StackRadar

CVE-2026-94440

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,544
of 18,087 indexed, latest versions
Container images
6,392
deployed by those charts
Fix available
1 of 3
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,544 of 18,087 indexed charts deploy, on 6,392 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,392
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r3no fix listed1
OSV records
CGA-2wpp-p453-fwrjDEBIAN-CVE-2026-94440GO-2026-6608
Also known as
CGA-8235-g5m3-vf73, CGA-frxc-9943-gmf8, CGA-gmgx-vgc6-mmw7, CGA-gw93-g38m-27f8, CGA-j2rm-vrxp-7gvc
Trending
Rank 8 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,544 by stars
ChartLatestAffected imagesRadar Score
podsyncmy0nVerified publisher1.5.41 of 2See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
tdeutsch/podsync:v2.4.2b67186f4c9a5
stdlib@go1.19.3
1.26.9

Open the chart page →

2,822
maddymyaVerified publisher22.4.121 of 2See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
foxcpp/maddy:0.7.16ab538e2f28b
stdlib@go1.19.13
1.26.9

Open the chart page →

2,056
registrymyaVerified publisher22.4.111 of 1See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
distribution/distribution:2.8.3f84b2078238f
stdlib@go1.20.8
1.26.9

Open the chart page →

1,379
simple-gowikimy-helm-chartsVerified publisher0.2.01 of 1See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
forchaladtest/mygowiki:1.0.170827eaecad1
stdlib@go1.22.6
1.26.9

Open the chart page →

768
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
stdlib@go1.18.1
1.26.9

Open the chart page →

4,740
beszelnatpnk-k8s1.0.02 of 2See more

beszel natpnk-k8s 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
henrygd/beszel:latest6b39a8b64f9b
stdlib@go1.27.1
1.26.9
henrygd/beszel-agent:latestf27b1aa2c684
stdlib@go1.27.1
1.26.9

Open the chart page →

260
nats-account-servernatsVerified publisher0.8.11 of 1See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.9

Open the chart page →

3,605
surveyornatsVerified publisher0.20.91 of 1See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
natsio/nats-surveyor:0.9.9104a3e938b23
stdlib@go1.26.1
1.26.9

Open the chart page →

1,188
natz-operatornatz-operatorVerified publisher0.9.51 of 1See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
stdlib@go1.23.3
1.26.9

Open the chart page →

1,203
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:latest5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

1,853
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
stdlib@go1.21.8
1.26.9
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
stdlib@go1.18.2
1.26.9
bitnamilegacy/minio:2023.12.230b60b6565ab2
stdlib@go1.20.13
1.26.9
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
stdlib@go1.18.4
1.26.9
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
stdlib@go1.21.7
1.26.9
bitnamilegacy/rabbitmq:3.10.88f7161d8ce19
stdlib@go1.16.7
1.26.9

Open the chart page →

45,509
netbox-operatornetboxOfficialVerified publisher1.2.1911 of 1See more

netbox-operator netbox 1.2.191

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox-operator:0.2.73f9ded692beac
stdlib@go1.27.1
1.26.9

Open the chart page →

124
netobserv-operatornetobservOfficialVerified publisher2.0.11 of 1See more

netobserv-operator netobserv 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/netobserv/network-observability-operatordigest-pinnedc05814f8d633
stdlib@go1.26.8
1.26.9

Open the chart page →

154
monitorneuvectorchartsVerified publisher2.11.21 of 1See more

monitor neuvectorcharts 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
neuvector/prometheus-exporter:1.0.19ab4e4332053a
stdlib@go1.26.8
1.26.9

Open the chart page →

186
cluster-issuersnginx-cert-charts0.3.04 of 4See more

cluster-issuers nginx-cert-charts 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.19.3eb1df56668b6
stdlib@go1.25.6
1.26.9
quay.io/jetstack/cert-manager-controller:v1.19.3a07125af5e83
stdlib@go1.25.6
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.19.3e51a06251338
stdlib@go1.25.6
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.19.32625754083d5
stdlib@go1.25.6
1.26.9

Open the chart page →

3,613
ngrok-operatorngrok-operator1.1.01 of 2See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
stdlib@go1.16.15
1.26.9

Open the chart page →

2,869
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
stdlib@go1.17.11
1.26.9

Open the chart page →

12,936
gotifynicholaswildeVerified publisher1.0.01 of 1See more

gotify nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
gotify/server-arm7:2.0.23d91e302ad1d0
stdlib@go1.16
1.26.9

Open the chart page →

3,895
installernicholaswildeVerified publisher1.0.01 of 1See more

installer nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/installer:version-0.2.947d8ecd310a9
stdlib@go1.15.3
1.26.9

Open the chart page →

2,220
shiorinicholaswildeVerified publisher1.0.11 of 1See more

shiori nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/shiori:version-v1.5.0e0645abe6777
stdlib@go1.16.5
1.26.9

Open the chart page →

3,420
writefreelynicholaswildeVerified publisher1.0.01 of 1See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
stdlib@go1.15.12
1.26.9

