StackRadar

CVE-2026-94439

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,276
of 18,137 indexed, latest versions
Container images
6,115
deployed by those charts
Fix available
1 of 2
affected packages

HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

Carried by container images the latest versions of 5,276 of 18,137 indexed charts deploy, on 6,115 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,115
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94439GO-2026-6613
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,276 by stars
ChartLatestAffected imagesRadar Score
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

33,417
eoloplanteoloplant1.0.03 of 7See more

eoloplant eoloplant 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.25.9
1.26.9
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

31,531
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

33,217
servereoloserverVerified publisher0.1.03 of 7See more

server eoloserver 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

37,737
download-from-github-repoeosc-lot-1Verified publisher0.1.01 of 2See more

download-from-github-repo eosc-lot-1 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/curl-jq:8156beafae7ca
stdlib@go1.21.10
1.26.9

Open the chart page →

1,587
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
stdlib@go1.24.8
1.26.9

Open the chart page →

73,574
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/mariadb:10.117db29378d4fd
stdlib@go1.24.6
1.26.9

Open the chart page →

2,874
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/mariadb:10.117db29378d4fd
stdlib@go1.24.6
1.26.9

Open the chart page →

2,874
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/mariadb:10.117db29378d4fd
stdlib@go1.24.6
1.26.9

Open the chart page →

2,874
postgresql-backupeosc-lot-1Verified publisher0.4.41 of 3See more

postgresql-backup eosc-lot-1 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
stdlib@go1.18.2
1.26.9

Open the chart page →

3,032
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
stdlib@go1.22.2
1.26.9

Open the chart page →

3,344
rabbitmq-usereosc-lot-1Verified publisher0.1.01 of 1See more

rabbitmq-user eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/curl-jq:8156beafae7ca
stdlib@go1.21.10
1.26.9

Open the chart page →

1,565
rsyslogeosc-lot-1Verified publisher0.2.11 of 2See more

rsyslog eosc-lot-1 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/logrotate:3-alpineb0e20d200f89
stdlib@go1.22.4
1.26.9

Open the chart page →

849
thanoseosc-lot-1Verified publisher0.2.01 of 1See more

thanos eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
stdlib@go1.24.0
1.26.9

Open the chart page →

1,384
thanos-bucketeosc-lot-1Verified publisher0.1.01 of 1See more

thanos-bucket eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
stdlib@go1.24.0
1.26.9

Open the chart page →

1,384
epinio-uiepinioVerified publisher1.7.21 of 1See more

epinio-ui epinio 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
stdlib@go1.20
1.26.9

Open the chart page →

2,607
upgrade-responderepinioVerified publisher0.2.02 of 5See more

upgrade-responder epinio 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
stdlib@go1.20.10
1.26.9
longhornio/upgrade-responder:v0.2.05875cef29348
stdlib@go1.17.13
1.26.9

Open the chart page →

9,355
admin-console-operatorepmdedpVerified publisher2.14.02 of 2See more

admin-console-operator epmdedp 2.14.0

2 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/admin-console-operator:2.14.090f9921d8d58
stdlib@go1.19.6
1.26.9
epamedp/edp-admin-console:2.14.0616c678ba3e7
stdlib@go1.18.3
1.26.9

Open the chart page →

6,228
cd-pipeline-operatorepmdedpVerified publisher2.32.01 of 1See more

cd-pipeline-operator epmdedp 2.32.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/cd-pipeline-operator:2.32.0fc858071b7a1
stdlib@go1.25.12
1.26.9

Open the chart page →

477
codebase-operatorepmdedpVerified publisher2.35.01 of 1See more

codebase-operator epmdedp 2.35.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.35.0295a008abcef
stdlib@go1.25.12
1.26.9

Open the chart page →

413
edp-argocd-operatorepmdedpVerified publisher0.2.01 of 1See more

edp-argocd-operator epmdedp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/edp-argocd-operator:0.2.0976a662a5e72
stdlib@go1.18.4
1.26.9

Open the chart page →

2,484
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
stdlib@go1.21.13
1.26.9

Open the chart page →

1,889
edp-installepmdedpOfficialVerified publisher3.15.05 of 7See more

edp-install epmdedp 3.15.0

5 of the 7 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/cd-pipeline-operator:2.32.0fc858071b7a1
stdlib@go1.25.12
1.26.9
epamedp/codebase-operator:2.35.0295a008abcef
stdlib@go1.25.12
1.26.9
epamedp/edp-tekton:0.27.088189f16f94b
stdlib@go1.25.12
1.26.9
epamedp/gitfusion:0.6.10b7eb7d5ca43
stdlib@go1.25.12
1.26.9
ghcr.io/kuberocketci/krci-cache:0.3.05f6cd61e6da6
stdlib@go1.25.8
1.26.9

Open the chart page →

3,834
edp-tektonepmdedpVerified publisher0.27.02 of 3See more

edp-tekton epmdedp 0.27.0

2 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/edp-tekton:0.27.088189f16f94b
stdlib@go1.25.12
1.26.9
ghcr.io/kuberocketci/krci-cache:0.3.05f6cd61e6da6
stdlib@go1.25.8
1.26.9

