CVE-2026-94440

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 33rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,221; of 18,137 indexed, latest versions
Container images: 6,033; deployed by those charts
Fix available: 1 of 2; affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,221 of 18,137 indexed charts deploy, on 6,033 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9	6,033
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-94440 GO-2026-6608
Trending: Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,221 by stars

Chart

Latest

Affected images

Radar Score

calicoromholdings

0.1.1

4 of 4 See more

calico romholdings 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	stdlib@go1.15.2	1.26.9
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	stdlib@go1.15.2	1.26.9
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	stdlib@go1.15.2	1.26.9
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.26.9

Open the chart page →

14,898

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	stdlib@go1.17.6	1.26.9

Open the chart page →

8,108

devtron-enterpriseromholdings

48.0.0

22 of 28 See more

devtron-enterprise romholdings 48.0.0

22 of the 28 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.26.9
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	stdlib@go1.24.0	1.26.9
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	stdlib@go1.25.0	1.26.9
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	stdlib@go1.24.13	1.26.9
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	stdlib@go1.25.0	1.26.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.26.9
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	stdlib@go1.25.5	1.26.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	stdlib@go1.25.5	1.26.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	stdlib@go1.14.15	1.26.9
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.26.9
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	stdlib@go1.25.0	1.26.9
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	stdlib@go1.25.5	1.26.9
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	stdlib@go1.25.5	1.26.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.26.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.26.9
quay.io/devtron/nats-box :latest	48cdd3054b20	stdlib@go1.19.2	1.26.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.26.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.26.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.26.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.26.9

Open the chart page →

89,731

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	stdlib@go1.15.7	1.26.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	stdlib@go1.20.7	1.26.9

Open the chart page →

7,011

devtron-logs-dumpromholdings

0.1.0

1 of 1 See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	stdlib@go1.20.4	1.26.9

Open the chart page →

5,942

devtron-operatorromholdings

0.23.3

10 of 11 See more

devtron-operator romholdings 0.23.3

10 of the 11 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.26.9
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	stdlib@go1.25.0	1.26.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.26.9
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	stdlib@go1.25.6	1.26.9
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.26.9
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	stdlib@go1.25.0	1.26.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.26.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.26.9

Open the chart page →

42,622

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	stdlib@go1.17.3	1.26.9

Open the chart page →

13,529

discord-alertmanagerromholdings

0.10.0

1 of 1 See more

discord-alertmanager romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.26.9

Open the chart page →

1,808

jaeger-all-in-one-opentelemetryromholdings

0.1.2

1 of 1 See more

jaeger-all-in-one-opentelemetry romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector :latest	310a800ad69e	stdlib@go1.26.8	1.26.9

Open the chart page →

225

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.26.9

Open the chart page →

2,089

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	stdlib@go1.17	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	stdlib@go1.16	1.26.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	stdlib@go1.16.7	1.26.9

Open the chart page →

12,203

migrantromholdings

0.0.3

1 of 1 See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	76cc2074cb66	stdlib@go1.26.7	1.26.9

Open the chart page →

369

migration-incluster-cdromholdings

0.10.0

1 of 1 See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.26.9

Open the chart page →

5,070

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	stdlib@go1.16.10	1.26.9

Open the chart page →

3,521

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	stdlib@go1.18.10	1.26.9

Open the chart page →

2,003

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	stdlib@go1.19.7	1.26.9

Open the chart page →

2,326

rommromm-helm-chart

1.5.5

1 of 3 See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/mariadb :11	6422478cb8e1	stdlib@go1.24.6	1.26.9

Open the chart page →

3,866

pagesronan-pages

1.0.0

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.26.9

Open the chart page →

2,689

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.26.9

Open the chart page →

2,666

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	stdlib@go1.15.15	1.26.9

Open the chart page →

3,353

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.26.9
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.26.9

Open the chart page →

5,355

acme-linoderotational

1.0.4

1 of 1 See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	stdlib@go1.25.5	1.26.9

Open the chart page →

1,788

beaconrotational

0.2.0

1 of 1 See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/beacon :0.2.0	f8d8b694515a	stdlib@go1.26.5	1.26.9

