CVE-2026-94448
UnscoredAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,554
- of 18,071 indexed, latest versions
- Container images
- 6,411
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Reset context tracking on consecutive template expressions in html/template
Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9 | 6,411 |
| golang-1.19deb | 1.19.8-2 | no fix listed | 1 |
- OSV records
- DEBIAN-CVE-2026-94448GO-2026-6599
- Trending
- Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,554 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| paperless-ngxadnoctemVerified publisher | 0.5.0 | 3 of 5See more | 25,719 |
| agentareaagentareaVerified publisher | 0.0.26 | 8 of 17See more | 17,180 |
| traefikaigisukVerified publisher | 0.1.1 | 1 of 1See more | 3,817 |
| ais-operatoraistoreVerified publisher | 4.1.0 | 1 of 1See more | 72 |
| akeyless-api-gatewayakeyless-services-helmVerified publisher | 1.62.28 | 1 of 1See more | 3,052 |
| visa-k8s-controlleralba-visa-helm-charts | 1.0.0 | 1 of 1See more | 260 |
| adguard-homealekcVerified publisher | 3.2.0 | 1 of 2See more | 288 |
| cloudflaredalekcVerified publisher | 1.9.0 | 1 of 1See more | 495 |
| alertmanager-discordalertmanagerdiscordVerified publisher | 0.3.2 | 1 of 1See more | 766 |
| alertmanager-matrixalertmanager-matrixVerified publisher | 0.1.16 | 1 of 1See more | 664 |
| paperless-ngxalexmorbo-paperless-ngxVerified publisher | 0.2.0 | 1 of 2See more | 14,048 |
| clearml-agentallegroaiVerified publisher | 5.3.3 | 1 of 1See more | 73,257 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 6 of 9See more | 25,073 |
| pact-brokeralmorgvVerified publisher | 0.1.0 | 1 of 1See more | 6,095 |
| mariadbalphani-helm-chartsVerified publisher | 10.10.3 | 1 of 1See more | 9,588 |
| soft-servealphani-helm-chartsVerified publisher | 0.4.0 | 1 of 1See more | 3,884 |
| smockerandrcunsVerified publisher | 0.0.4 | 1 of 1See more | 2,884 |
| cloudflare-operatorankra-chartsVerified publisher | 0.2.0 | 1 of 1See more | 858 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 7,457 |
| upcloud-csiankra-chartsVerified publisher | 0.4.1 | 8 of 8See more | 22,013 |
| annotations-exporterannotations-exporter | 0.5.0 | 1 of 1See more | 1,852 |
| alazanteonVerified publisher | 0.12.0 | 1 of 1See more | 4,094 |
| anteonanteonVerified publisher | 2.6.4 | 5 of 13See more | 27,363 |
| antreaantreaVerified publisher | 2.7.0 | 2 of 2See more | 4,673 |
| api-usage-serverapi-usage-server | 1.16.0 | 1 of 1See more | 1,105 |
| gateway-helmappscodeVerified publisher | 0.0.0-latest | 1 of 2See more | 1,657 |
| kubedb-opscenterappscodeVerified publisher | 2026.7.10 | 1 of 1See more | 431 |
| kubedb-provisionerappscodeVerified publisher | 0.66.0 | 1 of 1See more | 874 |
| scannerappscodeVerified publisher | 2026.1.15 | 3 of 3See more | 6,966 |
| smtprelayappscodeVerified publisher | 2026.9.11 | 1 of 1See more | 1,280 |
| stash-enterpriseappscodeVerified publisher | 0.42.0 | 4 of 4See more | 5,664 |
| virtual-secrets-serverappscodeVerified publisher | 2026.8.14 | 1 of 1See more | 484 |
| argocd-backup-s3argocd-backup-s3Verified publisher | 0.9.5 | 1 of 1See more | 6,446 |
| argocd-rbac-operatorargocd-rbac-operator | 0.4.5 | 1 of 1See more | 1,311 |
| kedaarieotechVerified publisher | 0.1.0 | 2 of 3See more | 3,459 |
| s3dartur9010Verified publisher | 1.0.1 | 1 of 1See more | 2,108 |
| arvancloud-webhookarvancloud-webhookVerified publisher | 1.0.1 | 1 of 1See more | 736 |
| cert-exporterarzu | 3.0.1 | 1 of 1See more | 3,896 |
