StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,533
of 18,090 indexed, latest versions
Container images
6,378
deployed by those charts
Fix available
2 of 3
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,378
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r31.15.10-r81
OSV records
CGA-5c9p-v2mf-px8qDEBIAN-CVE-2026-97030GO-2026-6600
Also known as
CGA-2366-r3rr-m4w7, CGA-5f88-45wr-j5hg, CGA-h564-7jwp-p393, CGA-rw9c-5vrj-p96x, CGA-x92c-hcpv-h88w
Trending
Rank 13 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,533 by stars
ChartLatestAffected imagesRadar Score
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
stdlib@go1.21.3
1.26.9

Open the chart page →

2,082
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
stdlib@go1.16.8
1.26.9

Open the chart page →

19,747
asynqmongeneral-helm-chartsVerified publisher0.0.11 of 1See more

asynqmon general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
hibiken/asynqmon:latestac80bcffd2f9
stdlib@go1.18.10
1.26.9

Open the chart page →

1,427
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest99f52ce7bad8
stdlib@go1.26.6
1.26.9

Open the chart page →

343
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
stdlib@go1.22.7
1.26.9

Open the chart page →

4,555
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
stdlib@go1.26.4
1.26.9

Open the chart page →

422
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest9b49eed8f628
stdlib@go1.26.8
1.26.9

Open the chart page →

625
dispatchoor-apigeneral-helm-chartsVerified publisher0.1.11 of 1See more

dispatchoor-api general-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-api:latesta0b272f6682a
stdlib@go1.24.13
1.26.9

Open the chart page →

1,264
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
stdlib@go1.26.1
1.26.9

Open the chart page →

979
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9

Open the chart page →

6,066
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
stdlib@go1.25.9
1.26.9

Open the chart page →

4,694
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

880
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
stdlib@go1.19.11
1.26.9
postgis/postgis:11-2.5f479f6c3435e
stdlib@go1.16.7
1.26.9

Open the chart page →

38,042
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
stdlib@go1.16.7
1.26.9
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
stdlib@go1.16.7
1.26.9

Open the chart page →

19,569
ghostghostVerified publisher0.1.03 of 4See more

ghost ghost 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest9b49eed8f628
stdlib@go1.26.8
1.26.9
library/ghost:5.79.083f7bf209844
stdlib@go1.18.2
1.26.9
litestream/litestream:0.3c5a1e1b01916
stdlib@go1.21.3
1.26.9

Open the chart page →

11,240
rabbitmqginger-society0.1.02 of 2See more

rabbitmq ginger-society 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
kbudde/rabbitmq-exporter:latest12f27d6d84e6
stdlib@go1.21.8
1.26.9
library/rabbitmq:4-management8dd6e3570dda
stdlib@go1.22.2
1.26.9

Open the chart page →

2,282
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
stdlib@go1.17.7
1.26.9

Open the chart page →

5,795
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
stdlib@go1.23.5
1.26.9

Open the chart page →

1,329
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
stdlib@go1.21.0
1.26.9

Open the chart page →

2,053
gitlab-mr-conformgitlab-mr-conform0.6.01 of 1See more

gitlab-mr-conform gitlab-mr-conform 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/chrxmvtik/gitlab-mr-conform:0.6.0facdb9bf0394
stdlib@go1.25.9
1.26.9

Open the chart page →

790
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
stdlib@go1.19.12
1.26.9

Open the chart page →

3,341
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
stdlib@go1.14.7
1.26.9

Open the chart page →

3,454
prometheus-couchdb-exportergkarthiks0.1.31 of 1See more

prometheus-couchdb-exporter gkarthiks 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
gesellix/couchdb-prometheus-exporter:v27.2.05b891f1fc2b9
stdlib@go1.13.10
1.26.9

Open the chart page →

2,355
glassflow-etlglassflowVerified publisher0.5.2111 of 16See more

glassflow-etl glassflow 0.5.21

11 of the 16 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
library/nats:2.12.3-alpine88fe8e0e09d6
stdlib@go1.25.5
1.26.9
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.9
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.9
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.26.9
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
stdlib@go1.23.0
1.26.9
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
stdlib@go1.25.0
1.26.9
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
stdlib@go1.25.0
1.26.9
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
stdlib@go1.25.4
1.26.9
ghcr.io/glassflow/kafka-kerberos-gateway:latest2ae01c524a6e
stdlib@go1.21.13
1.26.9

Open the chart page →

17,301
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
stdlib@go1.22.10
1.26.9

