StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,221
of 18,137 indexed, latest versions
Container images
6,033
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,221 of 18,137 indexed charts deploy, on 6,033 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,033
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Trending
Rank 15 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,221 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,033 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/peimanja/artifactory_exporter:v1.16.0d3e3929a3d2b
stdlib@go1.21.13
1.26.9
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
stdlib@go1.18.4
1.26.9
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
stdlib@go1.22.4
1.26.9
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
stdlib@go1.26.4
1.26.9
1
ghcr.io/phoeluga/synology-proxy-operator:0.0.9a0b74674d0e3
stdlib@go1.27.1
1.26.9
1
ghcr.io/pii-shield/pii-shield-operator:2.2.71d21a4b3683c
stdlib@go1.27.1
1.26.9
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
stdlib@go1.14.6
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.0b26d85c68aa8
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook:v0.12.0fbb6df9ad2af
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
stdlib@go1.26.7
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
stdlib@go1.26.7
1.26.9
1
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
stdlib@go1.27.1
1.26.9
1
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.9
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
stdlib@go1.26.0
1.26.9
1
ghcr.io/podtato-head/entry:latestc3d9d9c98be7
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/hat:latestde37ff39a4c0
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/left-arm:latest97596c95276a
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/left-leg:latest00bb31622b1e
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/right-arm:latest5f8f97a60558
stdlib@go1.19
1.26.9
1
ghcr.io/podtato-head/right-leg:latest03e125b9279e
stdlib@go1.19
1.26.9
1
ghcr.io/port-labs/ocean-gateway:latest452eccee99ba
stdlib@go1.25.14
1.26.9
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
stdlib@go1.26.7
1.26.9
1
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.166c788f9cb8c4
stdlib@go1.26.6
1.26.9
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.26.9
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.9
1
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.9
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
stdlib@go1.20.11
1.26.9
1
ghcr.io/processone/ejabberd:latestec5cf7bc8562
stdlib@go1.25.14
1.26.9
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
stdlib@go1.23.4
1.26.9
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
stdlib@go1.22.5
1.26.9
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
stdlib@go1.25.1
1.26.9
1
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.9
1
ghcr.io/projecthelena/warden:v0.9.0a2df64f001f6
stdlib@go1.25.13
1.26.9
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
stdlib@go1.26.3
1.26.9
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
stdlib@go1.25.6
1.26.9
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.9
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.26.9
1
ghcr.io/prymitive/karma:v0.85d06892218680
stdlib@go1.16.3
1.26.9
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.9
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.9
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
stdlib@go1.26.4
1.26.9
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
stdlib@go1.20.10
1.26.9
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
stdlib@go1.26.4
1.26.9
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
stdlib@go1.23.1
1.26.9
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
stdlib@go1.22.0
1.26.9
1
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
stdlib@go1.21.3
1.26.9
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
stdlib@go1.23.3
1.26.9
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.