StackRadar

CVE-2026-94440

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,377
of 18,104 indexed, latest versions
Container images
6,223
deployed by those charts
Fix available
1 of 2
affected packages

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Carried by container images the latest versions of 5,377 of 18,104 indexed charts deploy, on 6,223 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,223
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94440GO-2026-6608
Trending
Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,377 by stars
ChartLatestAffected imagesRadar Score
dbrepodbrepo1.13.311 of 25See more

dbrepo dbrepo 1.13.3

11 of the 25 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
stdlib@go1.23.4
1.26.9
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
stdlib@go1.23.8
1.26.9
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
stdlib@go1.22.5
1.26.9
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
stdlib@go1.21.12
1.26.9
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
stdlib@go1.23.8
1.26.9
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
stdlib@go1.22.8
1.26.9
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
stdlib@go1.22.8
1.26.9
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
stdlib@go1.22.8
1.26.9
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
stdlib@go1.22.7
1.26.9
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
stdlib@go1.24.1
1.26.9
bitnamilegacy/valkey:latest0384ca2eec63
stdlib@go1.23.10
1.26.9

Open the chart page →

63,774
deckarddeckardOfficial0.1.83 of 3See more

deckard deckard 0.1.8

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.9
blipai/deckard:0.1.8db8cd873d0eb
stdlib@go1.26.4
1.26.9

Open the chart page →

1,259
mealiedeimosfr-charts1.0.161 of 1See more

mealie deimosfr-charts 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
stdlib@go1.24.4
1.26.9

Open the chart page →

3,982
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
stdlib@go1.18.3
1.26.9

Open the chart page →

3,999
gripmockdeliveryheroVerified publisher1.1.31 of 1See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
stdlib@go1.14.6
1.26.9

Open the chart page →

3,889
labelsmanager-controllerdeliveryheroVerified publisher1.0.41 of 1See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
stdlib@go1.13.15
1.26.9

Open the chart page →

3,535
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
stdlib@go1.13.5
1.26.9

Open the chart page →

10,818
snapshot-controllerdemocratic-csiVerified publisher0.3.01 of 1See more

snapshot-controller democratic-csi 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
stdlib@go1.23.6
1.26.9

Open the chart page →

979
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
stdlib@go1.24.5
1.26.9

Open the chart page →

2,516
kube-bench-metricsdevopstalesVerified publisher0.1.01 of 1See more

kube-bench-metrics devopstales 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
elastisys/kube-bench-metrics:0.1.6509b94f1da55
stdlib@go1.15.7
1.26.9

Open the chart page →

3,158
kubedashdevopstalesOfficialVerified publisher4.0.05 of 8See more

kubedash devopstales 4.0.0

5 of the 8 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
stdlib@go1.24.6
1.26.9
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
stdlib@go1.26.1
1.26.9
prom/statsd-exporter:v0.22.48be660470961
stdlib@go1.17.3
1.26.9
sosedoff/pgweb:latesta5256d416e2e
stdlib@go1.24.6
1.26.9
quay.io/prometheuscommunity/postgres-exporter:v0.19.1e96064f87622
stdlib@go1.25.7
1.26.9

Open the chart page →

12,882
permission-managerdevopstalesVerified publisher1.8.01 of 1See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.9

Open the chart page →

3,398
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
stdlib@go1.18.10
1.26.9

Open the chart page →

6,566
dnsmasqdevplayer0Verified publisher0.1.51 of 2See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
stdlib@go1.16.5
1.26.9

Open the chart page →

4,535
whoamidevplayer0Verified publisher0.1.21 of 1See more

whoami devplayer0 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
traefik/whoami:v1.6.12c52bb2c8480
stdlib@go1.15.6
1.26.9

Open the chart page →

2,257
calicodevtron0.1.14 of 4See more

calico devtron 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
stdlib@go1.15.2
1.26.9
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
stdlib@go1.15.2
1.26.9
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
stdlib@go1.15.2
1.26.9
quay.io/devtron/calico-networking:pod2daemon-flexvol-v3.19.1c1f36b6e18e0
stdlib@go1.15.2
1.26.9

Open the chart page →

14,877
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
stdlib@go1.17.6
1.26.9

Open the chart page →

8,067
discord-alertmanagerdevtron-labs0.10.01 of 1See more

discord-alertmanager devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
quay.io/devtron/discord-alertmanager:ceceb475-65-35203586419ca31
stdlib@go1.18.1
1.26.9

Open the chart page →

1,801
dex-serverdex-server1.19.12 of 3See more

dex-server dex-server 1.19.1

2 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
stdlib@go1.21.6
1.26.9
public.ecr.aws/cloudnatix/llmariner/database-creator:1.19.162375abc3c56
stdlib@go1.23.12
1.26.9

Open the chart page →

3,342
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
stdlib@go1.13.10
1.26.9

Open the chart page →

9,883
matomodigitalist-open-cloud-matomo12.0.211 of 3See more

matomo digitalist-open-cloud-matomo 12.0.21

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hipages/php-fpm_exporter:2.2.09b5be9d3d955
stdlib@go1.17.10
1.26.9

