CVE-2026-94440

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,544; of 18,087 indexed, latest versions
Container images: 6,392; deployed by those charts
Fix available: 1 of 3; affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,544 of 18,087 indexed charts deploy, on 6,392 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,392
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1

OSV records: CGA-2wpp-p453-fwrj DEBIAN-CVE-2026-94440 GO-2026-6608
Also known as: CGA-8235-g5m3-vf73, CGA-frxc-9943-gmf8, CGA-gmgx-vgc6-mmw7, CGA-gw93-g38m-27f8, CGA-j2rm-vrxp-7gvc
Trending: Rank 8 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,544 by stars

Chart

Latest

Affected images

Radar Score

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	stdlib@go1.20.8	1.26.9

Open the chart page →

5,338

beylagrafana

1.16.11

1 of 1 See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
grafana/beyla :3.32.0	3ff0f7cf2bbf	stdlib@go1.25.11	1.26.9

Open the chart page →

349

helm-dashboardkomodor

2.0.7

1 of 1 See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
komodorio/helm-dashboard :2.1.3	258a9044e658	stdlib@go1.26.5	1.26.9

Open the chart page →

592

kube-prometheus-stackkube-prometheus-stack-oci

92.3.0

5 of 6 See more

kube-prometheus-stack kube-prometheus-stack-oci 92.3.0

5 of the 6 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	stdlib@go1.26.7	1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	stdlib@go1.27.1	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	stdlib@go1.26.8	1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

1,050

kubescape-operatorkubescape

1.40.5

6 of 6 See more

kubescape-operator kubescape 1.40.5

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/kubescape/http-request :v0.2.23	4ff502a33423	stdlib@go1.26.7	1.26.9
quay.io/kubescape/kubescape :v4.0.14	418fa941ecc0	stdlib@go1.26.7	1.26.9
quay.io/kubescape/kubevuln :v0.3.430	9bed2f723ea0	stdlib@go1.26.8	1.26.9
quay.io/kubescape/node-agent :v0.3.219	2044ed750f5e	stdlib@go1.25.14	1.26.9
quay.io/kubescape/operator :v0.2.172	1ddcd2788e1e	stdlib@go1.25.14	1.26.9
quay.io/kubescape/storage :v0.0.348	6333d7845589	stdlib@go1.25.14	1.26.9

Open the chart page →

1,978

kube-vipkube-vip

0.11.1

1 of 1 See more

kube-vip kube-vip 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/kube-vip/kube-vip :v1.2.3	2fcdbb014a2e	stdlib@go1.26.5	1.26.9

Open the chart page →

332

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.26.9

Open the chart page →

6,465

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.26.9

Open the chart page →

1,951

plane-cemakeplane

1.8.4

3 of 11 See more

plane-ce makeplane 1.8.4

3 of the 11 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.26.9
pgsty/mc :RELEASE.2026-09-16T00-00-00Z	cfc83108c3ab	stdlib@go1.27.1	1.26.9
pgsty/minio :RELEASE.2026-08-04T00-00-00Z	b6bfe7239bfc	stdlib@go1.26.5	1.26.9

Open the chart page →

4,536

milvusmilvus-helm

5.0.30

2 of 4 See more

milvus milvus-helm 5.0.30

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.25-r1	fededb2f2d63	stdlib@go1.24.10	1.26.9
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.26.9

Open the chart page →

13,058

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.26.9

Open the chart page →

1,017

opa-kube-mgmtopa-kube-mgmt

11.0.14

2 of 2 See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
openpolicyagent/kube-mgmt :11.0.14	758ff3fb4727	stdlib@go1.25.0	1.26.9
openpolicyagent/opa :1.19.0	852359995443	stdlib@go1.26.5	1.26.9

Open the chart page →

1,041

redis-operatorot-container-kit

0.27.0

1 of 1 See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.27.0	25799bf10231	stdlib@go1.25.14	1.26.9

Open the chart page →

214

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.26.9

Open the chart page →

5,602

s3-proxyoxyno-zeta

2.28.0

1 of 1 See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
oxynozeta/s3-proxy :5.1.1	21115040e224	stdlib@go1.27.0	1.26.9

Open the chart page →

348

spirespiffe

0.30.3

7 of 10 See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/oidc-discovery-provider :1.15.3	bb95f13c2b4e	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	stdlib@go1.24.0	1.26.9
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	stdlib@go1.25.3	1.26.9
ghcr.io/spiffe/spire-agent :1.15.3	41b0dcd8b258	stdlib@go1.26.6	1.26.9
ghcr.io/spiffe/spire-controller-manager :0.8.0	19e418e9d7f2	stdlib@go1.27.1	1.26.9
ghcr.io/spiffe/spire-server :1.15.3	4082f30d3e0d	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.9

