StackRadar

CVE-2026-94440

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,533
of 18,090 indexed, latest versions
Container images
6,378
deployed by those charts
Fix available
2 of 3
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,378
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r31.15.10-r81
OSV records
CGA-2wpp-p453-fwrjDEBIAN-CVE-2026-94440GO-2026-6608
Also known as
CGA-8235-g5m3-vf73, CGA-frxc-9943-gmf8, CGA-gmgx-vgc6-mmw7, CGA-gw93-g38m-27f8, CGA-j2rm-vrxp-7gvc
Trending
Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,533 by stars
ChartLatestAffected imagesRadar Score
gitlab-operatorgitlabVerified publisher3.4.11 of 1See more

gitlab-operator gitlab 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:3.4.196efaea0d3bb
stdlib@go1.27.1
1.26.9

Open the chart page →

222
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
stdlib@go1.20.8
1.26.9

Open the chart page →

5,414
beylagrafana1.16.111 of 1See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/beyla:3.32.03ff0f7cf2bbf
stdlib@go1.25.11
1.26.9

Open the chart page →

426
helm-dashboardkomodorVerified publisher2.0.71 of 1See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
komodorio/helm-dashboard:2.1.3258a9044e658
stdlib@go1.26.5
1.26.9

Open the chart page →

668
kube-prometheus-stackkube-prometheus-stack-oci92.3.05 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 92.3.0

5 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
stdlib@go1.27.1
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.9
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

1,434
kubescape-operatorkubescape1.40.56 of 6See more

kubescape-operator kubescape 1.40.5

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/kubescape/http-request:v0.2.234ff502a33423
stdlib@go1.26.7
1.26.9
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
stdlib@go1.26.7
1.26.9
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
stdlib@go1.26.8
1.26.9
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
stdlib@go1.25.14
1.26.9
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
stdlib@go1.25.14
1.26.9
quay.io/kubescape/storage:v0.0.3486333d7845589
stdlib@go1.25.14
1.26.9

Open the chart page →

2,414
kube-vipkube-vip0.11.11 of 1See more

kube-vip kube-vip 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kube-vip/kube-vip:v1.2.32fcdbb014a2e
stdlib@go1.26.5
1.26.9

Open the chart page →

408
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
stdlib@go1.20.12
1.26.9

Open the chart page →

6,527
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.26.9

Open the chart page →

2,027
plane-cemakeplaneOfficialVerified publisher1.8.43 of 11See more

plane-ce makeplane 1.8.4

3 of the 11 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
stdlib@go1.18.2
1.26.9
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.9
pgsty/minio:RELEASE.2026-08-04T00-00-00Zb6bfe7239bfc
stdlib@go1.26.5
1.26.9

Open the chart page →

4,758
milvusmilvus-helm5.0.302 of 4See more

milvus milvus-helm 5.0.30

2 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
stdlib@go1.24.10
1.26.9
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.26.9

Open the chart page →

13,219
mssqlmssqlVerified publisher1.10.31 of 1See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
stdlib@go1.23.1
1.26.9

Open the chart page →

1,069
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.142 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.14758ff3fb4727
stdlib@go1.25.0
1.26.9
openpolicyagent/opa:1.19.0852359995443
stdlib@go1.26.5
1.26.9

Open the chart page →

1,193
redis-operatorot-container-kit0.27.01 of 1See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.27.025799bf10231
stdlib@go1.25.14
1.26.9

Open the chart page →

291
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.9

Open the chart page →

5,652
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
stdlib@go1.27.0
1.26.9

Open the chart page →

425
spirespiffeVerified publisher0.30.37 of 10See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.9
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.9
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.9
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
stdlib@go1.26.6
1.26.9
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.9
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.9

Open the chart page →

3,897
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-wireguard-mgr:mainc4febc0da1a4
stdlib@go1.27.1
1.26.9

Open the chart page →

413
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.43 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.4c60c872fedd8
stdlib@go1.26.8
1.26.9
altinity/metrics-exporter:0.27.4d257a72e6a6a
stdlib@go1.26.8
1.26.9
registry.k8s.io/kubectl:v1.36.36e4fce3c8365
stdlib@go1.26.5
1.26.9

Open the chart page →

842
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bytebase/bytebase:latest0b3a44dfac3e
stdlib@go1.27.1
1.26.9

Open the chart page →

455
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.9

Open the chart page →

1,409
ansible-semaphorecloudhippieVerified publisher15.3.21 of 1See more

ansible-semaphore cloudhippie 15.3.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.163707a971a57f
stdlib@go1.23.3
1.26.9

Open the chart page →

1,847
etcdcloudpirates-etcdVerified publisher0.8.91 of 1See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.27c6c239825d0
stdlib@go1.26.8
1.26.9

Open the chart page →

238
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.192 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.19

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.23.09236fb4f559b
stdlib@go1.27.1
1.26.9
ghcr.io/rabbitmq/messaging-topology-operator:1.20.3f377d3c3e221
stdlib@go1.27.1
1.26.9

