StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,323
of 18,117 indexed, latest versions
Container images
6,150
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,323 of 18,117 indexed charts deploy, on 6,150 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,150
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Trending
Rank 13 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,323 by stars
ChartLatestAffected imagesRadar Score
tranquil-pdsrubxkubeVerified publisher0.2.01 of 2See more

tranquil-pds rubxkube 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.9

Open the chart page →

711
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
stdlib@go1.23.9
1.26.9

Open the chart page →

3,347
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
stdlib@go1.20.5
1.26.9

Open the chart page →

36,861
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
stdlib@go1.23.8
1.26.9

Open the chart page →

6,651
gha-runner-scale-set-controllerrunner-scale-set-controller0.15.01 of 1See more

gha-runner-scale-set-controller runner-scale-set-controller 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/actions/gha-runner-scale-set-controller:0.15.0162dfb5bfbda
stdlib@go1.27.1
1.26.9

Open the chart page →

213
runwhen-localrunwhen-contribVerified publisher0.7.22 of 3See more

runwhen-local runwhen-contrib 0.7.2

2 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.153.06ed874ea083d
stdlib@go1.26.3
1.26.9
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
stdlib@go1.25.5
1.26.9

Open the chart page →

4,375
rybbitrybbit-helm1.3.23 of 7See more

rybbit rybbit-helm 1.3.2

3 of the 7 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.9
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
stdlib@go1.20.7
1.26.9

Open the chart page →

8,848
janitorrryuunosukeds30.1.31 of 1See more

janitorr ryuunosukeds3 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
stdlib@go1.24.6
1.26.9

Open the chart page →

1,464
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/ubuntu:latestf144425ff09b
stdlib@go1.26.7
1.26.9

Open the chart page →

9,658
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
stdlib@go1.23.9
1.26.9

Open the chart page →

3,419
housekeepersaashousekeeper1.0.01 of 14See more

housekeeper saashousekeeper 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

4,884
sagawisesagawiseVerified publisher0.1.02 of 3See more

sagawise sagawise 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
stdlib@go1.22.9
1.26.9
venturenox/sagawise:latestc11d32f18718
stdlib@go1.22.2
1.26.9

Open the chart page →

4,393
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
stdlib@go1.17
1.26.9

Open the chart page →

4,148
tusdsagikazarmarkVerified publisher0.1.21 of 1See more

tusd sagikazarmark 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
tusproject/tusd:v1.10.01e457b59fd5b
stdlib@go1.19.2
1.26.9

Open the chart page →

2,394
fmtok8s-agenda-servicesalaboy0.1.21 of 2See more

fmtok8s-agenda-service salaboy 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
stdlib@go1.18.10
1.26.9

Open the chart page →

3,365
fmtok8s-c4p-servicesalaboy0.1.11 of 2See more

fmtok8s-c4p-service salaboy 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
stdlib@go1.19.7
1.26.9

Open the chart page →

3,365
fmtok8s-conference-chartsalaboy0.1.43 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

3 of the 6 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
stdlib@go1.18.10
1.26.9
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
stdlib@go1.19.7
1.26.9
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
stdlib@go1.17.11
1.26.9

Open the chart page →

19,188
fmtok8s-email-servicesalaboy0.2.01 of 1See more

fmtok8s-email-service salaboy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
stdlib@go1.17.11
1.26.9

Open the chart page →

3,845
knative-helm-operatorsalaboy1.9.02 of 2See more

knative-helm-operator salaboy 1.9.0

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/operator/cmd/webhookdigest-pinned6c5c90cdf707
stdlib@go1.19.5
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/default-domaindigest-pinned5e0429b70299
stdlib@go1.19.5
1.26.9

Open the chart page →

3,997
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
hellowsamarthya2.0.01 of 1See more

hellow samarthya 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
samarthya/spinnaker:v1.0ef06d81036af
stdlib@go1.17.6
1.26.9

Open the chart page →

3,365
saml-exportersaml-exporter0.5.02 of 2See more

saml-exporter saml-exporter 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.9

Open the chart page →

2,523
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mongo:noble61dd87ff554d
stdlib@go1.26.8
1.26.9

Open the chart page →

2,577
sample-applicationsample-application1.0.61 of 1See more

sample-application sample-application 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.26.9

Open the chart page →

1,051
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.9
library/influxdb:2.7b8d940ca9376
stdlib@go1.18.2
1.26.9

Open the chart page →

14,256
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
stdlib@go1.19.6
1.26.9

Open the chart page →

6,181
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
grafanasaurabh6-grafana0.2.01 of 1See more

grafana saurabh6-grafana 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
saurabh6/grafana_setup:v15c140fda7486
stdlib@go1.16.1
1.26.9

Open the chart page →

3,676
prometheussaurabh6-prometheus0.2.01 of 1See more

prometheus saurabh6-prometheus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
saurabh6/prometheus_setup:v19d4dbe7c1815
stdlib@go1.16.5
1.26.9

Open the chart page →

3,851
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
stdlib@go1.19.8
1.26.9

Open the chart page →

11,766
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
stdlib@go1.25.3
1.26.9

Open the chart page →

2,368
harborsb-helm-charts0.3.02 of 2See more

harbor sb-helm-charts 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
stdlib@go1.22.6
1.26.9
goharbor/registry-photon:v2.11.15645d459af2b
stdlib@go1.22.6
1.26.9

Open the chart page →

2,709
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

3,063
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
stdlib@go1.24.10
1.26.9

Open the chart page →

1,314
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
stdlib@go1.23.2
1.26.9

Open the chart page →

1,450
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.26.9

Open the chart page →

5,250
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
stdlib@go1.18.2
1.26.9

Open the chart page →

1,974
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

11,659
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.9

Open the chart page →

2,436
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
stdlib@go1.24.6
1.26.9