Open the chart page →

3,359

wireguardwireguard

0.32.0

1 of 3 See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-wireguard-mgr :main	c4febc0da1a4	stdlib@go1.27.1	1.26.9

Open the chart page →

336

altinity-clickhouse-operatoraltinity-clickhouse-operator

0.27.4

3 of 3 See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.27.4	c60c872fedd8	stdlib@go1.26.8	1.26.9
altinity/metrics-exporter :0.27.4	d257a72e6a6a	stdlib@go1.26.8	1.26.9
registry.k8s.io/kubectl :v1.36.3	6e4fce3c8365	stdlib@go1.26.5	1.26.9

Open the chart page →

612

bytebasebytebase

1.1.5

1 of 1 See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
bytebase/bytebase :latest	0b3a44dfac3e	stdlib@go1.27.1	1.26.9

Open the chart page →

378

cert-manager-csi-drivercert-manager

0.16.0

3 of 3 See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	stdlib@go1.26.5	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.26.9

Open the chart page →

1,181

ansible-semaphorecloudhippie

15.3.2

1 of 1 See more

ansible-semaphore cloudhippie 15.3.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.16	3707a971a57f	stdlib@go1.23.3	1.26.9

Open the chart page →

1,771

etcdcloudpirates-etcd

0.8.9

1 of 1 See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
gcr.io/etcd-development/etcd :v3.7.2	7c6c239825d0	stdlib@go1.26.8	1.26.9

Open the chart page →

161

rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operator

0.6.19

2 of 2 See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.19

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/rabbitmq/cluster-operator :2.23.0	9236fb4f559b	stdlib@go1.27.1	1.26.9
ghcr.io/rabbitmq/messaging-topology-operator :1.20.3	f377d3c3e221	stdlib@go1.27.1	1.26.9

Open the chart page →

265

zookeepercloudpirates-zookeeper

0.15.2

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.6	d0ae1665a1e8	stdlib@go1.18.1	1.26.9

Open the chart page →

3,593

vertical-pod-autoscalercluster-autoscaler

0.13.0

4 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.13.0

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.8.0	3d94f53e4c5a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.8.0	e743e3a7e58a	stdlib@go1.26.8	1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.8.0	1d0229e52f90	stdlib@go1.26.8	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	stdlib@go1.21.3	1.26.9

Open the chart page →

1,791

codefreshcodefresh-onprem

2.12.21

6 of 42 See more

codefresh codefresh-onprem 2.12.21

6 of the 42 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	stdlib@go1.25.0	1.26.9
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	stdlib@go1.21.12	1.26.9
bitnamilegacy/nats :2.11.8-debian-12-r0	fa0cfba6034a	stdlib@go1.24.6	1.26.9
ghcr.io/helm/chartmuseum :v0.16.6	48bc27743c08	stdlib@go1.25.13	1.26.9
quay.io/codefresh/dind :3.0.25	0885ab519dac	stdlib@go1.26.5	1.26.9
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	stdlib@go1.23.8	1.26.9

Open the chart page →

19,378

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/projectcontour/contour :v1.33.7	d88264ed084a	stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64	1.26.9

Open the chart page →

1,829

couchbase-operatorcouchbase

2.93.0

2 of 2 See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
couchbase/admission-controller :2.9.3	bf2d2e87e45f	stdlib@go1.26.5	1.26.9
couchbase/operator :2.9.3	69a385b49e1f	stdlib@go1.26.5	1.26.9

Open the chart page →

1,230

dash0-operatordash0-operator

0.157.0

1 of 1 See more

dash0-operator dash0-operator 0.157.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/dash0hq/operator-controller :0.157.0	2103617548e2	stdlib@go1.27.1	1.26.9

Open the chart page →

135

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	stdlib@go1.19.6	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	stdlib@go1.19.5	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	stdlib@go1.19.7	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	stdlib@go1.19.8	1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	stdlib@go1.19.8	1.26.9

Open the chart page →

10,643

eck-exporterenix

1.14.0

1 of 1 See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.9

Open the chart page →

237

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.26.9
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.26.9

Open the chart page →

8,697

memcachedkubelauncher

0.1.33

1 of 1 See more

memcached kubelauncher 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/memcacheddigest-pinned	91f2066d2aa4	stdlib@go1.26.7	1.26.9

Open the chart page →

649

mysqlkubelauncher

0.4.6

1 of 1 See more

mysql kubelauncher 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/mysqldigest-pinned	b25f98e6a86f	stdlib@go1.26.7	1.26.9

Open the chart page →

633

postgresqlkubelauncher

0.5.0

1 of 1 See more

postgresql kubelauncher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/postgresqldigest-pinned	db2369c4dd90	stdlib@go1.26.7	1.26.9

