StackRadar

CVE-2026-94440

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,323
of 18,117 indexed, latest versions
Container images
6,150
deployed by those charts
Fix available
1 of 2
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,323 of 18,117 indexed charts deploy, on 6,150 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,150
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94440GO-2026-6608
Trending
Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,323 by stars
ChartLatestAffected imagesRadar Score
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
stdlib@go1.25.0
1.26.9

Open the chart page →

2,967
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
stdlib@go1.22.12
1.26.9

Open the chart page →

2,576
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
stdlib@go1.20.3
1.26.9

Open the chart page →

4,496
dev-code-servercosmoVerified publisher0.0.72 of 2See more

dev-code-server cosmo 0.0.7

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/docker:dind7dcdfc4a2024
stdlib@go1.26.8
1.26.9
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
stdlib@go1.22.5
1.26.9

Open the chart page →

17,294
cospacecospace0.0.343 of 3See more

cospace cospace 0.0.34

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.9
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.9
ghcr.io/twigex/cospace:lateste5ecfd607e42
stdlib@go1.24.6
1.26.9

Open the chart page →

5,121
couchbase-monitor-stackcouchbaseVerified publisher2.1.22 of 5See more

couchbase-monitor-stack couchbase 2.1.2

2 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:8.1.5b7dd9cd0e59d
stdlib@go1.16.1
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.26.9

Open the chart page →

9,443
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
stdlib@go1.26.5
1.26.9

Open the chart page →

1,747
katibcowboysysopVerified publisher2.4.23 of 4See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
stdlib@go1.17.1
1.26.9
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
stdlib@go1.13.3
1.26.9
kubeflowkatib/katib-ui:v0.12.0129f0aaba976
stdlib@go1.17.1
1.26.9

Open the chart page →

10,144
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
stdlib@go1.14.14
1.26.9

Open the chart page →

5,488
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
stdlib@go1.24.5
1.26.9

Open the chart page →

2,490
mariadbcowboysysopVerified publisher20.4.21 of 1See more

mariadb cowboysysop 20.4.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
stdlib@go1.23.7
1.26.9

Open the chart page →

3,718
metacontrollercowboysysopVerified publisher1.2.21 of 1See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
metacontrollerio/metacontroller:v2.1.10336993b88e4
stdlib@go1.17.6
1.26.9

Open the chart page →

3,172
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
stdlib@go1.20.12
1.26.9

Open the chart page →

8,102
mpi-operatorcowboysysopVerified publisher1.2.21 of 1See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
stdlib@go1.15.13
1.26.9

Open the chart page →

3,890
notebook-controllercowboysysopVerified publisher1.1.21 of 1See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
stdlib@go1.15.15
1.26.9

Open the chart page →

3,929
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
stdlib@go1.13.1
1.26.9

Open the chart page →

7,060
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
stdlib@go1.24.4
1.26.9

Open the chart page →

3,285
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
stdlib@go1.14.9
1.26.9

Open the chart page →

3,518
crashloop-operatorcrashloop-operator0.0.61 of 1See more

crashloop-operator crashloop-operator 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
stdlib@go1.24.9
1.26.9

Open the chart page →

977
chalkularcrashoverride-helm-chartsVerified publisher0.0.81 of 1See more

chalkular crashoverride-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/chalkular-controller:v0.0.8d31986456626
stdlib@go1.26.6
1.26.9

Open the chart page →

279
pod-killercriblio1.0.01 of 1See more

pod-killer criblio 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9

Open the chart page →

226
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
stdlib@go1.14.4
1.26.9

Open the chart page →

3,578
oam-kubernetes-runtimecrossplane0.0.3-71.g0f235901 of 2See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
stdlib@go1.13.14
1.26.9

Open the chart page →

3,497
oam-kubernetes-runtime-legacycrossplane0.3.1-5.g11e18941 of 1See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
stdlib@go1.13.15
1.26.9

Open the chart page →

3,468
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
stdlib@go1.14.2
1.26.9

Open the chart page →

5,922
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9

Open the chart page →

4,338
electric-mailcryptexlabsVerified publisher0.0.12 of 5See more

electric-mail cryptexlabs 0.0.1

2 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
stdlib@go1.16.7
1.26.9
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.9

Open the chart page →

8,373
iam-zencryptexlabsVerified publisher0.12.232 of 4See more

iam-zen cryptexlabs 0.12.23

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.26.9

Open the chart page →

4,926
purple-piecryptexlabsVerified publisher0.0.12 of 4See more

purple-pie cryptexlabs 0.0.1

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
stdlib@go1.16.7
1.26.9
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.9

Open the chart page →

8,373
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
agent-sandboxcsghubVerified publisher0.5.61 of 1See more

agent-sandbox csghub 0.5.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.6dc23fb0d5624
stdlib@go1.26.6
1.26.9