Open the chart page →

9,416
node-exporternode-exporterVerified publisher0.1.101 of 1See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
prom/node-exporter:v1.6.0d2e48098c364
stdlib@go1.20.4
1.26.9

Open the chart page →

1,864
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.26.9

Open the chart page →

15,782
nri-resource-policy-balloonsnri-pluginsOfficialVerified publisher0.14.01 of 1See more

nri-resource-policy-balloons nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.14.0a8c8297c7274
stdlib@go1.26.0
1.26.9

Open the chart page →

616
nri-resource-policy-topology-awarenri-pluginsOfficialVerified publisher0.14.01 of 1See more

nri-resource-policy-topology-aware nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware:v0.14.0e2443833726a
stdlib@go1.26.0
1.26.9

Open the chart page →

616
nutanix-csi-snapshotnutanix-helm-releasesOfficialVerified publisher8.3.01 of 1See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.26.9

Open the chart page →

843
nvidia-gpu-exporternvidia-gpu-exporterVerified publisher2.15.11 of 1See more

nvidia-gpu-exporter nvidia-gpu-exporter 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:1.15.17aee2d42836a
stdlib@go1.27.1
1.26.9

Open the chart page →

441
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.34 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
stdlib@go1.24.7
1.26.9
natsio/nats-box:0.18.0abdc9f9f0120
stdlib@go1.24.3
1.26.9
natsio/nats-server-config-reloader:0.19.181edf32a3680
stdlib@go1.24.5
1.26.9
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
stdlib@go1.24.3
1.26.9

Open the chart page →

7,871
oadaoadaVerified publisher5.0.61 of 11See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
stdlib@go1.19.3
1.26.9

Open the chart page →

15,388
opengistobeoneVerified publisher1.1.61 of 1See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/thomiceli/opengist:1.15.1038d47937d3b
stdlib@go1.26.5
1.26.9

Open the chart page →

713
transfer.shobeoneVerified publisher1.0.51 of 1See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
stdlib@go1.20.11
1.26.9

Open the chart page →

1,778
oci-native-ingress-controlleroci-native-ingress-controller1.0.01 of 1See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
amaanx86/oci-native-ingress-controller:masterd7206ac7a319
stdlib@go1.23.7
1.26.9

Open the chart page →

861
ociregistryociregistryVerified publisher1.20.01 of 1See more

ociregistry ociregistry 1.20.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
stdlib@go1.27.1
1.26.9

Open the chart page →

128
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.9

Open the chart page →

1,751
oom-oracleoom-oracleVerified publisher0.1.21 of 1See more

oom-oracle oom-oracle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle:0.1.2538ed30a4c62
stdlib@go1.26.8
1.26.9

Open the chart page →

124
open5gs-hssopen5gs-hssVerified publisher2.3.31 of 2See more

open5gs-hss open5gs-hss 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9

Open the chart page →

617
open5gs-pcrfopen5gs-pcrfVerified publisher2.3.31 of 2See more

open5gs-pcrf open5gs-pcrf 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9

Open the chart page →

617
open5gs-scpopen5gs-scpVerified publisher2.3.41 of 2See more

open5gs-scp open5gs-scp 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9

Open the chart page →

617
open5gs-udropen5gs-udrVerified publisher2.3.41 of 2See more

open5gs-udr open5gs-udr 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9

Open the chart page →

617
open5gs-webuiopen5gs-webuiVerified publisher2.3.31 of 2See more

open5gs-webui open5gs-webui 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.26.9

Open the chart page →

7,129
openccuopenccuVerified publisher3.89.111 of 1See more

openccu openccu 3.89.11

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
stdlib@go1.26.6
1.26.9

Open the chart page →

1,846
kruiseopenkruise1.9.12 of 2See more

kruise openkruise 1.9.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.9
openkruise/kruise-manager:v1.9.1f81ae78a36a4
stdlib@go1.23.9
1.26.9

Open the chart page →

2,709
openobserveopenobserve1.0.25 of 6See more

openobserve openobserve 1.0.2

5 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/nats:2.14.2-alpine952d157e28d5
stdlib@go1.26.3
1.26.9
natsio/nats-box:0.19.7ffce8bd10338
stdlib@go1.26.3
1.26.9
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.9
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
stdlib@go1.26.3
1.26.9
openfga/openfga:latest9cf9a20af32a
stdlib@go1.26.8
1.26.9

Open the chart page →

4,156
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
stdlib@go1.25.0
1.26.9

Open the chart page →

1,409
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
stdlib@go1.25.7
1.26.9

Open the chart page →

6,745
openstack-kamaji-clusteropenstack-kamaji-clusterVerified publisher0.2.41 of 1See more

openstack-kamaji-cluster openstack-kamaji-cluster 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
stdlib@go1.24.7
1.26.9

Open the chart page →

1,183
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.310 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.3

