Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	stdlib@go1.15.14	1.26.9
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	stdlib@go1.15.14	1.26.9
fission/reporter :1.14.1	04c6e06af175	stdlib@go1.15.14	1.26.9

Open the chart page →

10,423

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	stdlib@go1.15.5	1.26.9

Open the chart page →

5,253

flyway-operatorflyway-operator

0.2.13

1 of 1 See more

flyway-operator flyway-operator 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	stdlib@go1.24.4	1.26.9

Open the chart page →

1,146

contentserverfoomo

0.8.0

1 of 1 See more

contentserver foomo 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
foomo/contentserver :1.21.2	8da4b33610c6	stdlib@go1.26.5	1.26.9

Open the chart page →

560

fqdn-controllerfqdn-controller

0.3.0

1 of 1 See more

fqdn-controller fqdn-controller 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/konsole-is/fqdn-controller :0.3.0	8d5d41ab22aa	stdlib@go1.27.0	1.26.9

Open the chart page →

290

free5gcfree5gc

0.1.3

12 of 12 See more

free5gc free5gc 0.1.3

12 of the 12 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	stdlib@go1.26.8	1.26.9
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.26.9
free5gc/ausf :v3.4.3	687ff4daf5da	stdlib@go1.21.8	1.26.9
free5gc/chf :v3.4.3	e2a4dd98a4ed	stdlib@go1.21.8	1.26.9
free5gc/nrf :v3.4.3	99e46b860efb	stdlib@go1.21.8	1.26.9
free5gc/nssf :v3.4.3	dfe8c68c04b4	stdlib@go1.21.8	1.26.9
free5gc/pcf :v3.4.3	f712e8ecd927	stdlib@go1.21.8	1.26.9
free5gc/smf :v3.4.3	60e38baa4b10	stdlib@go1.21.8	1.26.9
free5gc/udm :v3.4.3	2f68df062a50	stdlib@go1.21.8	1.26.9
free5gc/udr :v3.4.3	c0783bcdcbdc	stdlib@go1.21.8	1.26.9
free5gc/upf :v3.4.3	b6b362a39fdd	stdlib@go1.21.8	1.26.9
free5gc/webui :v3.4.3	9adeb18492cb	stdlib@go1.21.8	1.26.9

Open the chart page →

18,120

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	stdlib@go1.19.13	1.26.9
flomesh/fsm-manager :0.2.11	22f849c70b25	stdlib@go1.19.13	1.26.9

Open the chart page →

5,847

function-mesh-operatorfunction-mesh

0.2.45

1 of 1 See more

function-mesh-operator function-mesh 0.2.45

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
streamnative/function-mesh :v0.29.0	4176923db03c	stdlib@go1.25.13	1.26.9

Open the chart page →

486

adguard-homegabe565

0.3.25

1 of 2 See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.56	c64a0b37f7b9	stdlib@go1.23.5	1.26.9

Open the chart page →

1,362

home-assistantgabe565

0.17.0

1 of 1 See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :latest	3e6710a7ab2a	stdlib@go1.23.3	1.26.9

Open the chart page →

3,187

memosgabe565

0.17.0

1 of 1 See more

memos gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/usememos/memos :0.24.0	4723d86e6797	stdlib@go1.23.6	1.26.9

Open the chart page →

2,126

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	stdlib@go1.16.2	1.26.9

Open the chart page →

4,632

garage-uigarage-ui

0.13.0

1 of 1 See more

garage-ui garage-ui 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
noooste/garage-ui :v0.13.0	a1444fa10585	stdlib@go1.27.1	1.26.9

Open the chart page →

225

garmgarm

4.2.0

1 of 3 See more

garm garm 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/igrikus/garm-operator :4.2.0	9e24d8a6a3b2	stdlib@go1.26.2	1.26.9

Open the chart page →

1,208

gateboardgateboard

1.12.5

1 of 1 See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
udhos/gateboard :1.12.5	3acc0e7599bf	stdlib@go1.25.3	1.26.9