Open the chart page →

4,000
postgresqlglassflowVerified publisher0.1.91 of 1See more

postgresql glassflow 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9

Open the chart page →

696
glassflow-operatorglassflow-operatorVerified publisher0.8.52 of 3See more

glassflow-operator glassflow-operator 0.8.5

2 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
stdlib@go1.25.0
1.26.9

Open the chart page →

1,486
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
stdlib@go1.24.5
1.26.9

Open the chart page →

3,449
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
stdlib@go1.20.14
1.26.9

Open the chart page →

1,526
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

13,056
gnp-stackgnp-stack0.0.511 of 14See more

gnp-stack gnp-stack 0.0.5

11 of the 14 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
stdlib@go1.25.3
1.26.9
library/nats:2.12.1-alpineb3f2bd84176a
stdlib@go1.25.3
1.26.9
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.9
natsio/nats-server-config-reloader:0.20.147094fcae2f4
stdlib@go1.24.8
1.26.9
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.26.9
rancher/local-path-provisioner:v0.0.329289da488b07
stdlib@go1.24.4
1.26.9
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
stdlib@go1.24.12
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
stdlib@go1.24.6
1.26.9
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.33d671cf20a35
stdlib@go1.25.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.9

Open the chart page →

18,570
go-app-helmgo-app-helm0.1.01 of 1See more

go-app-helm go-app-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
manojchaulagain/go-k8s:0.1.0f237b5f637ae
stdlib@go1.20.1
1.26.9

Open the chart page →

2,866
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
stdlib@go1.21.10
1.26.9

Open the chart page →

2,864
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
stdlib@go1.22.11
1.26.9

Open the chart page →

1,058
goldpingergoldpinger1.2.01 of 1See more

goldpinger goldpinger 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.5f7c60d319150
stdlib@go1.27.1
1.26.9

Open the chart page →

201
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:1665b16a8b326e
stdlib@go1.24.6
1.26.9

Open the chart page →

1,802
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
stdlib@go1.20.1
1.26.9
zhenghaoz/gorse-server:0.4.1239c565685b01
stdlib@go1.20.1
1.26.9
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
stdlib@go1.20.1
1.26.9

Open the chart page →

6,804
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
stdlib@go1.26.5
1.26.9

Open the chart page →

623
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
stdlib@go1.18.3
1.26.9

Open the chart page →

2,799
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.26.9
library/mongo:latestbac22ea7710d
stdlib@go1.26.8
1.26.9

Open the chart page →

24,196
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.26.9
library/mongo:latestbac22ea7710d
stdlib@go1.26.8
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.9

Open the chart page →

26,609
goweeklygoweekly2.0.01 of 1See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
stdlib@go1.17.12
1.26.9

Open the chart page →

2,114
harborgpg-dev1.18.35 of 8See more

harbor gpg-dev 1.18.3

5 of the 8 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
stdlib@go1.24.13
1.26.9
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
stdlib@go1.24.13
1.26.9
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
stdlib@go1.24.13
1.26.9
goharbor/registry-photon:v2.14.36533fc396cbc
stdlib@go1.24.13
1.26.9
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
stdlib@go1.25.7
1.26.9

Open the chart page →

5,473
ingress-nginxgpg-dev4.9.02 of 2See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.9

Open the chart page →

3,222
jaegergpg-dev3.3.34 of 5See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.9
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.9
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.9
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.26.9

Open the chart page →

22,255
kube-prometheus-stackgpg-dev84.0.05 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

5 of the 6 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
stdlib@go1.26.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
stdlib@go1.26.2
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
stdlib@go1.25.8
1.26.9
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.9

Open the chart page →

5,450
kubernetes-dashboardgpg-dev7.5.04 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
stdlib@go1.22.3
1.26.9
kubernetesui/dashboard-auth:1.1.307135c09e9ff
stdlib@go1.22.2
1.26.9
kubernetesui/dashboard-metrics-scraper:1.1.17747d363c9fe
stdlib@go1.22.1
1.26.9
kubernetesui/dashboard-web:1.4.04445b31a2c25
stdlib@go1.22.3
1.26.9

Open the chart page →

7,915
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
stdlib@go1.21.8
1.26.9

Open the chart page →

1,539
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
stdlib@go1.23.1
1.26.9
jaegertracing/all-in-one:1.53.060e65bfffe1f
stdlib@go1.21.5
1.26.9
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
stdlib@go1.23.3
1.26.9
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
stdlib@go1.22.5
1.26.9
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
stdlib@go1.22.8
1.26.9
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
stdlib@go1.22.8
1.26.9
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
stdlib@go1.21.5
1.26.9
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
stdlib@go1.23.3
1.26.9

