StackRadar

CVE-2026-94440

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,276
of 18,137 indexed, latest versions
Container images
6,115
deployed by those charts
Fix available
1 of 2
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,276 of 18,137 indexed charts deploy, on 6,115 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,115
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94440GO-2026-6608
Trending
Rank 7 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,276 by stars
ChartLatestAffected imagesRadar Score
apisixwenerme2.18.21 of 3See more

apisix wenerme 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.9

Open the chart page →

3,709
apisix-ingress-controllerwenerme1.4.01 of 2See more

apisix-ingress-controller wenerme 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.9

Open the chart page →

2,343
argocd-image-updaterwenerme1.3.21 of 1See more

argocd-image-updater wenerme 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.1a578e328e8cb
stdlib@go1.26.8
1.26.9

Open the chart page →

407
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.9

Open the chart page →

1,609
argo-workflowswenerme2.0.133 of 3See more

argo-workflows wenerme 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.593534a0d0ba3
stdlib@go1.26.5
1.26.9
quay.io/argoproj/argocli:v4.1.5e0824b55297b
stdlib@go1.26.5
1.26.9
quay.io/argoproj/workflow-controller:v4.1.5328307c9436f
stdlib@go1.26.5
1.26.9

Open the chart page →

966
athens-proxywenerme0.5.22 of 2See more

athens-proxy wenerme 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.26.9
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.26.9

Open the chart page →

6,759
cadencewenerme0.23.02 of 5See more

cadence wenerme 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.26.9
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
stdlib@go1.15.2
1.26.9

Open the chart page →

13,637
cert-managerwenerme1.21.24 of 4See more

cert-manager wenerme 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.9
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.9

Open the chart page →

866
consulwenerme2.0.42 of 2See more

consul wenerme 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hashicorp/consul:2.0.41c59f007df8e
stdlib@go1.26.7
1.26.9
hashicorp/consul-k8s-control-plane:2.0.49334d7f4bcf0
stdlib@go1.26.7
1.26.9

Open the chart page →

459
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
stdlib@go1.22.4
1.26.9

Open the chart page →

76,803
external-secretswenerme2.12.01 of 1See more

external-secrets wenerme 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.12.07a3c4f7e038f
stdlib@go1.26.6
1.26.9

Open the chart page →

270
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
stdlib@go1.16.2
1.26.9

Open the chart page →

4,433
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
stdlib@go1.17.3
1.26.9

Open the chart page →

4,513
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.9
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.9

Open the chart page →

10,548
gitlab-runnerwenerme0.94.01 of 1See more

gitlab-runner wenerme 0.94.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.5.0b7dead3b57cd
stdlib@go1.26.5
1.26.9

Open the chart page →

496
haproxy-ingresswenerme0.16.21 of 1See more

haproxy-ingress wenerme 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
stdlib@go1.26.8
1.26.9

Open the chart page →

243
harborwenerme1.19.25 of 8See more

harbor wenerme 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
stdlib@go1.26.4
1.26.9
goharbor/harbor-jobservice:v2.15.2f71a4452a095
stdlib@go1.26.4
1.26.9
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
stdlib@go1.26.4
1.26.9
goharbor/registry-photon:v2.15.2c4ebef61ceb5
stdlib@go1.26.4
1.26.9
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
stdlib@go1.26.4
1.26.9

Open the chart page →

3,440
juicefs-csi-driverwenerme0.33.05 of 5See more

juicefs-csi-driver wenerme 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.33.05e5edb62a010
stdlib@go1.25.14
1.26.9
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
stdlib@go1.25.14
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
stdlib@go1.20.5
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
stdlib@go1.20.5
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.12.05baeb4a6d7d5
stdlib@go1.21.5
1.26.9

Open the chart page →

12,356
kubernetes-dashboardwenerme7.14.04 of 5See more

kubernetes-dashboard wenerme 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
stdlib@go1.23.12
1.26.9
kubernetesui/dashboard-auth:1.4.053e9917898bf
stdlib@go1.23.12
1.26.9
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
stdlib@go1.23.4
1.26.9
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
stdlib@go1.23.9
1.26.9

