StackRadar

CVE-2026-94440

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,554
of 18,071 indexed, latest versions
Container images
6,411
deployed by those charts
Fix available
1 of 2
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,411
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94440GO-2026-6608
Trending
Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,554 by stars
ChartLatestAffected imagesRadar Score
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ethereum/client-go:stable4753febf6e7c
stdlib@go1.27.1
1.26.9

Open the chart page →

169
gotifygotifyVerified publisher0.8.11 of 1See more

gotify gotify 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
gotify/server:2.9.1a3af47067ce6
stdlib@go1.26.0
1.26.9

Open the chart page →

863
alloy-operatorgrafana0.8.01 of 1See more

alloy-operator grafana 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.13.0a8ae76efd773
stdlib@go1.26.4
1.26.9

Open the chart page →

709
hcloud-csihcloud2.23.06 of 6See more

hcloud-csi hcloud 2.23.0

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.23.0024ea4b07161
stdlib@go1.26.7
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.9

Open the chart page →

4,216
docmosthelmforgeVerified publisher1.4.11 of 4See more

docmost helmforge 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

4,461
wordpresshelmforgeVerified publisher3.0.91 of 3See more

wordpress helmforge 3.0.9

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mysql:26.7.09d48c42f8341
stdlib@go1.24.6
1.26.9

Open the chart page →

4,267
korkorVerified publisher0.2.161 of 1See more

kor kor 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.26.9

Open the chart page →

460
kubelet-csr-approverkubelet-csr-approverOfficialVerified publisher1.2.151 of 1See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
stdlib@go1.26.7
1.26.9

Open the chart page →

179
logging-operatorkube-loggingVerified publisher4.2.31 of 1See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
stdlib@go1.20.5
1.26.9

Open the chart page →

1,443
myipkuossOfficialVerified publisher0.2.21 of 1See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
stdlib@go1.23.8
1.26.9

Open the chart page →

1,036
keptnlifecycle-toolkitOfficialVerified publisher0.11.03 of 3See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.9
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.9
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.9

Open the chart page →

3,169
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.53.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.53.0

1 of the 9 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
stdlib@go1.24.6
1.26.9

Open the chart page →

791
mattermost-operatormattermostVerified publisher1.0.51 of 1See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mattermost/mattermost-operator:v1.25.4bac00a2bbd33
stdlib@go1.24.13
1.26.9

Open the chart page →

538
mercuremercureOfficialVerified publisher1.1.01 of 1See more

mercure mercure 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dunglas/mercure:v1.1.0307e456b426c
stdlib@go1.27.1
1.26.9

Open the chart page →

89
meshery-operatormesheryOfficialVerified publisher1.0.702 of 2See more

meshery-operator meshery 1.0.70

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
stdlib@go1.26.3
1.26.9
meshery/meshery-operator:1.0.50d245bc8b5c6
stdlib@go1.26.4
1.26.9

Open the chart page →

3,319
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.9

Open the chart page →

3,515
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.9

Open the chart page →

1,819
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edged127d1013198
stdlib@go1.27.1
1.26.9

Open the chart page →

1,514
system-upgrade-controllernimbolus0.7.01 of 1See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.18.09813f85653c8
stdlib@go1.25.3
1.26.9

Open the chart page →

621
olmolmVerified publisher0.46.01 of 1See more

olm olm 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.46.04404599eb7b7
stdlib@go1.26.3
1.26.9

Open the chart page →

409
opencostopencost-ociOfficialVerified publisher2.5.321 of 2See more

opencost opencost-oci 2.5.32

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.9

Open the chart page →

350
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
stdlib@go1.26.0
1.26.9

Open the chart page →

1,356
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
stdlib@go1.26.0
1.26.9

Open the chart page →

1,300
passboltpassbolt2.2.03 of 6See more

passbolt passbolt 2.2.0

3 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.9
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.9
library/mariadb:latestd4fdec0510ad
stdlib@go1.26.7
1.26.9

Open the chart page →

13,878
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
stdlib@go1.26.1
1.26.9

Open the chart page →

1,277
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
stdlib@go1.26.7
1.26.9