Open the chart page →

730

kubernetes-replicatorkubernetes-replicator

2.12.4

1 of 1 See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.12.4	5dc9fc5ff59a	stdlib@go1.24.13	1.26.9

Open the chart page →

590

lakefslakefs

1.12.43

1 of 1 See more

lakefs lakefs 1.12.43

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
treeverse/lakefs :1.88.0	237a17c6b2d8	stdlib@go1.26.8	1.26.9

Open the chart page →

406

multi-juicermulti-juicer

10.3.1

1 of 1 See more

multi-juicer multi-juicer 10.3.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/juice-shop/multi-juicer/multi-juicer :v10.3.1	de4f0de62e8b	stdlib@go1.26.7	1.26.9

Open the chart page →

153

coreneuvectorcharts

2.11.2

3 of 5 See more

core neuvectorcharts 2.11.2

3 of the 5 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
neuvector/controller :5.6.2	824e29cf32c5	stdlib@go1.26.8	1.26.9
neuvector/enforcer :5.6.2	72e1deee40fb	stdlib@go1.27.0	1.26.9
neuvector/scanner :6	d9e8b2ee8d69	stdlib@go1.27.1	1.26.9

Open the chart page →

1,110

diunnicholaswilde

1.0.0

1 of 1 See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/diun :4.19.0	c94e32b888e4	stdlib@go1.16.5	1.26.9

Open the chart page →

4,868

openclawopenclaw

1.110.1

2 of 2 See more

openclaw openclaw 1.110.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.57.0	6bac628b3d82	stdlib@go1.26.7	1.26.9
registry.gitlab.com/xrow-public/helm-openclaw/openclaw :1.110.1	51e6f187064f	stdlib@go1.26.4	1.26.9

Open the chart page →

3,025

prometheus-stackdriver-exporterprometheus-community

5.2.0

1 of 1 See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
prometheuscommunity/stackdriver-exporter :v0.19.0	c0a0cbf76570	stdlib@go1.26.4	1.26.9

Open the chart page →

560

questdbquestdb

1.0.27

1 of 2 See more

questdb questdb 1.0.27

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
questdb/questdb :10.0.1	67eaed863ebb	stdlib@go1.25.14	1.26.9

Open the chart page →

112

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	stdlib@go1.22.4	1.26.9

Open the chart page →

1,644

spegelspegel

0.7.4

1 of 1 See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/spegel-org/spegeldigest-pinned	26c60b05e08a	stdlib@go1.26.5	1.26.9

Open the chart page →

423

supabasetokens-studio

1.0.0

3 of 14 See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	stdlib@go1.23.2	1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
supabase/gotrue :v2.163.0	ba4ddc594b0b	stdlib@go1.22.3	1.26.9

Open the chart page →

26,454

wekanwekan

12.25.0

2 of 3 See more

wekan wekan 12.25.0

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
ghcr.io/wekan/ferretdb :latest	f5c33dc89d90	stdlib@go1.27.0	1.26.9
ghcr.io/wekan/wekan :v12.25	62ccbac56677	stdlib@go1.27.1	1.26.9

Open the chart page →

1,854

woodpeckerwoodpecker-ci

3.7.5

2 of 2 See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
woodpeckerci/woodpecker-agent :v3.19.0	f85f163e0949	stdlib@go1.27.1	1.26.9
woodpeckerci/woodpecker-server :v3.19.0	6ca167a3c58b	stdlib@go1.27.1	1.26.9

Open the chart page →

252

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	stdlib@go1.22.2	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.9

Open the chart page →

3,394

renterdartur9010

1.4.4

2 of 2 See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.26.9
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.26.9