Open the chart page →

5,076
kube-state-metricswenerme8.6.01 of 1See more

kube-state-metrics wenerme 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

322
logging-operatorwenerme3.17.101 of 1See more

logging-operator wenerme 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
stdlib@go1.17.13
1.26.9

Open the chart page →

2,551
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.26.9

Open the chart page →

17,283
mesherywenerme1.0.711 of 1See more

meshery wenerme 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
meshery/meshery:stable-latestb3816d0c691d
stdlib@go1.26.4
1.26.9

Open the chart page →

1,943
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.9

Open the chart page →

3,682
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.9

Open the chart page →

4,005
openebswenerme3.10.03 of 3See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.26.9
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.26.9
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.26.9

Open the chart page →

13,631
prometheuswenerme29.37.06 of 6See more

prometheus wenerme 29.37.0

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.9
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

1,651
prometheus-mysql-exporterwenerme2.15.01 of 1See more

prometheus-mysql-exporter wenerme 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus/mysqld-exporter:v0.20.0abed8dac117b
stdlib@go1.26.5
1.26.9

Open the chart page →

357
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
stdlib@go1.26.6
1.26.9

Open the chart page →

347
prometheus-node-exporterwenerme4.60.01 of 1See more

prometheus-node-exporter wenerme 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9

Open the chart page →

357
prometheus-pushgatewaywenerme3.9.11 of 1See more

prometheus-pushgateway wenerme 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9

Open the chart page →

213
prometheus-snmp-exporterwenerme9.18.11 of 1See more

prometheus-snmp-exporter wenerme 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
stdlib@go1.25.5
1.26.9

Open the chart page →

939
prometheus-statsd-exporterwenerme1.0.01 of 1See more

prometheus-statsd-exporter wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.26.9

Open the chart page →

1,333
rancherwenerme2.15.22 of 2See more

rancher wenerme 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.9
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.9

Open the chart page →

2,662
reloaderwenerme2.2.181 of 1See more

reloader wenerme 2.2.18

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/stakater/reloader:v1.4.22def2480040ad
stdlib@go1.26.8
1.26.9

Open the chart page →

209
sealed-secretswenerme2.20.01 of 1See more

sealed-secrets wenerme 2.20.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
stdlib@go1.26.8
1.26.9

Open the chart page →

213
seaweedfswenerme2.92.01 of 1See more

seaweedfs wenerme 2.92.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:2.92db095fe8a8d6
stdlib@go1.17.7
1.26.9

Open the chart page →

3,886
temporalwenerme0.15.16 of 13See more

temporal wenerme 0.15.1

6 of the 13 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.26.9
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.9
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.26.9
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.26.9
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.26.9
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.26.9

Open the chart page →

30,745
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.26.9

Open the chart page →

4,691
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
stdlib@go1.26.5
1.26.9
hashicorp/vault-k8s:1.7.655e27b080c9b
stdlib@go1.26.5
1.26.9

Open the chart page →

790
victoria-metrics-k8s-stackwenerme0.96.05 of 7See more

victoria-metrics-k8s-stack wenerme 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.9
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

1,740
victoria-metrics-operatorwenerme0.68.11 of 1See more

victoria-metrics-operator wenerme 0.68.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.9

Open the chart page →

213
wexa-studiowexa-studio1.2.07 of 15See more

wexa-studio wexa-studio 1.2.0

7 of the 15 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
hashicorp/vault:1.15.40b01ed3924e6
stdlib@go1.21.4
1.26.9
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.26.9
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.26.9
temporalio/ui:2.44.00b36e00aad30
stdlib@go1.24.11
1.26.9
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
stdlib@go1.21.4
1.26.9

Open the chart page →

17,173
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
stdlib@go1.25.6
1.26.9