Open the chart page →

250
csghubcsghubVerified publisher2.5.226 of 35See more

csghub csghub 2.5.2

26 of the 35 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
stdlib@go1.25.8
1.26.9
envoyproxy/gateway:v1.7.5156b7d32c73b
stdlib@go1.26.5
1.26.9
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.9
library/nats:2.12.150764f1952d72
stdlib@go1.25.12
1.26.9
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.9
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
stdlib@go1.19.8
1.26.9
opencsghq/csgbot:v0.6.9-ee7d0271e26521
stdlib@go1.24.4
1.26.9
opencsghq/csghub-portal:v2.5.1-eed28266bae753
stdlib@go1.23.3
1.26.9
opencsghq/csghub-server:v2.5.1-ee20fbb6ea62a9
stdlib@go1.26.0
1.26.9
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
stdlib@go1.24.10
1.26.9
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
stdlib@go1.22.7
1.26.9
opencsghq/gitlab-shell:v19.2.580a65ac370da
stdlib@go1.26.4
1.26.9
opencsghq/kube-state-metrics:v2.19.15ea147562ec8
stdlib@go1.26.4
1.26.9
opencsghq/lws:v0.6.1de15437db41b
stdlib@go1.24.0
1.26.9
opencsghq/minio:RELEASE.2025-09-07T16-13-09Z47f08843cf13
stdlib@go1.24.6
1.26.9
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.9
opencsghq/prometheus:v3.13.00aac0d04749e
stdlib@go1.26.4
1.26.9
opencsghq/prometheus-config-reloader:v0.92.144e6ec00729b
stdlib@go1.26.4
1.26.9
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.9
temporalio/admin-tools:1.32.0a9f84fb9a374
stdlib@go1.26.8
1.26.9
temporalio/server:1.32.0c3e752127759
stdlib@go1.26.8
1.26.9
gcr.io/knative-releases/knative.dev/operator/cmd/operator:v1.22.3733f21dc06f9
stdlib@go1.26.4
1.26.9
gcr.io/knative-releases/knative.dev/operator/cmd/webhook:v1.22.366ae76179a80
stdlib@go1.26.4
1.26.9
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
stdlib@go1.25.5
1.26.9
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
stdlib@go1.25.5
1.26.9
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
stdlib@go1.26.5
1.26.9

Open the chart page →

68,209
csgshipcsghubVerified publisher0.4.64 of 10See more

csgship csghub 0.4.6

4 of the 10 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
stdlib@go1.25.8
1.26.9
envoyproxy/gateway:v1.7.5156b7d32c73b
stdlib@go1.26.5
1.26.9
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.9
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.9

Open the chart page →

14,438
dataflowcsghubVerified publisher2.5.03 of 7See more

dataflow csghub 2.5.0

3 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.7.5156b7d32c73b
stdlib@go1.26.5
1.26.9
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.9
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.9

Open the chart page →

8,923
ocscsic-charts1.0.01 of 4See more

ocs csic-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

2,384
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.9

Open the chart page →

7,774
rtcsic-charts0.1.12 of 5See more

rt csic-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
stdlib@go1.19.6
1.26.9
library/postgres:13.11-bullseye5c265bf1fd30
stdlib@go1.18.2
1.26.9

Open the chart page →

17,870
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
stdlib@go1.18.9
1.26.9

Open the chart page →

16,152
csi-driver-ipfscsi-driver-ipfs0.2.06 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
stdlib@go1.26.4
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
stdlib@go1.24.6
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.9

Open the chart page →

6,167
ipfs-clustercsi-driver-ipfs0.2.02 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:v1.1.6a83266c524f1
stdlib@go1.26.3
1.26.9
ipfs/kubo:v0.41.00661819c2e09
stdlib@go1.26.2
1.26.9

Open the chart page →

2,775
cursor-admin-api-exportercursor-admin-api-exporterVerified publisher0.1.91 of 1See more

cursor-admin-api-exporter cursor-admin-api-exporter 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/matanbaruch/cursor-admin-api-exporter:0.1.8ba3a29fc479a
stdlib@go1.24.5
1.26.9

Open the chart page →

1,056
secrets-store-csi-driver-provider-awscustom0.2.01 of 1See more

secrets-store-csi-driver-provider-aws custom 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Open the chart page →

2,077
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest10fef10863a3
stdlib@go1.26.7
1.26.9

Open the chart page →

2,471
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm6432bd729ab859
stdlib@go1.26.7
1.26.9

Open the chart page →

486
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
stdlib@go1.26.4
1.26.9

Open the chart page →

1,092
irods-csi-drivercyverse0.12.24 of 4See more

irods-csi-driver cyverse 0.12.2

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
cyverse/irods-csi-driver:v0.12.2c5877ea80e0e
stdlib@go1.26.8
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.12cddcc716c19
stdlib@go1.20.5
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
stdlib@go1.17.3
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
stdlib@go1.20.5
1.26.9

Open the chart page →

8,122
domain-exporterd0main-exp0rter0.1.01 of 1See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
stdlib@go1.19.2
1.26.9

Open the chart page →

2,698
jupyterhubd4nVerified publisher3.3.73 of 7See more

jupyterhub d4n 3.3.7

3 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
stdlib@go1.22.5
1.26.9
quay.io/jupyterhub/k8s-image-awaiter:3.3.7ada70832a345
stdlib@go1.18.10
1.26.9
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
stdlib@go1.21.11
1.26.9

