StackRadar

CVE-2026-94448

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,323
of 18,117 indexed, latest versions
Container images
6,150
deployed by those charts
Fix available
1 of 2
affected packages

Reset context tracking on consecutive template expressions in html/template

Carried by container images the latest versions of 5,323 of 18,117 indexed charts deploy, on 6,150 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,150
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94448GO-2026-6599
Trending
Rank 12 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,323 by stars
ChartLatestAffected imagesRadar Score
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
stdlib@go1.24.6
1.26.9

Open the chart page →

15,673
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
stdlib@go1.16.12
1.26.9

Open the chart page →

3,261
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
stdlib@go1.17.5
1.26.9

Open the chart page →

4,284
scaleway-certmanager-webhookscaleway-charts0.4.31 of 1See more

scaleway-certmanager-webhook scaleway-charts 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.1.36d94c970e710
stdlib@go1.26.5
1.26.9

Open the chart page →

449
scaleway-secrets-store-csiscaleway-charts0.1.11 of 1See more

scaleway-secrets-store-csi scaleway-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
scaleway/scaleway-secrets-store-csi:v0.1.19acc53a69962
stdlib@go1.26.5
1.26.9

Open the chart page →

527
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.9

Open the chart page →

2,429
sonarqubescalified-sonarqubeVerified publisher26.9.01 of 2See more

sonarqube scalified-sonarqube 26.9.0

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

703
scalyr-k8snode-managerscalyr-k8snode-managerVerified publisher0.1.71 of 1See more

scalyr-k8snode-manager scalyr-k8snode-manager 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.26.9

Open the chart page →

3,011
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.9

Open the chart page →

2,098
cosischichtelVerified publisher0.1.01 of 1See more

cosi schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/objectstorage-controller:v20221027-v0.1.1-8-g300019fa84b574e8027
stdlib@go1.18.3
1.26.9

Open the chart page →

2,280
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
stdlib@go1.21.11
1.26.9

Open the chart page →

1,956
dawarichschichtelVerified publisher0.4.01 of 1See more

dawarich schichtel 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
stdlib@go1.24.4
1.26.9

Open the chart page →

6,864
draytek-exporterschichtelVerified publisher0.2.41 of 1See more

draytek-exporter schichtel 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/superq/draytek-exporter:v0.2.03b577bdceaae
stdlib@go1.25.4
1.26.9

Open the chart page →

980
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
stdlib@go1.22.5
1.26.9

Open the chart page →

2,145
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
stdlib@go1.22.2
1.26.9

Open the chart page →

3,840
rabbitmq-cluster-operatorschichtelVerified publisher0.1.81 of 1See more

rabbitmq-cluster-operator schichtel 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.26.9

Open the chart page →

755
rabbitmq-topology-operatorschichtelVerified publisher0.1.91 of 1See more

rabbitmq-topology-operator schichtel 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
stdlib@go1.24.6
1.26.9

Open the chart page →

862
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.9

Open the chart page →

3,091
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
stdlib@go1.18.1
1.26.9

Open the chart page →

4,686
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
stdlib@go1.20.2
1.26.9

Open the chart page →

7,270
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.26.9

Open the chart page →

2,519
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
stdlib@go1.19.13
1.26.9

Open the chart page →

2,238
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
stdlib@go1.16.1
1.26.9

Open the chart page →

4,958
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.9

Open the chart page →

5,658
seafileschmitzis13.0.132 of 4See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
stdlib@go1.26.8
1.26.9
seafileltd/notification-server:13.0.211cac4101d0f4
stdlib@go1.26.2
1.26.9

Open the chart page →

44,556
version-checkerschmitzis0.2.21 of 1See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.9

Open the chart page →

4,267
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
stdlib@go1.23.4
1.26.9

Open the chart page →

5,205
koffanschoenwald0.1.81 of 1See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.9

Open the chart page →

174
minifluxschoenwald0.1.61 of 1See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
miniflux/miniflux:2.3.349d7b6098761
stdlib@go1.26.5
1.26.9

Open the chart page →

540
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
stdlib@go1.20.5
1.26.9

Open the chart page →

36,659
yopassschoenwald1.1.01 of 2See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
jhaals/yopass:14.10.06c33d9c813f7
stdlib@go1.27.1
1.26.9

Open the chart page →

547
openldapschoolguys-helmcharts0.1.31 of 1See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.9

Open the chart page →

5,253
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
stdlib@go1.26.3
1.26.9

Open the chart page →

61,619
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
stdlib@go1.24.3
1.26.9

Open the chart page →

3,008
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
stdlib@go1.17.3
1.26.9

Open the chart page →

3,471
ldap-instance-configsciencebox0.0.11 of 1See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.9

Open the chart page →

5,253
centralbrainsciencemeshVerified publisher0.0.34 of 5See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
stdlib@go1.15.1
1.26.9
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.9
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.9
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
stdlib@go1.15.3
1.26.9

Open the chart page →

14,661
seafileseafileVerified publisher0.12.11 of 1See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.9

Open the chart page →

77,269
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
stdlib@go1.19.4
1.26.9

Open the chart page →

5,847
hermitcrabseal-ioVerified publisher0.1.42 of 2See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
sealio/hermitcrab:v0.1.4a326a2f03660
stdlib@go1.21.6
1.26.9
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
stdlib@go1.20.7
1.26.9

Open the chart page →

6,413
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
stdlib@go1.16.7
1.26.9

Open the chart page →

3,974
seashellsseashells1.0.01 of 1See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
rokk42/seashells:1.0-k8sdfc850a5db9e
stdlib@go1.22.3
1.26.9