Open the chart page →

1,976

gateboard-discoverygateboard

1.9.5

1 of 1 See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
udhos/gateboard-discovery :1.9.5	5567c9363c4c	stdlib@go1.25.3	1.26.9

Open the chart page →

1,683

gboxgbox

1.0.5

1 of 2 See more

3,576

adguard-homegeek-cookbook

5.5.2

1 of 2 See more

adguard-home geek-cookbook 5.5.2

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.7	b9974aed13d0	stdlib@go1.17.9	1.26.9

Open the chart page →

2,765

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	stdlib@go1.13.15	1.26.9

Open the chart page →

4,822

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	stdlib@go1.16.8	1.26.9

Open the chart page →

19,166

filebrowsergeek-cookbook

1.4.2

1 of 1 See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.18.0	4fcd47af573c	stdlib@go1.16.9	1.26.9

Open the chart page →

4,662

focalboardgeek-cookbook

4.4.2

1 of 1 See more

focalboard geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.9.0	31078df7a3c8	stdlib@go1.16.5	1.26.9

Open the chart page →

5,302

gollumgeek-cookbook

3.4.2

1 of 3 See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
alpine/git :latest	a4bb51f1a355	stdlib@go1.26.8	1.26.9

Open the chart page →

5,451

influxdb-exportergeek-cookbook

1.2.2

1 of 1 See more

influxdb-exporter geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
prom/influxdb-exporter :v0.9.0	f63fd77c05ee	stdlib@go1.17.8	1.26.9

Open the chart page →

1,936

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.26.9

Open the chart page →

15,354

otel-collectorgeek-cookbook

1.2.2

1 of 1 See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	stdlib@go1.17.7	1.26.9

Open the chart page →

3,637

owncastgeek-cookbook

3.4.2

1 of 1 See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
gabekangas/owncast :0.0.7	97461aedb580	stdlib@go1.15.2	1.26.9

Open the chart page →

4,393

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	stdlib@go1.15.12	1.26.9

Open the chart page →

9,517

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	stdlib@go1.16.8	1.26.9

Open the chart page →

13,113

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	stdlib@go1.15	1.26.9

Open the chart page →

11,760

sambageek-cookbook

6.2.2

1 of 1 See more

samba geek-cookbook 6.2.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/samba :4.15.5	bed6f4ec2e82	stdlib@go1.17.2	1.26.9

Open the chart page →

3,282

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	stdlib@go1.18.4	1.26.9

Open the chart page →

14,440

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	stdlib@go1.13.15	1.26.9

Open the chart page →

17,837

uptime-kumageek-cookbook

1.4.2

1 of 1 See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.17.1	a4eab252e5a2	stdlib@go1.17.5	1.26.9

Open the chart page →

6,783

valheimgeek-cookbook

4.4.2

1 of 1 See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/lloesche/valheim-server :latest	19f55bcf7bb6	stdlib@go1.24.1	1.26.9

Open the chart page →

2,963

wireguardgeek-cookbook

1.4.2

1 of 1 See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	stdlib@go1.15	1.26.9

Open the chart page →

9,003

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.8	512bb8a21483	stdlib@go1.19.10	1.26.9
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.26.9

Open the chart page →

16,969

geo-checkergeo-checker

5.0.0

1 of 1 See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ymuski/geo-checker :5.0.0	5ba7fd8c7bdc	stdlib@go1.25.3	1.26.9

Open the chart page →

1,968

ghostfolioghostfolio

0.5.4

1 of 3 See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

3,830

gigapipegigapipe

0.3.0

1 of 1 See more

gigapipe gigapipe 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/metrico/gigapipe :v4.1.6	caeb2652ce5e	stdlib@go1.26.2	1.26.9

Open the chart page →

1,096

leantimegissilabs

1.3.0

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.21	8a16204dc96c	stdlib@go1.18.2	1.26.9