Open the chart page →

3,650
directusdirectus-io2.1.03 of 3See more

directus directus-io 2.1.0

3 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
stdlib@go1.24.6
1.26.9
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.9
directus/directus:12.0.29c8470ea465c
stdlib@go1.23.12
1.26.9

Open the chart page →

9,924
alertmanager-ntfydjjudas21Verified publisher0.1.21 of 1See more

alertmanager-ntfy djjudas21 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/alexbakker/alertmanager-ntfy:1.0.12f4db8064595
stdlib@go1.24.4
1.26.9

Open the chart page →

1,139
dkim-managerdkim-managerVerified publisher0.2.01 of 1See more

dkim-manager dkim-manager 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/hsn723/dkim-manager:1.4.00312232b31a2
stdlib@go1.26.0
1.26.9

Open the chart page →

709
myappdl-grafana-webappVerified publisher0.1.01 of 2See more

myapp dl-grafana-webapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
onkar17/grafana:latestaef3ebd6e24e
stdlib@go1.16.1
1.26.9

Open the chart page →

3,736
dnation-pingdnationcloud0.1.94 of 5See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
stdlib@go1.15.5
1.26.9
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.9
prom/blackbox-exporter:v0.18.01ffc3f109eb3
stdlib@go1.15.2
1.26.9
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.26.9

Open the chart page →

15,292
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
stdlib@go1.20.4
1.26.9

Open the chart page →

3,368
docker-registrydocker-repository0.1.01 of 1See more

docker-registry docker-repository 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/registry:latestddf754342cfc
stdlib@go1.26.8
1.26.9

Open the chart page →

249
dockyarddockyardVerified publisher0.5.01 of 1See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
stdlib@go1.22.7
1.26.9

Open the chart page →

2,152
thermitedollarshaveclubOfficialVerified publisher0.1.171 of 1See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dollarshaveclub/thermite:0.0.31663cbf25fcfe
stdlib@go1.17.1
1.26.9

Open the chart page →

3,867
domain-lockerdomain-locker0.3.31 of 2See more

domain-locker domain-locker 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9

Open the chart page →

1,206
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
stdlib@go1.24.6
1.26.9

Open the chart page →

10,146
archerydoubanVerified publisher0.4.32 of 6See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
stdlib@go1.22.1
1.26.9
hhyo/archery:v1.9.11aa41843419e
stdlib@go1.15.6
1.26.9

Open the chart page →

7,956
karmadoubanVerified publisher1.9.21 of 1See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/prymitive/karma:v0.85d06892218680
stdlib@go1.16.3
1.26.9

Open the chart page →

3,354
agent-sandboxdovakiin0Verified publisher1.0.51 of 2See more

agent-sandbox dovakiin0 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v1.0.2dc700a37ecf4
stdlib@go1.27.1
1.26.9

Open the chart page →

218
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.9

Open the chart page →

77,564
dragonfly-stackdragonflyVerified publisher0.1.24 of 7See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
stdlib@go1.21.5
1.26.9
dragonflyoss/manager:v2.1.49c3ef7f10698d
stdlib@go1.21.1
1.26.9
dragonflyoss/scheduler:v2.1.49523785c77787
stdlib@go1.21.1
1.26.9
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
stdlib@go1.18.10
1.26.9

Open the chart page →

22,818
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
stdlib@go1.18.10
1.26.9

Open the chart page →

4,527
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
stdlib@go1.20.12
1.26.9

Open the chart page →

76,475
gaxyduyet0.1.11 of 1See more

gaxy duyet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/duyet/gaxy:latest31d658a22bd1
stdlib@go1.27.1
1.26.9

Open the chart page →

141
dyff-operatordyff-operatorVerified publisher0.24.221 of 1See more

dyff-operator dyff-operator 0.24.22

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-operator:0.24.227f930cdae40d
stdlib@go1.24.13
1.26.9

Open the chart page →

667
gethdysnixVerified publisher1.1.21 of 1See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ethereum/client-go:v1.14.8886ec69b35b0
stdlib@go1.22.6
1.26.9

Open the chart page →

2,190
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.9

Open the chart page →

4,113
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
library/mariadb:12.3.2a02fe89cb597
stdlib@go1.24.6
1.26.9

Open the chart page →

3,794
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
stdlib@go1.26.4
1.26.9

Open the chart page →

1,795
glideeinstackOfficialVerified publisher0.0.21 of 1See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
stdlib@go1.21.6
1.26.9

Open the chart page →

1,994
elaraelaraVerified publisher0.5.21 of 1See more

elara elara 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
ghcr.io/sergeyslonimsky/elara:0.5.2a410a7ed1ee8
stdlib@go1.27.0
1.26.9

Open the chart page →

220
elchi-discoveryelchi1.0.01 of 1See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
jhonbrownn/elchi-discovery:v1.0.08f6551ecc98c
stdlib@go1.23.1
1.26.9

Open the chart page →

1,182
elchi-stackelchi2.0.64 of 10See more

elchi-stack elchi 2.0.6

4 of the 10 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
stdlib@go1.24.6
1.26.9
library/mongo:6.0.12646902910d6a
stdlib@go1.18.2
1.26.9
otel/opentelemetry-collector-contrib:0.89.0995f17004231
stdlib@go1.21.4
1.26.9
victoriametrics/victoria-metrics:v1.93.577a9815d0640
stdlib@go1.21.1
1.26.9

Open the chart page →

17,681
navidromeemmas-chartsVerified publisher0.0.61 of 1See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-94440.