Open the chart page →

419
zookeepercloudpirates-zookeeperVerified publisher0.15.21 of 1See more

zookeeper cloudpirates-zookeeper 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/zookeeper:3.9.6d0ae1665a1e8
stdlib@go1.18.1
1.26.9

Open the chart page →

3,646
vertical-pod-autoscalercluster-autoscaler0.13.04 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.13.0

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.8.03d94f53e4c5a
stdlib@go1.26.8
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.8.0e743e3a7e58a
stdlib@go1.26.8
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.8.01d0229e52f90
stdlib@go1.26.8
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.9

Open the chart page →

2,099
codefreshcodefresh-onpremOfficialVerified publisher2.12.216 of 42See more

codefresh codefresh-onprem 2.12.21

6 of the 42 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.26.9
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
stdlib@go1.21.12
1.26.9
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.26.9
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
stdlib@go1.25.13
1.26.9
quay.io/codefresh/dind:3.0.250885ab519dac
stdlib@go1.26.5
1.26.9
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.26.9

Open the chart page →

19,845
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.9

Open the chart page →

1,906
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
stdlib@go1.26.5
1.26.9
couchbase/operator:2.9.369a385b49e1f
stdlib@go1.26.5
1.26.9

Open the chart page →

1,382
dash0-operatordash0-operatorOfficialVerified publisher0.157.01 of 1See more

dash0-operator dash0-operator 0.157.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/dash0hq/operator-controller:0.157.02103617548e2
stdlib@go1.27.1
1.26.9

Open the chart page →

212
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
stdlib@go1.19.6
1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
stdlib@go1.19.5
1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
stdlib@go1.19.7
1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
stdlib@go1.19.8
1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
stdlib@go1.19.8
1.26.9
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
stdlib@go1.19.8
1.26.9

Open the chart page →

11,105
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

314
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.9
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.9

Open the chart page →

8,849
memcachedkubelauncherVerified publisher0.1.331 of 1See more

memcached kubelauncher 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinned91f2066d2aa4
stdlib@go1.26.7
1.26.9

Open the chart page →

701
mysqlkubelauncherVerified publisher0.4.61 of 1See more

mysql kubelauncher 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnedb25f98e6a86f
stdlib@go1.26.7
1.26.9

Open the chart page →

685
postgresqlkubelauncherVerified publisher0.5.01 of 1See more

postgresql kubelauncher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinneddb2369c4dd90
stdlib@go1.26.7
1.26.9

Open the chart page →

782
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
stdlib@go1.24.13
1.26.9

Open the chart page →

667
lakefslakefsVerified publisher1.12.431 of 1See more

lakefs lakefs 1.12.43

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
treeverse/lakefs:1.88.0237a17c6b2d8
stdlib@go1.26.8
1.26.9

Open the chart page →

483
multi-juicermulti-juicer10.3.11 of 1See more

multi-juicer multi-juicer 10.3.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/juice-shop/multi-juicer/multi-juicer:v10.3.1de4f0de62e8b
stdlib@go1.26.7
1.26.9

Open the chart page →

230
coreneuvectorchartsVerified publisher2.11.23 of 5See more

core neuvectorcharts 2.11.2

3 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
neuvector/controller:5.6.2824e29cf32c5
stdlib@go1.26.8
1.26.9
neuvector/enforcer:5.6.272e1deee40fb
stdlib@go1.27.0
1.26.9
neuvector/scanner:6d9e8b2ee8d69
stdlib@go1.27.1
1.26.9

Open the chart page →

1,341
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
stdlib@go1.16.5
1.26.9

Open the chart page →

4,945
openclawopenclawVerified publisher1.110.12 of 2See more

openclaw openclaw 1.110.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.9
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.110.151e6f187064f
stdlib@go1.26.4
1.26.9

Open the chart page →

3,151
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
stdlib@go1.26.4
1.26.9

Open the chart page →

635
questdbquestdb1.0.271 of 2See more

questdb questdb 1.0.27

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.9

Open the chart page →

163
adguard-homerm3lVerified publisher0.24.11 of 2See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
stdlib@go1.22.4
1.26.9

Open the chart page →

1,720
spegelspegelVerified publisher0.7.41 of 1See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinned26c60b05e08a
stdlib@go1.26.5
1.26.9

Open the chart page →

498
supabasetokens-studioVerified publisher1.0.03 of 14See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
stdlib@go1.23.2
1.26.9
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.26.9

Open the chart page →

26,708
wekanwekanVerified publisher12.27.02 of 3See more

wekan wekan 12.27.0

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/wekan/ferretdb:latest41786dd49068
stdlib@go1.27.0
1.26.9
ghcr.io/wekan/wekan:v12.27f2fc85bbe762
stdlib@go1.27.1
1.26.9

Open the chart page →

2,008
woodpeckerwoodpecker-ci3.7.52 of 2See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
woodpeckerci/woodpecker-agent:v3.19.0f85f163e0949
stdlib@go1.27.1
1.26.9
woodpeckerci/woodpecker-server:v3.19.06ca167a3c58b
stdlib@go1.27.1
1.26.9