Open the chart page →

1,411
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.82 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
stdlib@go1.24.5
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.9

Open the chart page →

3,345
wallabagsebtiz13-chartsVerified publisher0.6.01 of 1See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.9

Open the chart page →

1,555
secret-managersecret-managerVerified publisher1.0.03 of 4See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault:v1.0.0e4acd2fbb7b1
stdlib@go1.23.1
1.26.9
leonardomulticloud/webhook:v1.0.0d119918900e8
stdlib@go1.22.6
1.26.9
library/mysql:9.0.192dc86967801
stdlib@go1.18.2
1.26.9

Open the chart page →

7,672
secrets-bridgesecrets-bridge0.2.01 of 1See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
stdlib@go1.24.13
1.26.9

Open the chart page →

789
aws-secretssecretsprovider0.1.01 of 1See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Open the chart page →

3,439
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
stdlib@go1.24.2
1.26.9

Open the chart page →

1,735
secret-syncsecret-syncVerified publisher0.1.111 of 1See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
csepulvedab/secret-sync:0.5227a6f2b0ff8
stdlib@go1.19.4
1.26.9

Open the chart page →

2,270

Container images carrying it

6,150 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/docker:20.10.21-dind3153fa63f546
stdlib@go1.18.7
1.26.9
1
library/docker:29.8.1-dind:dind:latest3f3c01aaaebf
stdlib@go1.26.8
1.26.9
1
library/docker:dind-rootless54155db4950e
stdlib@go1.26.8
1.26.9
1
library/docker:dind7dcdfc4a2024
stdlib@go1.26.8
1.26.9
1
library/docker:27-cli851f91d24121
stdlib@go1.23.5
1.26.9
1
library/docker:28.3.3-dinda56b3bdde893
stdlib@go1.24.5
1.26.9
1
library/docker:27-dindaa3df78ecf32
stdlib@go1.22.11
1.26.9
1
library/docker:23.0.6-dindafa5d5134900
stdlib@go1.19.9
1.26.9
1
library/docker:23.0.1-dindd9a0fd8bdd15
stdlib@go1.19.5
1.26.9
1
library/docker:26.1-dinddd43b430341a
stdlib@go1.21.11
1.26.9
1
library/ghost:6.37.01ef2e532ca4d
stdlib@go1.23.12
1.26.9
1
library/ghost:6.25.12654b1e90413
stdlib@go1.24.6
1.26.9
1
library/ghost:6.41.129773d6be407
stdlib@go1.24.6
1.26.9
1
library/ghost:6.39.0-alpine77196da4b0df
stdlib@go1.24.6
1.26.9
1
library/ghost:5.79.083f7bf209844
stdlib@go1.18.2
1.26.9
1
library/ghost:6.65.090592b712b6b
stdlib@go1.24.6
1.26.9
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
stdlib@go1.24.6
1.26.9
1
library/golang:lateste0174e51e812
stdlib@go1.27.1
1.26.9
1
library/influxdb:1.12.3-meta8812029260b5
stdlib@go1.24.13
1.26.9
1
library/influxdb:2.8983c696655e8
stdlib@go1.24.9
1.26.9
1
library/influxdb:2.7.4-alpinea10d46445d68
stdlib@go1.21.3
1.26.9
1
library/influxdb:1.12.3-datab0f9fc41ed79
stdlib@go1.24.13
1.26.9
1
library/influxdb:2.0.8ba10ac9ba17a
stdlib@go1.16.5
1.26.9
1
library/influxdb:latestcdd3dbdea45c
stdlib@go1.25.9
1.26.9
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
stdlib@go1.18.3
1.26.9
1
library/kapacitor:1.6.37232f6388a4d
stdlib@go1.17.2
1.26.9
1
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.26.9
1
library/logstash:9.1.233eae14f0867
stdlib@go1.23.12
1.26.9
1
library/mariadb:10.7.307e06f2e7ae9
stdlib@go1.16.7
1.26.9
1
library/mariadb:10.11.21c33370a599c
stdlib@go1.16.7
1.26.9
1
library/mariadb:10.422edfe1c7834
stdlib@go1.18.2
1.26.9
1
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.26.9
1
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.26.9
1
library/mariadb:12.3.2628f228f0fd5
stdlib@go1.24.6
1.26.9
1
library/mariadb:116422478cb8e1
stdlib@go1.24.6
1.26.9
1
library/mariadb:11.8.46b848cb24fbb
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.6.218a16204dc96c
stdlib@go1.18.2
1.26.9
1
library/mariadb:10.79a48ac9f196f
stdlib@go1.16.7
1.26.9
1
library/mariadb:12.3.2a02fe89cb597
stdlib@go1.24.6
1.26.9
1
library/mariadb:12.2.2b1cb255a9939
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.10.2bfc25a68e113
stdlib@go1.16.7
1.26.9
1
library/mariadb:13.0.2:latestd4fdec0510ad
stdlib@go1.26.7
1.26.9
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.6.15e22328f4d714
stdlib@go1.16.7
1.26.9
1
library/mariadb:10.9.4fbb8456ebdb1
stdlib@go1.16.7
1.26.9
1
library/mariadb:11.7.2fcc7fcd7114a
stdlib@go1.18.2
1.26.9
1
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.26.9
1
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.26.9
1
library/mongo:5.0.32-focal3b6c281e1c08
stdlib@go1.24.0
1.26.9
1
library/mongo:4.4-bionic3d0e6df9fd5b
stdlib@go1.16.3
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.