Open the chart page →

1,498

genoarotational

1.4.0

1 of 1 See more

genoa rotational 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/genoa :1.2.0	3ab583519215	stdlib@go1.26.8	1.26.9

Open the chart page →

1,377

geopingrotational

1.3.2

1 of 1 See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/geoping :1.3.0	34bcb6fc3cb7	stdlib@go1.26.1	1.26.9

Open the chart page →

2,200

honurotational

0.5.3

1 of 1 See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/honu :0.5.0	69fd30c2e31c	stdlib@go1.25.1	1.26.9

Open the chart page →

2,803

rotational-apirotational

1.3.1

1 of 1 See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	stdlib@go1.25.8	1.26.9

Open the chart page →

2,188

vanityrotational

1.2.2

1 of 1 See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rotationalio/vanity :1.2.0	d77350f69b45	stdlib@go1.25.8	1.26.9

Open the chart page →

1,706

routehub-serverroutehub-helm

1.0.1

2 of 3 See more

routehub-server routehub-helm 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.26.9
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

8,334

routr-connectroutr

0.4.3

1 of 10 See more

routr-connect routr 0.4.3

1 of the 10 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
fonoster/routr-edgeport :2.13.6	d08a8a574a50	stdlib@go1.21.0	1.26.9

Open the chart page →

12,576

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.26.9
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.26.9
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	stdlib@go1.21.3	1.26.9
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.26.9
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.26.9

Open the chart page →

11,805

noderss3

0.7.2

1 of 3 See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.26.9

Open the chart page →

6,068

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.26.9

Open the chart page →

1,807

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.26.9

Open the chart page →

1,807

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.26.9

Open the chart page →

2,654

vsl-chainrss3

0.1.0

4 of 7 See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.26.9
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.26.9
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	stdlib@go1.21.3	1.26.9
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.26.9

Open the chart page →

8,776

vsl-rpcrss3

0.3.4

2 of 4 See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.26.9
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	stdlib@go1.21.3	1.26.9

Open the chart page →

6,228

vsl-sequencerrss3

0.3.4

2 of 4 See more

vsl-sequencer rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.26.9
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	stdlib@go1.21.3	1.26.9

Open the chart page →

6,228

rstream-operatorrstream-operator

0.5.2

1 of 1 See more

rstream-operator rstream-operator 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
rstream/rstream-operator :latest	c7615b3e3f85	stdlib@go1.26.5	1.26.9

Open the chart page →

527

adguard-homertomik-helm-charts

0.0.2

1 of 1 See more

adguard-home rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.79	aba9e3bf0613	stdlib@go1.26.6	1.26.9

Open the chart page →

424

checkmkrtomik-helm-charts

0.1.0

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	stdlib@go1.26.3	1.26.9

Open the chart page →

9,509

donetickrtomik-helm-charts

1.1.0

1 of 1 See more

donetick rtomik-helm-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
donetick/donetick :v0.1.79	a1cc21dd5a37	stdlib@go1.24.13	1.26.9

Open the chart page →

1,240

karakeeprtomik-helm-charts

0.0.1

1 of 3 See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	stdlib@go1.23.10	1.26.9

Open the chart page →

6,341

paperless-ngxrtomik-helm-charts

0.0.5

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	stdlib@go1.24.4	1.26.9

Open the chart page →

12,947

recipyartomik-helm-charts

0.0.2

1 of 2 See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
reaper99/recipya :v1.2.2	7f7ec3aeb88c	stdlib@go1.22.0	1.26.9

Open the chart page →

3,013

cloudflare-tunnelrubxkube

0.3.3

1 of 1 See more

cloudflare-tunnel rubxkube 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.6.1	6d91c121b803	stdlib@go1.26.4	1.26.9

Open the chart page →

1,092

gitearubxkube

1.2.3

1 of 1 See more

gitea rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
gitea/gitea :1.27.1	34e3f6b75f5c	stdlib@go1.26.5-X:jsonv2	1.26.9

Open the chart page →

1,020

glancerubxkube

0.1.1

1 of 1 See more

glance rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
glanceapp/glance :v0.8.5	32ab73d80f2b	stdlib@go1.26.3	1.26.9