Open the chart page →

7,647

gitea-sonarqube-botgitea-sonarqube-bot

0.4.0

1 of 1 See more

gitea-sonarqube-bot gitea-sonarqube-bot 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
justusbunsi/gitea-sonarqube-bot :v0.4.0	18dd43b470d9	stdlib@go1.23.3	1.26.9

Open the chart page →

1,692

github-stsgithub-sts-helm

0.1.1

1 of 1 See more

github-sts github-sts-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/depthmark/github-sts :0.1.1	29fda68298da	stdlib@go1.27.1	1.26.9

Open the chart page →

264

gitops-reversergitops-reverser

0.52.0

1 of 1 See more

gitops-reverser gitops-reverser 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container image	Digest	Package	Fixed in
ghcr.io/configbutler/gitops-reverser :0.52.0	a44138514b30	stdlib@go1.27.1	1.26.9

Open the chart page →

213

Container images carrying it

6,105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	stdlib@go1.20.7	1.26.9	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	stdlib@go1.23.0	1.26.9	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	stdlib@go1.25.5	1.26.9	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	stdlib@go1.26.8	1.26.9	1
registry.k8s.io/csi-secrets-store/driver-crds :v1.6.1	cdacfdbe8966	stdlib@go1.26.5	1.26.9	1
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	stdlib@go1.24.4	1.26.9	1
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	stdlib@go1.22.12	1.26.9	1
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	stdlib@go1.22.12	1.26.9	1
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	stdlib@go1.24.4	1.26.9	1
registry.k8s.io/descheduler/descheduler :v0.37.0	88deef34ff5c	stdlib@go1.26.0	1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	stdlib@go1.21.7	1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	stdlib@go1.24.8	1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	stdlib@go1.22.3	1.26.9	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	stdlib@go1.18.3	1.26.9	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	stdlib@go1.23.11	1.26.9	1
registry.k8s.io/external-dns/external-dns :v0.23.0	1854499e2b08	stdlib@go1.27.0	1.26.9	1
registry.k8s.io/external-dns/external-dns :v0.22.0	5fdcaf7deb5c	stdlib@go1.26.6	1.26.9	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	stdlib@go1.19.9	1.26.9	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	stdlib@go1.25.1	1.26.9	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	stdlib@go1.19.4	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	stdlib@go1.24.6	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	stdlib@go1.24.6	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	stdlib@go1.22.0	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	stdlib@go1.18.2	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	stdlib@go1.18.2	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	stdlib@go1.20.1	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	stdlib@go1.20.1	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	stdlib@go1.18.2	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	stdlib@go1.22.8	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	stdlib@go1.23.4	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.2	050a34002d5b	stdlib@go1.24.6	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	stdlib@go1.25.1	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	stdlib@go1.21.6	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	stdlib@go1.18.2	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.0	aaafd456bda1	stdlib@go1.23.4	1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.1	e63459ec5965	stdlib@go1.24.6	1.26.9	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	stdlib@go1.19.6	1.26.9	1
registry.k8s.io/kro/kro :v0.9.4	eaf9fbaddd9d	stdlib@go1.26.3	1.26.9	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	stdlib@go1.19	1.26.9	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	stdlib@go1.21.7	1.26.9	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	stdlib@go1.19	1.26.9	1
registry.k8s.io/kubectl :1.33.4	261a9ed843eb	stdlib@go1.24.5	1.26.9	1
registry.k8s.io/kubectl :v1.32.7	3c5268158974	stdlib@go1.23.10	1.26.9	1
registry.k8s.io/kubectl :v1.35.9	436cbaa8a019	stdlib@go1.26.8	1.26.9	1
registry.k8s.io/kubectl :v1.34.0	497d298f891e	stdlib@go1.24.6	1.26.9	1
registry.k8s.io/kubectl :v1.35.6	4d8c68e8c2bf	stdlib@go1.25.11	1.26.9	1
registry.k8s.io/kubectl :v1.34.1	59bafa07ff3a	stdlib@go1.24.6	1.26.9	1