Container imageDigestPackageFixed in
deluan/navidrome:0.50.02cf4442b0099
stdlib@go1.21.0
1.26.9

Open the chart page →

2,899

Container images carrying it

6,223 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dodevops/cloudian-exporter:0.1.18b7f2816541c
stdlib@go1.23.2
1.26.9
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.26.9
1
ghcr.io/dodevops/vmware-rest-proxy:0.1.730f7f73b0a10
stdlib@go1.21.7
1.26.9
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
stdlib@go1.19.8
1.26.9
1
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
stdlib@go1.19.8
1.26.9
1
ghcr.io/doodlescheduling/k8sdb-controller:v0.0.1a6c2251a6263
stdlib@go1.16.14
1.26.9
1
ghcr.io/doodlescheduling/k8skeycloak-controller:v0.0.19befc51b1ad6
stdlib@go1.15.15
1.26.9
1
ghcr.io/doodlescheduling/k8soauth2-proxy-controller:v0.1.280d049c9da31
stdlib@go1.17.11
1.26.9
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
stdlib@go1.17.8
1.26.9
1
ghcr.io/doodlescheduling/k8sprom-patch-controller:v0.1.243b92c9cf029
stdlib@go1.17.8
1.26.9
1
ghcr.io/doodlescheduling/k8stcpmap-controller:v0.0.1ff005643dc97
stdlib@go1.16.14
1.26.9
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
stdlib@go1.16.15
1.26.9
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.26.9
1
ghcr.io/douban/aliyun-exporter:mainb7c694331362
stdlib@go1.24.2
1.26.9
1
ghcr.io/douban/qiniu-exporter:maind1da3bcfad7d
stdlib@go1.19.5
1.26.9
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
stdlib@go1.24.2
1.26.9
1
ghcr.io/douban/upyun-exporter:main6810900c9c4a
stdlib@go1.25.5
1.26.9
1
ghcr.io/dpicillo/paguro/paguro-node-installer:v0.1.2526c1324e1dc
stdlib@go1.26.6
1.26.9
1
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
stdlib@go1.22.4
1.26.9
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
stdlib@go1.25.12
1.26.9
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
stdlib@go1.26.3
1.26.9
1
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
stdlib@go1.26.2
1.26.9
1
ghcr.io/duyet/gaxy:latest31d658a22bd1
stdlib@go1.27.1
1.26.9
1
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
stdlib@go1.26.5
1.26.9
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
stdlib@go1.16.12
1.26.9
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
stdlib@go1.22.2
1.26.9
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
stdlib@go1.23.3
1.26.9
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
stdlib@go1.16.7
1.26.9
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
stdlib@go1.26.1
1.26.9
1
ghcr.io/edgelesssys/privatemode/privatemode-proxybe97a17a37ed
stdlib@go1.26.7
1.26.9
1
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
stdlib@go1.21.6
1.26.9
1
ghcr.io/element-hq/ess-helm/matrix-tools:0.3.20eac0521be29
stdlib@go1.23.7
1.26.9
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
stdlib@go1.19.8
1.26.9
1
ghcr.io/eminaktas/kubedns-shepherd:v0.4.40a20e1b41740
stdlib@go1.26.8
1.26.9
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
stdlib@go1.25.1
1.26.9
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
stdlib@go1.24.13
1.26.9
1
ghcr.io/emqx/emqx-operator:2.3.378d1c5eacebd
stdlib@go1.24.13
1.26.9
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
stdlib@go1.26.4
1.26.9
1
ghcr.io/eosc-lot-1/logrotate:3-alpineb0e20d200f89
stdlib@go1.22.4
1.26.9
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
stdlib@go1.20
1.26.9
1
ghcr.io/eraser-dev/eraser-manager:v1.4.2cda6025d1152
stdlib@go1.26.5
1.26.9
1
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
stdlib@go1.26.7
1.26.9
1
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
stdlib@go1.26.4
1.26.9
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
stdlib@go1.23.9
1.26.9
1
ghcr.io/eryalito/kubensync-operator:0.14.1483efca276a8
stdlib@go1.26.8
1.26.9
1
ghcr.io/esdmitrii/kconmon-ng-agent:2.5.10cbfd4f7a9f5
stdlib@go1.27.1
1.26.9
1
ghcr.io/esdmitrii/kconmon-ng-controller:2.5.1ae1eda37ec0f
stdlib@go1.27.1
1.26.9
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
stdlib@go1.21.6
1.26.9
1
ghcr.io/ethan-kane-ops/cellcast-hub:v0.5.0c450eb54b7e4
stdlib@go1.26.8
1.26.9
1
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle:0.1.2538ed30a4c62
stdlib@go1.26.8
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.