StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,263
of 18,131 indexed, latest versions
Container images
6,077
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,263 of 18,131 indexed charts deploy, on 6,077 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+209 more1.26.96,077
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Trending
Rank 13 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,263 by stars
ChartLatestAffected imagesRadar Score
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.9

Open the chart page →

4,267
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.9
quay.io/prometheus/alertmanager:lateste9733bafb1bd
stdlib@go1.26.8
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.9

Open the chart page →

863
ical-filter-proxyyungwoodVerified publisher0.3.11 of 1See more

ical-filter-proxy yungwood 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
yungwood/ical-filter-proxy:0.3.1ddc3f30ab05f
stdlib@go1.26.5
1.26.9

Open the chart page →

259
synergy-wholesale-exporteryungwoodVerified publisher0.1.11 of 1See more

synergy-wholesale-exporter yungwood 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
yungwood/synergy-wholesale-exporter:0.1.1054dce85989b
stdlib@go1.26.5
1.26.9

Open the chart page →

259
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
stdlib@go1.20.4
1.26.9
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
stdlib@go1.20.4
1.26.9

Open the chart page →

6,700
zahori-moonzahoriVerified publisher1.0.13 of 3See more

zahori-moon zahori 1.0.1

3 of the 3 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.5.1a8837b00ba1c
stdlib@go1.20.4
1.26.9
quay.io/aerokube/moon-conf:2.5.19ca307b30080
stdlib@go1.20.4
1.26.9
quay.io/aerokube/moon-ui:2.0.589990b146824
stdlib@go1.20.5
1.26.9

Open the chart page →

5,025
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
stdlib@go1.20.5
1.26.9

Open the chart page →

3,117
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.9

Open the chart page →

2,134
posthogzeet0.23.22 of 9See more

posthog zeet 0.23.2

2 of the 9 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
stdlib@go1.17.13
1.26.9
altinity/metrics-exporter:latesta5206c713de7
stdlib@go1.26.8
1.26.9

Open the chart page →

4,799
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
stdlib@go1.26.5
1.26.9

Open the chart page →

827
karmazekker6Verified publisher0.22.01 of 1See more

karma zekker6 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.133f5d0a0ff4062
stdlib@go1.27.1
1.26.9

Open the chart page →

148
zookeeper-exporterzookeeper-exporter0.1.01 of 1See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.26.9

Open the chart page →

2,294
zoo-project-druzoo-projectOfficialVerified publisher0.10.92 of 6See more

zoo-project-dru zoo-project 0.10.9

2 of the 6 container images this version deploys carry CVE-2026-97030.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.2477f585114c32
stdlib@go1.24.6
1.26.9
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
stdlib@go1.26.8
1.26.9