Open the chart page →

406
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
stdlib@go1.22.2
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.9

Open the chart page →

3,546

Container images carrying it

6,378 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
l7mp/stunner-auth-server:1.1.02f8114477ba6
stdlib@go1.23.8
1.26.9
1
l7mp/stunner-gateway-operator:1.2.10ea40a1d42d5
stdlib@go1.26.4
1.26.9
1
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
stdlib@go1.23.8
1.26.9
1
l7mp/stunner-gateway-operator-premium:1.2.14383766e66c5
stdlib@go1.26.4
1.26.9
1
l7mp/stunner-gateway-operator-premium:devb2726bf5547d
stdlib@go1.27.1
1.26.9
1
labs64/auditflow9c1bd414fcfb
stdlib@go1.26.7
1.26.9
1
labs64/checkout4009b8251b57
stdlib@go1.26.7
1.26.9
1
labs64/payment-gateway5421f763b53e
stdlib@go1.26.7
1.26.9
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
stdlib@go1.26.5
1.26.9
1
langgenius/dify-api:1.16.1dcefa5f7c47c
stdlib@go1.26.4
1.26.9
1
langgenius/dify-ee-audit:3.9.8-ubi9e99aed151fc5
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-collector:3.9.8-ubi9a9b91fd62c94
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-enterprise:3.9.8-ubi9c392a36a4ef7
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-gateway:3.9.8-ubi99e314c29a61f
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-plugin-connector:3.9.8-ubi91848d8f1f144
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-plugin-crd:3.9.8-ubi96f4e0e5f6e5a
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-plugin-daemon-serverless:3.9.8-ubi9d2b8df196d08
stdlib@go1.26.2
1.26.9
1
langgenius/dify-ee-plugin-manager:3.9.8-ubi9207b343013a0
stdlib@go1.26.2
1.26.9
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
stdlib@go1.26.4
1.26.9
1
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
stdlib@go1.26.8
1.26.9
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
stdlib@go1.25.5
1.26.9
1
langgenius/dify-sandbox:0.2.124e65e8a351a2
stdlib@go1.23.3
1.26.9
1
langgenius/dify-sandbox:0.2.15750e1111426e
stdlib@go1.24.13
1.26.9
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
stdlib@go1.23.5
1.26.9
1
langgenius/dify-web:1.0.0d64914ff0d6d
stdlib@go1.22.5
1.26.9
1
launchdarkly/ld-relay:8.22.0065f211f5d7c
stdlib@go1.27.1
1.26.9
1
lavr/express-botx:0.42.0-rootlessad6ec93952fc
stdlib@go1.25.14
1.26.9
1
layer5/meshery:stable-latest78a8be21bef3
stdlib@go1.23.9
1.26.9
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
stdlib@go1.19.5
1.26.9
1
layer5/meshery-consul:stable-latest25a4cc38abcd
stdlib@go1.19.13
1.26.9
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.26.9
1
layer5/meshery-istio:stable-latestfde47c141ec6
stdlib@go1.23.9
1.26.9
1
layer5/meshery-kuma:stable-latest9d25f029a8a2
stdlib@go1.23.4
1.26.9
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
stdlib@go1.23.6
1.26.9
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
stdlib@go1.19.11
1.26.9
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
stdlib@go1.15.12
1.26.9
1
layer5/meshery-operator:stable-latest6f58a28fe422
stdlib@go1.23.9
1.26.9
1
layer5/meshery-osm:stable-latestec898e5786c6
stdlib@go1.19.8
1.26.9
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
stdlib@go1.19.11
1.26.9
1
lbenicio/kubernetes-dashboard-api:1.14.951d3d30206c8
stdlib@go1.25.11
1.26.9
1
lbenicio/kubernetes-dashboard-auth:1.4.1635eb784c03fa
stdlib@go1.25.12
1.26.9
1
lbenicio/kubernetes-dashboard-scraper:1.2.69202e96ad403
stdlib@go1.25.11
1.26.9
1
lbenicio/kubernetes-dashboard-web:1.7.142797937bc2a5
stdlib@go1.25.11
1.26.9
1
leonardomulticloud/svc-vault:v1.0.0e4acd2fbb7b1
stdlib@go1.23.1
1.26.9
1
leonardomulticloud/webhook:v1.0.0d119918900e8
stdlib@go1.22.6
1.26.9
1
library/caddy:2.660fb54d36b4b
stdlib@go1.20
1.26.9
1
library/caddy:2.2.0-alpine7367adca165f
stdlib@go1.15.2
1.26.9
1
library/caddy:2.11.2-alpine834468128c76
stdlib@go1.26.0
1.26.9
1
library/caddy:2.4.5874405536b3e
stdlib@go1.17
1.26.9
1
library/caddy:2.9-alpineb4e3952384eb
stdlib@go1.23.4
1.26.9
1

syft 1.42.1 · advisories as of 11 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.