Open the chart page →

3,159
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
stdlib@go1.24.10
1.26.9

Open the chart page →

2,978
pushgatewaysb-helm-charts0.3.01 of 1See more

pushgateway sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
stdlib@go1.21.1
1.26.9

Open the chart page →

1,867
redissb-helm-charts0.4.01 of 1See more

redis sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/redis:7.4.1-alpinec1e88455c852
stdlib@go1.18.2
1.26.9

Open the chart page →

2,187
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.9

Open the chart page →

1,481
thanos-compactorsb-helm-charts0.3.01 of 1See more

thanos-compactor sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-querysb-helm-charts0.3.01 of 1See more

thanos-query sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-query-frontendsb-helm-charts0.3.01 of 1See more

thanos-query-frontend sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-receivesb-helm-charts0.3.01 of 1See more

thanos-receive sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-rulersb-helm-charts0.3.01 of 1See more

thanos-ruler sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.9

Open the chart page →

1,539

Container images carrying it

6,150 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:14.32d1e636f0778
stdlib@go1.16.7
1.26.9
1
library/postgres:14.232f439458ab6a
stdlib@go1.24.6
1.26.9
1
library/postgres:17.4304ab8135187
stdlib@go1.18.2
1.26.9
1
library/postgres:18.43a82e1f56c8f
stdlib@go1.24.6
1.26.9
1
library/postgres:143e7dd0bfd7bf
stdlib@go1.24.6
1.26.9
1
library/postgres:1642df6755a411
stdlib@go1.24.6
1.26.9
1
library/postgres:18.1-alpine3.2144d837eb4c2e
stdlib@go1.24.6
1.26.9
1
library/postgres:16.11468e1f126ca5
stdlib@go1.24.6
1.26.9
1
library/postgres:15.19-bookworm539ceaaae49b
stdlib@go1.24.6
1.26.9
1
library/postgres:16.6557fea37a744
stdlib@go1.18.2
1.26.9
1
library/postgres:13.11-bullseye5c265bf1fd30
stdlib@go1.18.2
1.26.9
1
library/postgres:17.5-alpine6567bca8d7bc
stdlib@go1.18.2
1.26.9
1
library/postgres:18.369e8582b781c
stdlib@go1.24.6
1.26.9
1
library/postgres:15.186eb0add3b77c
stdlib@go1.24.6
1.26.9
1
library/postgres:17.4-alpine7062a2109c4b
stdlib@go1.18.2
1.26.9
1
library/postgres:12-alpine7c8f48705831
stdlib@go1.18.2
1.26.9
1
library/postgres:157e2070cf6ad0
stdlib@go1.24.6
1.26.9
1
library/postgres:17.2-alpine7e5df973a748
stdlib@go1.18.2
1.26.9
1
library/postgres:15.38775adb39f0d
stdlib@go1.18.2
1.26.9
1
library/postgres:18.6-alpine3.23885cf05d376c
stdlib@go1.24.6
1.26.9
1
library/postgres:18.48ff36f3c6637
stdlib@go1.24.6
1.26.9
1
library/postgres:18.3a9abf4275f9e
stdlib@go1.24.6
1.26.9
1
library/postgres:14bdc3027c1610
stdlib@go1.24.6
1.26.9
1
library/postgres:15c67d80f67f76
stdlib@go1.24.6
1.26.9
1
library/postgres:15c961aa287d86
stdlib@go1.24.6
1.26.9
1
library/postgres:13.12ced3ba927f4c
stdlib@go1.18.2
1.26.9
1
library/postgres:14ceef4a62198b
stdlib@go1.24.6
1.26.9
1
library/postgres:17.10ebba4f4de37f
stdlib@go1.24.6
1.26.9
1
library/postgres:17.6-alpineef257d85f76e
stdlib@go1.24.6
1.26.9
1
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.9
1
library/postgres:17.5-bookwormfbcea1bd13b6
stdlib@go1.18.2
1.26.9
1
library/rabbitmq:4.3.5078107e03637
stdlib@go1.22.2
1.26.9
1
library/rabbitmq:4.1.8-management19c5ee40801d
stdlib@go1.22.2
1.26.9
1
library/rabbitmq:4.3.6446551b26c0b
stdlib@go1.22.2
1.26.9
1
library/rabbitmq:management6ec83ef56205
stdlib@go1.22.2
1.26.9
1
library/rabbitmq:4.3.6-management751bf4eeaa69
stdlib@go1.22.2
1.26.9
1
library/redis:7.0.4091a7b5de688
stdlib@go1.16.7
1.26.9
1
library/redis:7.0.15352c1fdadc91
stdlib@go1.18.2
1.26.9
1
library/redis:7-bullseye6a5130174e14
stdlib@go1.18.2
1.26.9
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
stdlib@go1.18.2
1.26.9
1
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.26.9
1
library/redis83edc2b8e9ff
stdlib@go1.18.2
1.26.9
1
library/redis:7.0.1092b8b307ee28
stdlib@go1.18.2
1.26.9
1
library/redis:7.4.1bb142a9c18ac
stdlib@go1.18.2
1.26.9
1
library/redis:7.4.1-alpinec1e88455c852
stdlib@go1.18.2
1.26.9
1
library/redis:7.0-alpinec9d92d840fd0
stdlib@go1.18.2
1.26.9
1
library/redmine:6.1.204ac44a2595b
stdlib@go1.24.6
1.26.9
1
library/registry:latestddf754342cfc
stdlib@go1.26.8
1.26.9
1
library/telegraf:1.20.428e98eece020
stdlib@go1.17.3
1.26.9
1
library/telegraf:1.27507a3eecf809
stdlib@go1.20.7
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.