Open the chart page →

9,813

Container images carrying it

6,392 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
adguard/adguardhome :v0.107.38	43ec119419a9	stdlib@go1.20.8	1.26.9	1
adguard/adguardhome :v0.107.59	5d5e3aef39a8	stdlib@go1.24.1	1.26.9	1
adguard/adguardhome :v0.107.76	7157eb1dc3b2	stdlib@go1.26.3	1.26.9	1
adguard/adguardhome :v0.107.73	7fbf01d73ecb	stdlib@go1.25.7	1.26.9	1
adguard/adguardhome :v0.107.0-b.5	a9668737b1d6	stdlib@go1.16.6	1.26.9	1
adguard/adguardhome :v0.107.7	b9974aed13d0	stdlib@go1.17.9	1.26.9	1
adguard/adguardhome :v0.107.56	c64a0b37f7b9	stdlib@go1.23.5	1.26.9	1
adguard/adguardhome :v0.107.65	d765078d2140	stdlib@go1.24.6	1.26.9	1
adrianberger/fluxcd-webui :latest	76848c0d2780	stdlib@go1.16.2	1.26.9	1
adyanth/cloudflare-operator	6b168dc237d5	stdlib@go1.24.4	1.26.9	1
aerokube/moon :1.9.17	da76ca51220d	stdlib@go1.22.3	1.26.9	1
aerokube/moon-api :1.9.17	6b6323e75785	stdlib@go1.22.3	1.26.9	1
aerokube/selenoid-ui :1.10.11	3f3e299509fd	stdlib@go1.21.5	1.26.9	1
aerospike/aerospike-kubernetes-operator :4.5.0	70a9eeb991b8	stdlib@go1.25.10	1.26.9	1
afgane/galaxy-k8s-monitor :latest	457173db5640	stdlib@go1.24.13	1.26.9	1
agentarea/agentarea-events :latest	71a89daaa2c6	stdlib@go1.25.14	1.26.9	1
agentarea/agentarea-mcp-manager :latest	0e7e53fef298	stdlib@go1.25.14	1.26.9	1
agentarea/agentarea-mcp-runner :latest	9030cc19a0fc	stdlib@go1.19.8	1.26.9	1
aibrix/controller-manager :v0.7.0	76aabbbfda79	stdlib@go1.22.12	1.26.9	1
aibrix/gateway-plugins :v0.7.0	5b93ea4c753a	stdlib@go1.22.12	1.26.9	1
airbyte/db :2.4.0	91f7b485f019	stdlib@go1.24.6	1.26.9	1
airbyte/minio :RELEASE.2023-11-20T22-40-07Z	fdae972eaf0e	stdlib@go1.21.4	1.26.9	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	stdlib@go1.23.4	1.26.9	1
aistorage/ais-operator :v4.1.0	151fc5b9f917	stdlib@go1.26.8	1.26.9	1
ajilaag/clamav-rest :latest	ad689c7b75b1	stdlib@go1.26.0	1.26.9	1
akeyless/akeyless-csi-provider :latest	e48bddc5dd72	stdlib@go1.26.4	1.26.9	1
akeyless/base :latest	759e4289fae8	stdlib@go1.26.3	1.26.9	1
akeyless/base-rhel :0.0.1	4ba8900a0061	stdlib@go1.22.1	1.26.9	1
akeyless/gateway :5.5.0	53301745cb50	stdlib@go1.26.6	1.26.9	1
akeyless/k8s-webhook-server :0.39.0	996cd9afb3b4	stdlib@go1.26.4	1.26.9	1
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	stdlib@go1.22.5	1.26.9	1
aktosecurity/akto-threat-detection-backend :1.18.7	5a0c66e59678	stdlib@go1.26.7	1.26.9	1
aktosecurity/akto-threat-detection-backend :latest	d9d0e7c78578	stdlib@go1.26.7	1.26.9	1
aktosecurity/data-ingestion-service :1.4.9	46ed5bcb04b2	stdlib@go1.26.3	1.26.9	1
aktosecurity/guardrails-service :2.40.6	63e9235153a3	stdlib@go1.25.14	1.26.9	1
aktosecurity/guardrails-service :2.14.8	a6218d07e84f	stdlib@go1.25.14	1.26.9	1
aktosecurity/mini-runtime :1.72.15	498e3e35ecc2	stdlib@go1.26.5	1.26.9	1
aktosecurity/mirror-api-logging :api-gateway-logging-openapi	12ed2544756f	stdlib@go1.23.3	1.26.9	1
aktosecurity/mirror-api-logging :api-gateway-logging-multi-logging	1a1bc76d50fe	stdlib@go1.23.3	1.26.9	1
aktosecurity/mirror-api-logging :k8s_ebpf	3e506f5e5f47	stdlib@go1.26.5	1.26.9	1
aktosecurity/mirror-api-logging :k8s_agent	c8266e943ff9	stdlib@go1.26.8	1.26.9	1
alazidis/stornx :1.1.1	602d4f7f090c	stdlib@go1.25.7	1.26.9	1
alcounit/browser-controller :v1.0.1	c64222f9e663	stdlib@go1.25.0	1.26.9	1
alcounit/browser-service :v0.0.9	4bd10defc324	stdlib@go1.25.0	1.26.9	1
alcounit/browser-ui :v1.0.0	668e7aee5e5c	stdlib@go1.25.0	1.26.9	1
alcounit/selenosis :v2.1.2	f0964cda6da6	stdlib@go1.25.0	1.26.9	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	stdlib@go1.16.12	1.26.9	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	stdlib@go1.16.10	1.26.9	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	stdlib@go1.17.2	1.26.9	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	stdlib@go1.15.8	1.26.9	1