Open the chart page →

20,027
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:stableaee01ceceb6c
stdlib@go1.27.1
1.26.9

Open the chart page →

1,291
dagster-prometheus-exporterdagster-prometheus-exporterVerified publisher0.1.101 of 1See more

dagster-prometheus-exporter dagster-prometheus-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/hirofumitsuda/dagster-prometheus-exporter:0.6.147b0b6b2a8c1
stdlib@go1.26.8
1.26.9

Open the chart page →

161

Container images carrying it

6,150 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.9806d28c6fac0
stdlib@go1.26.8
1.26.9
1
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.9939ec6417e01
stdlib@go1.26.8
1.26.9
1
ghcr.io/thomiceli/opengist:1.15.1038d47937d3b
stdlib@go1.26.5
1.26.9
1
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
stdlib@go1.19
1.26.9
1
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.9
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
stdlib@go1.24.3
1.26.9
1
ghcr.io/tmusial99/local-path-exporter:1.1.082476692c680
stdlib@go1.26.4
1.26.9
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
stdlib@go1.25.14
1.26.9
1
ghcr.io/topolvm/pvc-autoresizer:0.21.2d7885d57f6f9
stdlib@go1.25.14
1.26.9
1
ghcr.io/topolvm/topolvm-with-sidecar:0.42.0719ab11d974a
stdlib@go1.26.8
1.26.9
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
stdlib@go1.22.8
1.26.9
1
ghcr.io/traefik/hub-manager:v0.45.371002c4f48cb
stdlib@go1.26.0
1.26.9
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
stdlib@go1.21.8
1.26.9
1
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
stdlib@go1.25.8
1.26.9
1
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13c5153b5f079c
stdlib@go1.27.1
1.26.9
1
ghcr.io/trianalab/pacto/operator:5.4.2fc2c05866911
stdlib@go1.26.6
1.26.9
1
ghcr.io/trickstercache/trickster:2d7a4d4f2b10f
stdlib@go1.27.1
1.26.9
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
stdlib@go1.23.7
1.26.9
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
stdlib@go1.23.7
1.26.9
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
stdlib@go1.23.7
1.26.9
1
ghcr.io/tsouza/cerberus:1.22.0d181d9145aac
stdlib@go1.26.2
1.26.9
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
stdlib@go1.22.8
1.26.9
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
stdlib@go1.24.6
1.26.9
1
ghcr.io/twin/k8s-ttl-controller:v1.4.00525a7def93d
stdlib@go1.24.1
1.26.9
1
ghcr.io/twin/lighthouse:v0.0.45aeda2ea2ba2
stdlib@go1.22.3
1.26.9
1
ghcr.io/universal-backup-operator/backup-operator:1.2.306292b289dda
stdlib@go1.22.4
1.26.9
1
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
stdlib@go1.24.9
1.26.9
1
ghcr.io/upcloudltd/upcloud-csi5af91c663788
stdlib@go1.24.13
1.26.9
1
ghcr.io/upcloud-tools/upcloud-csi:v3.5.0a7ed150ed7e1
stdlib@go1.26.6
1.26.9
1
ghcr.io/uptimy/agent:0.1.8f10c02ed4568
stdlib@go1.27.1
1.26.9
1
ghcr.io/usememos/memos:0.24.04723d86e6797
stdlib@go1.23.6
1.26.9
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
stdlib@go1.26.3
1.26.9
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
stdlib@go1.18.3
1.26.9
1
ghcr.io/valkey-io/valkey-operator:v0.7.1bfa3be0b1173
stdlib@go1.26.8
1.26.9
1
ghcr.io/vavallee/bindery:v1.35.0c4ebfc5470e1
stdlib@go1.26.6
1.26.9
1
ghcr.io/vedooo/reactive-policy:0.4.1d92eda891c91
stdlib@go1.26.7
1.26.9
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
stdlib@go1.19.3
1.26.9
1
ghcr.io/virtuos/s3-exporter:1.0.26bee875150a0
stdlib@go1.26.7
1.26.9
1
ghcr.io/voidmind-io/voidllm:0.0.30c141d554edb0
stdlib@go1.26.5
1.26.9
1
ghcr.io/vojtechpastyrik/muthur:0.10.0b5a06a6e13b9
stdlib@go1.26.1
1.26.9
1
ghcr.io/vojtechpastyrik/muthur-collector:0.11.00a580fe3a032
stdlib@go1.26.1
1.26.9
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
stdlib@go1.25.6
1.26.9
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
stdlib@go1.25.5
1.26.9
1
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
stdlib@go1.20.5
1.26.9
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
stdlib@go1.23.1
1.26.9
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
stdlib@go1.25.8
1.26.9
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
stdlib@go1.21.1
1.26.9
1
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
stdlib@go1.22.2
1.26.9
1
ghcr.io/vvanouytsel/jetspotter:1.49.0d6f9149a36db
stdlib@go1.23.12
1.26.9
1
ghcr.io/wachd/wachd:0.4.1805b05c56da94
stdlib@go1.25.10
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.