10 of the 34 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
stdlib@go1.26.7
1.26.9
jaegertracing/jaeger:2.20.046a886260e04
stdlib@go1.26.5
1.26.9
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9
otel/opentelemetry-collector-contrib:0.160.0799dc6cf12c9
stdlib@go1.26.8
1.26.9
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
stdlib@go1.25.10
1.26.9
ghcr.io/open-telemetry/demo:3.1.0-cart17c881cf29af
stdlib@go1.26.8
1.26.9
ghcr.io/open-telemetry/demo:3.1.0-opamp-server3b6c6220bf9c
stdlib@go1.27.1
1.26.9
ghcr.io/open-telemetry/demo:3.1.0-product-catalog7578cbf65fa4
stdlib@go1.27.1
1.26.9
ghcr.io/open-telemetry/demo:3.1.0-checkoutd4448ff54129
stdlib@go1.26.8
1.26.9
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.9

Open the chart page →

26,079
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
stdlib@go1.23.7
1.26.9

Open the chart page →

8,097
openvox-operatoropenvox-operatorVerified publisher0.14.01 of 1See more

openvox-operator openvox-operator 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/slauger/openvox-operator:0.14.0178b6dab6c8c
stdlib@go1.27.1
1.26.9

Open the chart page →

147
opikopikOfficialVerified publisher2.2.966 of 12See more

opik opik 2.2.96

6 of the 12 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
stdlib@go1.25.5
1.26.9
altinity/clickhouse-operator:0.27.1a802b3a19d20
stdlib@go1.26.3
1.26.9
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.9
library/mysql:8.4.2ac80b6e09e5b
stdlib@go1.18.2
1.26.9
library/zookeeper:3.9.4dfa9ba46d14b
stdlib@go1.18.1
1.26.9
ghcr.io/comet-ml/opik/opik-python-backend:2.2.967cd6d608b6a4
stdlib@go1.26.8
1.26.9

Open the chart page →

15,883

Container images carrying it

6,392 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.26.9
2
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.26.9
2
library/zookeeper:3.9.5e6b279d01350
stdlib@go1.18.1
1.26.9
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
stdlib@go1.22.5
1.26.9
2
linuxserver/cloud9:latest:version-1.29.245c5fe102ff3
stdlib@go1.17.11
1.26.9
2
listmonk/listmonk:v2.1.0d2eac77ddfad
stdlib@go1.17.6
1.26.9
2
listmonk/listmonk:latest:v6.2.0f535d59e1499
stdlib@go1.26.1
1.26.9
2
localstack/localstack-pro:latest801a3dff7f6a
stdlib@go1.27.1-X:nojsonv2
1.26.9
2
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.26.9
2
louislam/uptime-kuma:1.23.1396510915e6be
stdlib@go1.19.6
1.26.9
2
louislam/uptime-kuma:2.3.29aeb4e51d038
stdlib@go1.20.5
1.26.9
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.9
2
louislam/uptime-kuma:2.5.5c74379ac4509
stdlib@go1.20.5
1.26.9
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
stdlib@go1.24.5
1.26.9
2
matthiasluedtke/iconserver:v3.16.0661d607b0fbc
stdlib@go1.21.1
1.26.9
2
maxrocketinternet/datadog-controller:0.1a867315facf8
stdlib@go1.13.15
1.26.9
2
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
stdlib@go1.14
1.26.9
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
stdlib@go1.15.2
1.26.9
2
mesosphere/kubectl:v1.35.0-alpineea01a9387771
stdlib@go1.25.5
1.26.9
2
mikefarah/yq:4:latest4b3d9475d655
stdlib@go1.27.1
1.26.9
2
moby/buildkit:v0.32.2-rootless504731e577c2
stdlib@go1.25.7
1.26.9
2
nacos/nacos-server:latest1c191c30c8cd
stdlib@go1.26.5
1.26.9
2
natsio/nats-box:0.11.09fbf7bf684e4
stdlib@go1.18.1
1.26.9
2
natsio/nats-server-config-reloader:0.20.147094fcae2f4
stdlib@go1.24.8
1.26.9
2
natsio/nats-server-config-reloader:0.7.2911ce7ed2f55
stdlib@go1.19
1.26.9
2
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.9
2
natsio/prometheus-nats-exporter:0.10.016048afb67a5
stdlib@go1.19
1.26.9
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.9
2
neosmemo/memos:0.31.024c2707ddd8f
stdlib@go1.27.0
1.26.9
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
stdlib@go1.24.4
1.26.9
2
obolnetwork/charon:v1.10.0278c7e2897b6
stdlib@go1.26.1
1.26.9
2
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.9
2
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.9
2
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
stdlib@go1.26.8
1.26.9
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
stdlib@go1.24.2
1.26.9
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.9
2
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.9
2
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.9
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.9
2
openfga/openfga:latest:v1.22.09cf9a20af32a
stdlib@go1.26.8
1.26.9
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.9
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.9
2
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.9
2
oryd/kratos:v1.0.0d06fc5845f63
stdlib@go1.20.5
1.26.9
2
oryd/kratos:v1.3.1fe2428f103a6
stdlib@go1.23.2
1.26.9
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
stdlib@go1.20.5
1.26.9
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.26.9
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.9
2
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
stdlib@go1.25.7
1.26.9
2
otel/opentelemetry-collector-contrib:0.161.0:latestfd328de25524
stdlib@go1.26.8
1.26.9
2

syft 1.42.1 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.