Open the chart page →

58,550
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
stdlib@go1.25.8
1.26.9
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
stdlib@go1.26.2
1.26.9
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.9
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
stdlib@go1.26.2
1.26.9
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
stdlib@go1.25.3
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.9

Open the chart page →

5,703

Container images carrying it

6,378 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/vault:1.12.18de4d5f31b38
stdlib@go1.19.2
1.26.9
2
hashicorp/vault-k8s:1.3.15d74a885ae3e
stdlib@go1.21.3
1.26.9
2
hashicorp/vault-k8s:1.1.0844337076b72
stdlib@go1.19.3
1.26.9
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.9
2
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.9
2
hetznercloud/hcloud-cloud-controller-manager:v1.39.0d6fee5698759
stdlib@go1.26.8
1.26.9
2
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.26.9
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
stdlib@go1.21.10
1.26.9
2
ilum/api:6.7.3624fd09528c8
stdlib@go1.23.7
1.26.9
2
ilum/mongodb:6.0.542b6d774c37d
stdlib@go1.20.12
1.26.9
2
inaccel/daemon:latest093e1ea90ab8
stdlib@go1.21.6
1.26.9
2
inaccel/mkrt:latest187fd448b6f2
stdlib@go1.21.5
1.26.9
2
inaccel/reef:latestc967218739f3
stdlib@go1.21.6
1.26.9
2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
stdlib@go1.17.3
1.26.9
2
iomesh/csi-provisioner:v3.0.0f9508460b273
stdlib@go1.16.2
1.26.9
2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
stdlib@go1.19
1.26.9
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.26.9
2
iomesh/livenessprobe:v2.8.0560f01510f99
stdlib@go1.18
1.26.9
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
stdlib@go1.20.3
1.26.9
2
iomesh/node-disk-exporter:1.8.0f03148764f38
stdlib@go1.14.7
1.26.9
2
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
stdlib@go1.19
1.26.9
2
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
stdlib@go1.19.7
1.26.9
2
ipfs/ipfs-cluster:latest:v1.1.6a83266c524f1
stdlib@go1.26.3
1.26.9
2
ipfs/kubo:v0.33.21a30f5ed8579
stdlib@go1.23.6
1.26.9
2
istio/install-cni:1.24.2-distrolessaef4825e110f
stdlib@go1.23.2
1.26.9
2
istio/pilot:1.24.2-distroless137e44e3d1d2
stdlib@go1.23.2
1.26.9
2
istio/pilot:1.10.0294ca55bd1cc
stdlib@go1.16.4
1.26.9
2
istio/proxyv2:1.18.0757d28c24100
stdlib@go1.20.4
1.26.9
2
istio/proxyv2:1.9.687a9db561d2e
stdlib@go1.15.13
1.26.9
2
istio/proxyv2:1.10.088c6c693e67a
stdlib@go1.16.4
1.26.9
2
istio/proxyv2:1.10.3a78b7a165744
stdlib@go1.16.6
1.26.9
2
jaegertracing/all-in-one:1.3104d224a9999b
stdlib@go1.17.6
1.26.9
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
stdlib@go1.20.6
1.26.9
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
stdlib@go1.25.3
1.26.9
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.26.9
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
stdlib@go1.15.3
1.26.9
2
jmalloc/echo-server:0.3.1e4eaee2c7998
stdlib@go1.17
1.26.9
2
juicedata/csi-dashboard:v0.33.05e5edb62a010
stdlib@go1.25.14
1.26.9
2
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
stdlib@go1.25.14
1.26.9
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
stdlib@go1.19.4
1.26.9
2
kbudde/rabbitmq-exporter:1.0.0:latest12f27d6d84e6
stdlib@go1.21.8
1.26.9
2
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.9
2
kubernetesui/dashboard:v2.2.0148991563e37
stdlib@go1.15.1
1.26.9
2
kubeshop/testkube-api-server:2.14.1ce04897e5ea2
stdlib@go1.27.1
1.26.9
2
kubesphere/openelb:v0.4.4ed7311a0f9e4
stdlib@go1.15.15
1.26.9
2
kubesphere/porter:v0.4.38d1ed5ee1d2e
stdlib@go1.15.15
1.26.9
2
l7mp/stunner-auth-server:1.2.10d2094060b72
stdlib@go1.26.4
1.26.9
2
l7mp/stunner-gateway-operator:devee34f1c04b9b
stdlib@go1.27.1
1.26.9
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
stdlib@go1.19.3
1.26.9
2
langgenius/dify-sandbox:0.2.009b7e8705673
stdlib@go1.20.6
1.26.9
2

syft 1.42.1 · advisories as of 11 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.