StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,295
of 18,117 indexed, latest versions
Container images
6,105
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,295 of 18,117 indexed charts deploy, on 6,105 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,105
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Trending
Rank 13 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,295 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,105 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cephcsi/cephcsi:v3.14.2dc4bbac6efe1
stdlib@go1.23.4
1.26.9
2
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.9
2
quay.io/cilium/cilium-envoy:v1.37.6-1789133542-cbec91f666af0bf742da986d43832932dbb26b82af7382699576
stdlib@go1.27.1
1.26.9
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.9
2
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.9
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
stdlib@go1.16.15
1.26.9
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
stdlib@go1.25.10
1.26.9
2
quay.io/coreos/etcd:v3.7.2e9afa62b1e91
stdlib@go1.26.8
1.26.9
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.9
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
stdlib@go1.19.3
1.26.9
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
stdlib@go1.18.1
1.26.9
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
stdlib@go1.18.2
1.26.9
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
stdlib@go1.18.2
1.26.9
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
stdlib@go1.18.2
1.26.9
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
stdlib@go1.18.2
1.26.9
2
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
stdlib@go1.19.5
1.26.9
2
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
stdlib@go1.20.10
1.26.9
2
quay.io/jetstack/cert-manager-cainjector:v1.14.39395dec77fcf
stdlib@go1.21.7
1.26.9
2
quay.io/jetstack/cert-manager-cainjector:v1.15.3e0ce8ae280c8
stdlib@go1.22.5
1.26.9
2
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
stdlib@go1.23.8
1.26.9
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
stdlib@go1.23.8
1.26.9
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
stdlib@go1.21.7
1.26.9
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
stdlib@go1.20.10
1.26.9
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
stdlib@go1.19.5
1.26.9
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
stdlib@go1.22.5
1.26.9
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
stdlib@go1.19.5
1.26.9
2
quay.io/jetstack/cert-manager-startupapicheck:v1.15.34cbc1b022a23
stdlib@go1.22.5
1.26.9
2
quay.io/jetstack/cert-manager-startupapicheck:v1.14.3df8677135139
stdlib@go1.21.7
1.26.9
2
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
stdlib@go1.23.8
1.26.9
2
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
stdlib@go1.20.10
1.26.9
2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
stdlib@go1.23.8
1.26.9
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
stdlib@go1.19.5
1.26.9
2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
stdlib@go1.21.7
1.26.9
2
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
stdlib@go1.22.5
1.26.9
2
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.9
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
stdlib@go1.24.13
1.26.9
2
quay.io/kubevirt/kubevirt-csi-driver:latestbbc43bc25025
stdlib@go1.24.13
1.26.9
2
quay.io/metallb/controller:v0.16.1f51ab515de9c
stdlib@go1.25.9
1.26.9
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
stdlib@go1.25.8
1.26.9
2
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
stdlib@go1.19.5
1.26.9
2
quay.io/metallb/speaker:v0.16.116561e96531e
stdlib@go1.25.9
1.26.9
2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.26.9
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.9
2
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
stdlib@go1.17.10
1.26.9
2
quay.io/open-cluster-management/argocd-pull-integration:0.30.0683ae238f351
stdlib@go1.26.8
1.26.9
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
stdlib@go1.15.14
1.26.9
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
stdlib@go1.16.12
1.26.9
2
quay.io/openshift/origin-cli:lateste7965645fac6
stdlib@go1.26.7
1.26.9
2
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.9
2
quay.io/opstree/redis-operator:v0.22.2464ac61a6eb4
stdlib@go1.23.12
1.26.9
2

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.