Open the chart page →

1,136

gotifyrubxkube

1.3.4

1 of 1 See more

gotify rubxkube 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :3.1.1	44fc5bbd1c06	stdlib@go1.26.0	1.26.9

Open the chart page →

734

Container images carrying it

6,033 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	stdlib@go1.25.8	1.26.9	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	stdlib@go1.24.7	1.26.9	1
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	stdlib@go1.24.7	1.26.9	1
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	stdlib@go1.24.5	1.26.9	1
quay.io/cilium/operator-generic :v1.17.14	773886ec9337	stdlib@go1.25.8	1.26.9	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	stdlib@go1.21.6	1.26.9	1
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	stdlib@go1.24.7	1.26.9	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	stdlib@go1.22.2	1.26.9	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	stdlib@go1.19.2	1.26.9	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	stdlib@go1.18.3	1.26.9	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	stdlib@go1.18.1	1.26.9	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	stdlib@go1.19.10	1.26.9	1
quay.io/codefresh/dind :3.0.25	0885ab519dac	stdlib@go1.26.5	1.26.9	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	stdlib@go1.23.8	1.26.9	1
quay.io/coreos/etcd :v3.5.11	842975891182	stdlib@go1.20.12	1.26.9	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	stdlib@go1.22.7	1.26.9	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	stdlib@go1.16.3	1.26.9	1
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	stdlib@go1.25.8	1.26.9	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	stdlib@go1.23.0	1.26.9	1
quay.io/eclipse/che-operator :7.123.0	d926b6d183a1	stdlib@go1.26.5	1.26.9	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	stdlib@go1.16.6	1.26.9	1
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	stdlib@go1.26.6	1.26.9	1
quay.io/enix/topomatik :1.3.1	d9f0bec83ef0	stdlib@go1.26.3	1.26.9	1
quay.io/enix/x509-certificate-exporter :4.2.0	afef14dc3862	stdlib@go1.26.5	1.26.9	1
quay.io/enix/zfs-exporter :2.3.12	23b053f1cbd0	stdlib@go1.24.2	1.26.9	1
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	stdlib@go1.23.6	1.26.9	1
quay.io/evl.ms/pgbouncer-exporter :0.4.0	74f919b78494	stdlib@go1.14.4	1.26.9	1
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	stdlib@go1.21.1	1.26.9	1
quay.io/fairwinds/docker-demo :1.4.0	d53cb940196c	stdlib@go1.20.4	1.26.9	1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	stdlib@go1.25.7	1.26.9	1
quay.io/fiware/dsba-pdp :0.3.2	0cca71497e9e	stdlib@go1.18.10	1.26.9	1
quay.io/fiware/envoy-configmap-updater :0.4.3	9eabc3f3e1e2	stdlib@go1.18.5	1.26.9	1
quay.io/fiware/ishare-auth-provider :0.4.3	158108f70f95	stdlib@go1.18.5	1.26.9	1
quay.io/fiware/vcverifier :6.24.0	7260751de292	stdlib@go1.26.8	1.26.9	1
quay.io/fiware/vcverifier :2.0.1	cd36290dc849	stdlib@go1.19.9	1.26.9	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	stdlib@go1.20.2	1.26.9	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	stdlib@go1.17.12	1.26.9	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	stdlib@go1.17.12	1.26.9	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	stdlib@go1.17.12	1.26.9	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	stdlib@go1.18.4	1.26.9	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	stdlib@go1.18.4	1.26.9	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	stdlib@go1.18.4	1.26.9	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	stdlib@go1.18.4	1.26.9	1
quay.io/fossa/postgres :17.2-1	5af45ac79f38	stdlib@go1.18.2	1.26.9	1
quay.io/galexrt/dellhw_exporter :v2.0.0-rc.1	8a1361fa38c1	stdlib@go1.23.2	1.26.9	1
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	stdlib@go1.25.8	1.26.9	1
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	stdlib@go1.20.5	1.26.9	1
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	stdlib@go1.17.1	1.26.9	1
quay.io/giantswarm/helloworld :0.2.0	7a07ee730305	stdlib@go1.16.7	1.26.9	1
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	stdlib@go1.19.12	1.26.9	1