Open the chart page →

7,286

Container images carrying it

6,077 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
projectsveltos/sveltoscluster-manager:v1.16.012b498869a16
stdlib@go1.27.1
1.26.9
1
projectsveltos/techsupport:v1.16.04e12d6454ace
stdlib@go1.27.1
1.26.9
1
projectsveltos/ui-backend:v1.16.1f6fa338637eb
stdlib@go1.27.1
1.26.9
1
prom/blackbox-exporter:v0.22.0608acee5704a
stdlib@go1.18.5
1.26.9
1
prom/blackbox-exporter:v0.25.0b04a9fef4fa0
stdlib@go1.22.2
1.26.9
1
prom/blackbox-exporter:v0.23.0ca04aa9d9093
stdlib@go1.19.3
1.26.9
1
prom/consul-exporter:v0.13.04e4cfd809e96
stdlib@go1.23.2
1.26.9
1
prometheuscommunity/elasticsearch-exporter:v1.3.0fe735268fbdc
stdlib@go1.16.9
1.26.9
1
prometheuscommunity/postgres-exporter:v0.17.0f8381eb4326a
stdlib@go1.23.6
1.26.9
1
prometheuscommunity/pushprox:v0.2.02f32058f4fae
stdlib@go1.22.1
1.26.9
1
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
stdlib@go1.26.4
1.26.9
1
prom/graphite-exporter:v0.16.0e54bca6645ea
stdlib@go1.23.2
1.26.9
1
prom/influxdb-exporter:v0.11.427e33e18634a
stdlib@go1.19.9
1.26.9
1
prom/influxdb-exporter:v0.9.0f63fd77c05ee
stdlib@go1.17.8
1.26.9
1
prom/memcached-exporter:v0.9.001267317c95d
stdlib@go1.16.2
1.26.9
1
prom/memcached-exporter:v0.15.592a6ad5a3d3e
stdlib@go1.25.6
1.26.9
1
prom/memcached-exporter:v0.15.0bb01ad25e9fc
stdlib@go1.23.3
1.26.9
1
prom/node-exporter:v1.10.23ac34ce007ac
stdlib@go1.25.3
1.26.9
1
prom/node-exporter:v1.6.0d2e48098c364
stdlib@go1.20.4
1.26.9
1
prom/prometheus:v2.51.24f6c47e39a90
stdlib@go1.22.2
1.26.9
1
prom/prometheus:v2.18.15880ec936055
stdlib@go1.14.2
1.26.9
1
prom/prometheus:v3.13.36976aa8a60fe
stdlib@go1.26.8
1.26.9
1
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.9
1
prom/prometheus:v2.19.2cd134bd4fca0
stdlib@go1.14.4
1.26.9
1
prom/prometheus:v3.8.0d936808bdea5
stdlib@go1.25.4
1.26.9
1
prom/prometheus:v2.22.2f7ffebdd428b
stdlib@go1.15.5
1.26.9
1
prom/promlens:v0.4.04a377d1a0eaa
stdlib@go1.26.5
1.26.9
1
prom/pushgateway:v1.5.128fe26c8b8b1
stdlib@go1.19.3
1.26.9
1
prom/pushgateway:v1.4.33496e0f85943
stdlib@go1.18.2
1.26.9
1
prom/snmp-exporter:v0.20.09d226d7de223
stdlib@go1.15.8
1.26.9
1
prom/statsd-exporter:v0.31.01d5d341c4eb7
stdlib@go1.26.7
1.26.9
1
prom/statsd-exporter:v0.24.061d866e93b56
stdlib@go1.19.9
1.26.9
1
prom/statsd-exporter:v0.29.0632f70580492
stdlib@go1.26.0
1.26.9
1
prom/statsd-exporter:v0.22.48be660470961
stdlib@go1.17.3
1.26.9
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
stdlib@go1.22.6
1.26.9
1
prowlercloud/prowler-api:5.31.14f252d579be2
stdlib@go1.26.3-X:jsonv2
1.26.9
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
stdlib@go1.21.5
1.26.9
1
pschiffe/pdns-mysql:alpinea7d2d021c788
stdlib@go1.21.5
1.26.9
1
pschiffe/pdns-pgsql:5.0a227d41bc665
stdlib@go1.21.5
1.26.9
1
pubeldev/prusa_exporter:2.0.01091665a020a
stdlib@go1.25.5
1.26.9
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
stdlib@go1.24.13
1.26.9
1
pysga1996/redis:latest3af6d0c7db19
stdlib@go1.18.2
1.26.9
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
stdlib@go1.18.2
1.26.9
1
qmcgaw/gluetun:v3.40.02b42bfa04675
stdlib@go1.23.4
1.26.9
1
qonstrukt/php:8.4-v8-apache089af7925aa1
stdlib@go1.26.4
1.26.9
1
qoveryrd/digital-mobius:0.1.4b30a9398a83c
stdlib@go1.15.5
1.26.9
1
quiq/docker-registry-ui:0.9.491281da47036
stdlib@go1.18
1.26.9
1
qumine/ingress-controller:v0.8.5f2c8a2148381
stdlib@go1.19
1.26.9
1
qumine/minecraft-server:v0.1.15c0b650d51132
stdlib@go1.19.4
1.26.9
1
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
stdlib@go1.17
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.