Open the chart page →

1,934
selenium-gridselenium-grid0.59.13 of 4See more

selenium-grid selenium-grid 0.59.1

3 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
selenium/hub:4.48.0-20260905d47c27474cb4
stdlib@go1.27.1
1.26.9
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
stdlib@go1.27.1
1.26.9
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
stdlib@go1.27.1
1.26.9

Open the chart page →

9,189
rekorsigstoreVerified publisher1.8.77 of 9See more

rekor sigstore 1.8.7

7 of the 9 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.9
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.9
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.9
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.9
ghcr.io/sigstore/scaffolding/createtreedigest-pinned4c845ced03d8
stdlib@go1.25.0
1.26.9
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.9
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.9

Open the chart page →

7,582
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
stdlib@go1.26.1
1.26.9

Open the chart page →

3,297
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
stdlib@go1.25.14
1.26.9

Open the chart page →

1,008
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
stdlib@go1.26.4-X:boringcrypto
1.26.9
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
stdlib@go1.25.9
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.9

Open the chart page →

3,261
sops-operatorsops-operatorVerified publisher0.10.12 of 2See more

sops-operator sops-operator 0.10.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.9
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
stdlib@go1.26.4
1.26.9

Open the chart page →

1,839
thehivestrangebee-helmOfficialVerified publisher1.1.02 of 7See more

thehive strangebee-helm 1.1.0

2 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
stdlib@go1.24.6
1.26.9
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.9

Open the chart page →

16,565
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
stdlib@go1.25.10
1.26.9
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
stdlib@go1.26.3
1.26.9
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
stdlib@go1.26.3
1.26.9
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
stdlib@go1.26.3
1.26.9
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
stdlib@go1.26.3
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.9

Open the chart page →

8,570
uffizzi-controlleruffizzi-controller2.4.68 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.9
uffizzi/uffizzi-cluster-operator:v1.6.55ca448a08783
stdlib@go1.19.13
1.26.9
quay.io/jetstack/cert-manager-cainjector:v1.14.54ffda7facb4d
stdlib@go1.21.9
1.26.9
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
stdlib@go1.21.9
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.14.50f5b104bdd1b
stdlib@go1.21.9
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
stdlib@go1.21.9
1.26.9
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
stdlib@go1.22.2
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.9

Open the chart page →

18,675
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
stdlib@go1.18.3
1.26.9

Open the chart page →

3,993
vault-operatorvault-operatorVerified publisher1.24.11 of 1See more

vault-operator vault-operator 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.1b5529976f0f6
stdlib@go1.27.1
1.26.9

Open the chart page →

125
vsphere-csivsphere-tmm3.8.17 of 7See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
stdlib@go1.24.4
1.26.9
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
stdlib@go1.24.4
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
stdlib@go1.23.1
1.26.9

Open the chart page →

6,756
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
stdlib@go1.14.12
1.26.9

Open the chart page →

7,965
aad-pod-identityaad-pod-identity4.1.182 of 2See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
stdlib@go1.19.10
1.26.9
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
stdlib@go1.19.10
1.26.9

Open the chart page →

4,146
abcdesktopabcdesktopOfficialVerified publisher4.4.132 of 9See more

abcdesktop abcdesktop 4.4.13

2 of the 9 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/keysgenerator:4.426e0bcfa4c01
stdlib@go1.26.8
1.26.9
ghcr.io/abcdesktopio/mongo:safe8.0b91afcb145a5
stdlib@go1.26.6
1.26.9

Open the chart page →

1,081
agonesagones1.61.01 of 5See more

agones agones 1.61.0

1 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
stdlib@go1.25.9
1.26.9

Open the chart page →

1,371
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
stdlib@go1.26.5
1.26.9

Open the chart page →

50,154
kubedbappscodeVerified publisher2026.7.108 of 8See more

kubedb appscode 2026.7.10

8 of the 8 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.9
ghcr.io/appscode/petset:v0.1.093fa0daf603c
stdlib@go1.25.10
1.26.9
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
stdlib@go1.25.11
1.26.9
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
stdlib@go1.25.12
1.26.9
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
stdlib@go1.25.12
1.26.9
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
stdlib@go1.25.12
1.26.9
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
stdlib@go1.25.13
1.26.9
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0e0f4431c4704
stdlib@go1.25.13
1.26.9