Open the chart page →

1,046
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

4,431
ceph-csi-cephfswikimedia0.2.15 of 5See more

ceph-csi-cephfs wikimedia 0.2.1

5 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.14.2dc4bbac6efe1
stdlib@go1.23.4
1.26.9
quay.io/zncdatadev/sig-storage/csi-provisioner:v5.1.0672e45d6a556
stdlib@go1.22.5
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.9

Open the chart page →

6,928
ceph-csi-rbdwikimedia0.2.16 of 6See more

ceph-csi-rbd wikimedia 0.2.1

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.14.2dc4bbac6efe1
stdlib@go1.23.4
1.26.9
quay.io/zncdatadev/sig-storage/csi-provisioner:v5.1.0672e45d6a556
stdlib@go1.22.5
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.9

Open the chart page →

8,033
jaegerwikimedia3.1.24 of 4See more

jaeger wikimedia 3.1.2

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.9
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.9
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.9
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.26.9

Open the chart page →

12,702
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
stdlib@go1.20.5
1.26.9

Open the chart page →

2,786
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.26.9

Open the chart page →

4,025

Container images carrying it

6,115 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
stdlib@go1.21.4
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
stdlib@go1.24.7
1.26.9
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.1e58c98b4d28a
stdlib@go1.26.8
1.26.9
1
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.26.9
1
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
stdlib@go1.25.5
1.26.9
1
ghcr.io/peak-scale/capsule-argo-addon:0.8.064b8c5389b33
stdlib@go1.27.1
1.26.9
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
stdlib@go1.24.6
1.26.9
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
stdlib@go1.24.6
1.26.9
1
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
stdlib@go1.26.4
1.26.9
1
ghcr.io/peimanja/artifactory_exporter:v1.16.0d3e3929a3d2b
stdlib@go1.21.13
1.26.9
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
stdlib@go1.18.4
1.26.9
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
stdlib@go1.22.4
1.26.9
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
stdlib@go1.26.4
1.26.9
1
ghcr.io/pgdogdev/pgdog:v0.1.61611f2874dcf0
stdlib@go1.26.7
1.26.9
1
ghcr.io/phoeluga/synology-proxy-operator:0.0.9a0b74674d0e3
stdlib@go1.27.1
1.26.9
1
ghcr.io/pii-shield/pii-shield-operator:2.2.71d21a4b3683c
stdlib@go1.27.1
1.26.9
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
stdlib@go1.14.6
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.0b26d85c68aa8
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook:v0.12.0fbb6df9ad2af
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
stdlib@go1.26.7
1.26.9
1
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
stdlib@go1.27.1
1.26.9
1
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.9
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
stdlib@go1.26.0
1.26.9
1
ghcr.io/podtato-head/entry:latestc3d9d9c98be7
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/hat:latestde37ff39a4c0
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/left-arm:latest97596c95276a
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/left-leg:latest00bb31622b1e
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/right-arm:latest5f8f97a60558
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/right-leg:latest03e125b9279e
stdlib@go1.19
1.26.9
1
ghcr.io/port-labs/ocean-gateway:latest452eccee99ba
stdlib@go1.25.14
1.26.9
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
stdlib@go1.26.7
1.26.9
1
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.166c788f9cb8c4
stdlib@go1.26.6
1.26.9
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.26.9
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.9
1
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.9
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
stdlib@go1.20.11
1.26.9
1
ghcr.io/processone/ejabberd:latestec5cf7bc8562
stdlib@go1.25.14
1.26.9
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
stdlib@go1.23.4
1.26.9
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
stdlib@go1.22.5
1.26.9
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
stdlib@go1.25.1
1.26.9
1
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.9
1
ghcr.io/projecthelena/warden:v0.9.0a2df64f001f6
stdlib@go1.25.13
1.26.9
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
stdlib@go1.26.3
1.26.9
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
stdlib@go1.25.6
1.26.9
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.9
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.26.9
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.