Open the chart page →

1,552
edp-tekton-interceptorepmdedpVerified publisher0.2.41 of 1See more

edp-tekton-interceptor epmdedp 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/edp-tekton:0.2.4924939850655
stdlib@go1.18.3
1.26.9

Open the chart page →

2,317
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.25.08de22fc5051c
stdlib@go1.25.12
1.26.9

Open the chart page →

1,643
gitfusionepmdedpVerified publisher0.6.11 of 1See more

gitfusion epmdedp 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/gitfusion:0.6.10b7eb7d5ca43
stdlib@go1.25.12
1.26.9

Open the chart page →

360
jenkins-operatorepmdedpVerified publisher2.15.31 of 3See more

jenkins-operator epmdedp 2.15.3

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/jenkins-operator:2.15.328ef56bc0ca3
stdlib@go1.20.11
1.26.9

Open the chart page →

2,804
keycloak-operatorepmdedpVerified publisher1.35.01 of 1See more

keycloak-operator epmdedp 1.35.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/keycloak-operator:1.35.0a5398eaa7b80
stdlib@go1.25.12
1.26.9

Open the chart page →

400
nexus-operatorepmdedpVerified publisher3.6.01 of 1See more

nexus-operator epmdedp 3.6.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/nexus-operator:3.6.09fede333ef27
stdlib@go1.25.12
1.26.9

Open the chart page →

392
perf-operatorepmdedpVerified publisher2.13.01 of 1See more

perf-operator epmdedp 2.13.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/perf-operator:2.13.0bd2079b7bfcb
stdlib@go1.19.6
1.26.9

Open the chart page →

1,903
reconcilerepmdedpVerified publisher2.12.01 of 1See more

reconciler epmdedp 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/reconciler:2.12.0d33e938b6d59
stdlib@go1.18.4
1.26.9

Open the chart page →

3,124
sonar-operatorepmdedpVerified publisher3.4.01 of 1See more

sonar-operator epmdedp 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/sonar-operator:3.4.0661d1648a49a
stdlib@go1.25.12
1.26.9

Open the chart page →

392
tekton-cacheepmdedpVerified publisher0.4.51 of 2See more

tekton-cache epmdedp 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/kuberocketci/krci-cache:0.3.05f6cd61e6da6
stdlib@go1.25.8
1.26.9

Open the chart page →

1,170
tekton-custom-taskepmdedpVerified publisher0.2.01 of 1See more

tekton-custom-task epmdedp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/tekton-custom-task:0.2.067d896676f45
stdlib@go1.24.2
1.26.9

Open the chart page →

1,060
codebase-operatorepmdedp-devVerified publisher2.12.0-MDTU-DDM-SNAPSHOT.101 of 1See more

codebase-operator epmdedp-dev 2.12.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
stdlib@go1.17.2
1.26.9

Open the chart page →

3,982
gerrit-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.21 of 1See more

gerrit-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
stdlib@go1.17.2
1.26.9

Open the chart page →

3,969
jenkins-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.11 of 1See more

jenkins-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/jenkins-operator:2.11.0-MDTU-DDM-SNAPSHOT.1ff25e9fe4419
stdlib@go1.17.2
1.26.9

Open the chart page →

3,406
keycloak-operatorepmdedp-devVerified publisher1.11.0-MDTU-DDM-SNAPSHOT.101 of 1See more

keycloak-operator epmdedp-dev 1.11.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
epamedp/keycloak-operator:1.11.0-MDTU-DDM-SNAPSHOT.105d352199e12e
stdlib@go1.17.2
1.26.9

Open the chart page →

3,373
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
stdlib@go1.16.7
1.26.9

Open the chart page →

9,798
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
stdlib@go1.16.7
1.26.9

Open the chart page →

9,798
erasereraser1.4.21 of 1See more

eraser eraser 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/eraser-dev/eraser-manager:v1.4.2cda6025d1152
stdlib@go1.26.5
1.26.9

Open the chart page →

379
yopassernail-yopass2.0.01 of 1See more

yopass ernail-yopass 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
jhaals/yopass:12.4.0b64a1a8ace1b
stdlib@go1.25.3
1.26.9

Open the chart page →

1,739
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

6,325
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
library/mariadb:12.2.2b1cb255a9939
stdlib@go1.24.6
1.26.9

Open the chart page →

8,132
etcd-defragetcd-defragVerified publisher0.28.11 of 1See more

etcd-defrag etcd-defrag 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.9

Open the chart page →

226
armiarmaethereum-helm-chartsVerified publisher0.1.21 of 2See more

armiarma ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ethpandaops/armiarma:master1a9c3264f0a9
stdlib@go1.21.8
1.26.9

Open the chart page →

1,842
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
stdlib@go1.25.11
1.26.9

Open the chart page →

3,631
authenticatoorethereum-helm-chartsVerified publisher0.1.01 of 1See more

authenticatoor ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ethpandaops/service-authenticatoor:main27b8e5ea3125
stdlib@go1.25.12
1.26.9

Open the chart page →

515
benchmarkoor-apiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-api ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94439.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
stdlib@go1.24.13
1.26.9

Open the chart page →

1,437

Container images carrying it

6,115 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-94439.

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.