Open the chart page →

6,376
cloudflaredartur9010Verified publisher1.0.93 of 3See more

cloudflared artur9010 1.0.9

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
stdlib@go1.24.13
1.26.9
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.9

Open the chart page →

4,040
bambooatlassian-data-centerVerified publisher2.0.171 of 2See more

bamboo atlassian-data-center 2.0.17

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.12eb98d6fbeee7
stdlib@go1.22.2
1.26.9

Open the chart page →

36,163
alb-controllerazure-application-gateway-for-containers1.12.23 of 3See more

alb-controller azure-application-gateway-for-containers 1.12.2

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
mcr.microsoft.com/application-lb/images/alb-controller:1.12.26991e4273bb4
stdlib@go1.26.8
1.26.9
mcr.microsoft.com/application-lb/images/alb-controller-bootstrap:1.12.20709f9fd5bfd
stdlib@go1.26.8
1.26.9
mcr.microsoft.com/application-lb/images/alb-controller-crds:1.12.2f5e176115522
stdlib@go1.26.7
1.26.9

Open the chart page →

262
baserowbaserow-chartVerified publisher1.1.04 of 6See more

baserow baserow-chart 1.1.0

4 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
baserow/backend:2.4.0af9aa6fe8482
stdlib@go1.25.14
1.26.9
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
stdlib@go1.21.12
1.26.9
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
stdlib@go1.21.10
1.26.9
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.9

Open the chart page →

19,339
mysql-operatorbitpokeVerified publisher0.6.32 of 2See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
stdlib@go1.17.13
1.26.9
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
stdlib@go1.19.9
1.26.9

Open the chart page →

5,257
celestia-appcelestia-labsVerified publisher0.5.01 of 3See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
stdlib@go1.23.6
1.26.9

Open the chart page →

1,474

Container images carrying it

6,411 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
stdlib@go1.22.5
1.26.9
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.9
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.9
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
stdlib@go1.20.3
1.26.9
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.9
6
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.9
6
alpine/kubectl:1.34.18413f8890d19
stdlib@go1.24.6
1.26.9
5
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.9
5
containous/whoami:latest:v1.5.07d6a3c8f9147
stdlib@go1.14
1.26.9
5
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.9
5
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.9
5
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.9
5
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.26.9
5
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.9
5
keelhq/keel:latest73714afb4443
stdlib@go1.23.4
1.26.9
5
library/mariadb:13.0.2:latestd4fdec0510ad
stdlib@go1.26.7
1.26.9
5
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.26.9
5
library/mysql:26.7.0:latest9d48c42f8341
stdlib@go1.24.6
1.26.9
5
library/postgres:122f2a8c2a7d10
stdlib@go1.18.2
1.26.9
5
library/redis:7.4.2-alpine:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.9
5
library/redis:5:5.0fc5ecd863862
stdlib@go1.16.7
1.26.9
5
natsio/nats-box:0.14.1a67913df95f1
stdlib@go1.21.3
1.26.9
5
outcoldsolutions/collectorforkubernetes:26.04.5b2577b85aa71
stdlib@go1.26.8
1.26.9
5
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.26.9
5
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.9
5
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.9
5
sigma2as/goidc-proxy:next656ac798963a
stdlib@go1.25.7
1.26.9
5
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.9
5
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.9
5
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
stdlib@go1.24.4
1.26.9
5
ghcr.io/quenchworks/images/prometheusa9dc21133c23
stdlib@go1.26.8
1.26.9
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.9
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.26.9
5
quay.io/prometheus/mysqld-exporter:latest:v0.20.0abed8dac117b
stdlib@go1.26.5
1.26.9
5
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.9
5
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
stdlib@go1.22.3
1.26.9
5
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.9
5
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.9
5
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
stdlib@go1.26.5
1.26.9
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
stdlib@go1.20.1
1.26.9
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.9
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.26.9
5
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.9
5
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.26.9
5
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.9
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
stdlib@go1.26.3
1.26.9
5
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.9
5
adguard/adguardhome:v0.107.79aba9e3bf0613
stdlib@go1.26.6
1.26.9
4
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.9
4

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.