| soarv113assist-iot-cybersecurity-monitoring-soar | 0.1.3 | 1 of 5See more | 20,312 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 12,347 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 5 of 9See more | 196,388 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 5 of 9See more | 196,368 |
| astradnsastradnsVerified publisher | 0.2.9 | 2 of 2See more | 3,442 |
| deployautoml | 0.1.0 | 2 of 3See more | 4,267 |
| cso-proxyav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 5,375 |
| dex-k8sav1o-chartsVerified publisher | 0.2.1 | 1 of 1See more | 4,490 |
| kube-image-webhookav1o-chartsVerified publisher | 0.1.3 | 1 of 1See more | 4,751 |
| prismav1o-chartsVerified publisher | 0.3.1 | 1 of 1See more | 2,211 |
| kubebrowseravistoOfficialVerified publisher | 1.4.0 | 1 of 1See more | 1,058 |
| azuredisk-csi-driverazuredisk-csi-driverVerified publisher | 1.36.0 | 7 of 8See more | 633 |
Container images carrying it
6,411 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 54393e03f3b2 | stdlib | 1.26.9 | 3 |
| mintel/ | caf71cee7b9a | stdlib | 1.26.9 | 3 |
| natsio/ | a3381560aab6 | stdlib | 1.26.9 | 3 |
| natsio/ | b3359eeb10bf | stdlib | 1.26.9 | 3 |
| natsio/ | 26c826662ac8 | stdlib | 1.26.9 | 3 |
| oamdev/ | 231c423c2b17 | stdlib | 1.26.9 | 3 |
| oliver006/ | 6ca518a72f30 | stdlib | 1.26.9 | 3 |
| opencsghq/ | b98600564e07 | stdlib | 1.26.9 | 3 |
| opencsghq/ | 0491782f7bac | stdlib | 1.26.9 | 3 |
| openebs/ | f6c18b0f8c8a | stdlib | 1.26.9 | 3 |
| openebs/ | 6afe2123c457 | stdlib | 1.26.9 | 3 |
| openebs/ | aea39e49bb97 | stdlib | 1.26.9 | 3 |
| oryd/ | 2c93beb5e5f2 | stdlib | 1.26.9 | 3 |
| otel/ | 39923a8e431b | stdlib | 1.26.9 | 3 |
| pgsty/ | b616a0cf8cb2 | stdlib | 1.26.9 | 3 |
| prom/ | d5155cfac40a | stdlib | 1.26.9 | 3 |
| prom/ | d8a61419b841 | stdlib | 1.26.9 | 3 |
| prom/ | 565ee8650122 | stdlib | 1.26.9 | 3 |
| prom/ | bfad037f95e5 | stdlib | 1.26.9 | 3 |
| prom/ | 0a9031142481 | stdlib | 1.26.9 | 3 |
| prom/ | 8305a33fb80a | stdlib | 1.26.9 | 3 |
| prom/ | a5df60347882 | stdlib | 1.26.9 | 3 |
| prom/ | d23aca343b86 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 10f66b5df886 | stdlib | 1.26.9 | 3 |
| qingcloud/ | 4cd5366a9f51 | stdlib | 1.26.9 | 3 |
| rancher/ | 090bef429ed1 | stdlib | 1.26.9 | 3 |
| rancher/ | 61b68d4372ba | stdlib | 1.26.9 | 3 |
| rcdelacruz/ | 38007f358355 | stdlib | 1.26.9 | 3 |
| rss3/ | d1d2ae6efd05 | stdlib | 1.26.9 | 3 |
| signoz/ | fcc4a3288154 | stdlib | 1.26.9 | 3 |
| solace/ | 3c8a8b7fdcae | stdlib | 1.26.9 | 3 |
| stakater/ | 83fef483d497 | stdlib | 1.26.9 | 3 |
| tykio/ | 1161bd297135 | stdlib | 1.26.9 | 3 |
| tykio/ | 50b3e4f5398a | stdlib | 1.26.9 | 3 |
| tykio/ | 55b4d31c7a01 | stdlib | 1.26.9 | 3 |
| tykio/ | 1489b58f642b | stdlib | 1.26.9 | 3 |
| tykio/ | 205215b815a4 | stdlib | 1.26.9 | 3 |
| vikunja/ | ed1f3ed467fe | stdlib | 1.26.9 | 3 |
| wallabag/ | 4a527e027e0d | stdlib | 1.26.9 | 3 |
| yugabytedb/ | b6dba322c734 | stdlib | 1.26.9 | 3 |
| gcr.io/ | 2a685a38dd01 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 93fa0daf603c | stdlib | 1.26.9 | 3 |
| ghcr.io/ | d1036b07e348 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | a27779ed1085 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 38a4cfc548b0 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 0c6735a025dc | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 9bc91e9d1f8e | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 2a2b99d466e8 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 734c1e29d1d9 | stdlib | 1.26.9 | 3 |
| ghcr.io/ | 56faf97016d6 | stdlib | 1.26.9 | 3 |