StackRadar

CVE-2026-94448

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,263
of 18,131 indexed, latest versions
Container images
6,077
deployed by those charts
Fix available
1 of 2
affected packages

Reset context tracking on consecutive template expressions in html/template

Carried by container images the latest versions of 5,263 of 18,131 indexed charts deploy, on 6,077 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+209 more1.26.96,077
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-94448GO-2026-6599
Trending
Rank 12 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,263 by stars
ChartLatestAffected imagesRadar Score
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.9

Open the chart page →

4,267
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.9
quay.io/prometheus/alertmanager:lateste9733bafb1bd
stdlib@go1.26.8
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.9

Open the chart page →

863
ical-filter-proxyyungwoodVerified publisher0.3.11 of 1See more

ical-filter-proxy yungwood 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
yungwood/ical-filter-proxy:0.3.1ddc3f30ab05f
stdlib@go1.26.5
1.26.9

Open the chart page →

259
synergy-wholesale-exporteryungwoodVerified publisher0.1.11 of 1See more

synergy-wholesale-exporter yungwood 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
yungwood/synergy-wholesale-exporter:0.1.1054dce85989b
stdlib@go1.26.5
1.26.9

Open the chart page →

259
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
stdlib@go1.20.4
1.26.9
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
stdlib@go1.20.4
1.26.9

Open the chart page →

6,700
zahori-moonzahoriVerified publisher1.0.13 of 3See more

zahori-moon zahori 1.0.1

3 of the 3 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.5.1a8837b00ba1c
stdlib@go1.20.4
1.26.9
quay.io/aerokube/moon-conf:2.5.19ca307b30080
stdlib@go1.20.4
1.26.9
quay.io/aerokube/moon-ui:2.0.589990b146824
stdlib@go1.20.5
1.26.9

Open the chart page →

5,025
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
stdlib@go1.20.5
1.26.9

Open the chart page →

3,117
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.9

Open the chart page →

2,134
posthogzeet0.23.22 of 9See more

posthog zeet 0.23.2

2 of the 9 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
stdlib@go1.17.13
1.26.9
altinity/metrics-exporter:latesta5206c713de7
stdlib@go1.26.8
1.26.9

Open the chart page →

4,799
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
stdlib@go1.26.5
1.26.9

Open the chart page →

827
karmazekker6Verified publisher0.22.01 of 1See more

karma zekker6 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.133f5d0a0ff4062
stdlib@go1.27.1
1.26.9

Open the chart page →

148
zookeeper-exporterzookeeper-exporter0.1.01 of 1See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.26.9

Open the chart page →

2,294
zoo-project-druzoo-projectOfficialVerified publisher0.10.92 of 6See more

zoo-project-dru zoo-project 0.10.9

2 of the 6 container images this version deploys carry CVE-2026-94448.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.2477f585114c32
stdlib@go1.24.6
1.26.9
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
stdlib@go1.26.8
1.26.9

Open the chart page →

7,286

Container images carrying it

6,077 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oamdev/kube-webhook-certgen:v2.331e0892f3583
stdlib@go1.16.9
1.26.9
1
oamdev/terraform-controller:v0.8.070447f4d360a
stdlib@go1.16.4
1.26.9
1
oamdev/vector-controller:v0.2.39dd8be44ffc9
stdlib@go1.17.13
1.26.9
1
oamdev/vela-core:v1.11.095fa412c934e
stdlib@go1.23.8
1.26.9
1
oamdev/vela-prism:v1.6.06db6a937647d
stdlib@go1.19.3
1.26.9
1
obolnetwork/charon-dkg-sidecar:main87902178f0e7
stdlib@go1.26.7
1.26.9
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
stdlib@go1.22.5
1.26.9
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
stdlib@go1.18.2
1.26.9
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
stdlib@go1.24.5
1.26.9
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
stdlib@go1.21.10
1.26.9
1
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.26.9
1
okteto/civo-webhook:0.5.357cd51176538
stdlib@go1.21.3
1.26.9
1
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.26.9
1
oliver006/redis_exporter:v1.67.0120f7ec77293
stdlib@go1.23.4
1.26.9
1
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.26.9
1
oliver006/redis_exporter:v1.66.0d98e6db8094f
stdlib@go1.23.2
1.26.9
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
stdlib@go1.26.1
1.26.9
1
olliai/exposecontroller:1.0.5a470d96525e4
stdlib@go1.16.3
1.26.9
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
stdlib@go1.17.2
1.26.9
1
ondrejsika/counter:latestd95eaeee2172
stdlib@go1.26.2
1.26.9
1
onkar17/grafana:latestaef3ebd6e24e
stdlib@go1.16.1
1.26.9
1
opea/codegen-ui:1.02bee4eb66f3e
stdlib@go1.20.7
1.26.9
1
opea/codetrans-ui:1.03ef121f34610
stdlib@go1.20.12
1.26.9
1
opea/docsum-ui:1.07f854e9bffaf
stdlib@go1.20.12
1.26.9
1
opea/gmcmanager:1.0514af17c495c
stdlib@go1.21.13
1.26.9
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
stdlib@go1.25.11
1.26.9
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
stdlib@go1.16.5
1.26.9
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
stdlib@go1.19.8
1.26.9
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
stdlib@go1.24.4
1.26.9
1
opencsghq/csghub-portal:v2.5.1-eed28266bae753
stdlib@go1.23.3
1.26.9
1
opencsghq/csghub-server:v2.5.1-ee20fbb6ea62a9
stdlib@go1.26.0
1.26.9
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
stdlib@go1.24.10
1.26.9
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
stdlib@go1.22.7
1.26.9
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
stdlib@go1.26.4
1.26.9
1
opencsghq/kube-state-metrics:v2.19.15ea147562ec8
stdlib@go1.26.4
1.26.9
1
opencsghq/lws:v0.6.1de15437db41b
stdlib@go1.24.0
1.26.9
1
opencsghq/minio:RELEASE.2025-09-07T16-13-09Z47f08843cf13
stdlib@go1.24.6
1.26.9
1
opencsghq/prometheus:v3.13.00aac0d04749e
stdlib@go1.26.4
1.26.9
1
opencsghq/prometheus-config-reloader:v0.92.144e6ec00729b
stdlib@go1.26.4
1.26.9
1
opendatacube/ows:latest668cbb41473c
stdlib@go1.22.2
1.26.9
1
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.9
1
openebs/provisioner-nfs:0.11.04f41dd782761
stdlib@go1.19.13
1.26.9
1
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.9
1
openenergyprojects/modbus_exporter:20230617_a14455158990f24fb25
stdlib@go1.20.5
1.26.9
1
openfga/openfga:v1.18.036097b960f66
stdlib@go1.26.4
1.26.9
1
openfga/openfga:v1.9.25e94966c11df
stdlib@go1.24.5
1.26.9
1
openkruise/agent-sandbox-controller:v0.6.02d5687595a31
stdlib@go1.25.14
1.26.9
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
stdlib@go1.23.4
1.26.9
1
openkruise/kruise-manager:v1.8.30482722b4e56
stdlib@go1.22.11
1.26.9
1
openkruise/kruise-manager:v1.9.1f81ae78a36a4
stdlib@go1.23.9
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.