	stdlib@go1.27.1	1.26.9	1
ghcr.io/sergelogvinov/proxmox-csi-controller :v0.20.0	95ef74cce03e	stdlib@go1.26.5	1.26.9	1
ghcr.io/sergelogvinov/proxmox-csi-node :v0.20.0	e0151137a1c5	stdlib@go1.26.5	1.26.9	1
ghcr.io/sergelogvinov/tailscale :1.102.3	d91287e83d1a	stdlib@go1.26.6	1.26.9	1
ghcr.io/sergeyslonimsky/elara :0.5.2	a410a7ed1ee8	stdlib@go1.27.0	1.26.9	1
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	stdlib@go1.21.5	1.26.9	1
ghcr.io/shift/domain_exporter :v0.1.13	47e27690a816	stdlib@go1.17.8	1.26.9	1
ghcr.io/shini4i/argo-watcher :v1.4.2	0faab179997f	stdlib@go1.27.1	1.26.9	1