StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,176 indexed, latest versions
Container images
6,074
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,239 of 18,176 indexed charts deploy, on 6,074 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,074
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Also known as
BIT-golang-2026-97030
Trending
Rank 16 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,074 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/devops-dojo7/fauxgpu/device-plugin:0.2.4e5a12388e3d8
stdlib@go1.23.12
1.26.9
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
stdlib@go1.25.4
1.26.9
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.9
1
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
stdlib@go1.17
1.26.9
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
stdlib@go1.16.6
1.26.9
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
stdlib@go1.24.3
1.26.9
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
stdlib@go1.19.2
1.26.9
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
stdlib@go1.23.4
1.26.9
1
ghcr.io/dexidp/dex:v2.38.0b1d793440a98
stdlib@go1.21.6
1.26.9
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
stdlib@go1.19.6
1.26.9
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
stdlib@go1.25.7
1.26.9
1
ghcr.io/dirien/minecraft-exporter:0.24.061d89bf99ff7
stdlib@go1.25.10
1.26.9
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
stdlib@go1.23.7
1.26.9
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
stdlib@go1.17.5
1.26.9
1
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
stdlib@go1.21.0
1.26.9
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
stdlib@go1.23.1
1.26.9
1
ghcr.io/dntosas/capi2argo-cluster-operator:v1.5.0fb8c6457ef6e
stdlib@go1.25.6
1.26.9
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
stdlib@go1.17.9
1.26.9
1
ghcr.io/dodevops/cloudian-exporter:0.1.18b7f2816541c
stdlib@go1.23.2
1.26.9
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.26.9
1
ghcr.io/dodevops/vmware-rest-proxy:0.1.730f7f73b0a10
stdlib@go1.21.7
1.26.9
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
stdlib@go1.19.8
1.26.9
1
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
stdlib@go1.19.8
1.26.9
1
ghcr.io/doodlescheduling/k8sdb-controller:v0.0.1a6c2251a6263
stdlib@go1.16.14
1.26.9
1
ghcr.io/doodlescheduling/k8skeycloak-controller:v0.0.19befc51b1ad6
stdlib@go1.15.15
1.26.9
1
ghcr.io/doodlescheduling/k8soauth2-proxy-controller:v0.1.280d049c9da31
stdlib@go1.17.11
1.26.9
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
stdlib@go1.17.8
1.26.9
1
ghcr.io/doodlescheduling/k8sprom-patch-controller:v0.1.243b92c9cf029
stdlib@go1.17.8
1.26.9
1
ghcr.io/doodlescheduling/k8stcpmap-controller:v0.0.1ff005643dc97
stdlib@go1.16.14
1.26.9
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
stdlib@go1.16.15
1.26.9
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.26.9
1
ghcr.io/douban/aliyun-exporter:mainb7c694331362
stdlib@go1.24.2
1.26.9
1
ghcr.io/douban/qiniu-exporter:maind1da3bcfad7d
stdlib@go1.19.5
1.26.9
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
stdlib@go1.24.2
1.26.9
1
ghcr.io/douban/upyun-exporter:main6810900c9c4a
stdlib@go1.25.5
1.26.9
1
ghcr.io/dpicillo/paguro/paguro-node-installer:v0.1.2526c1324e1dc
stdlib@go1.26.6
1.26.9
1
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
stdlib@go1.22.4
1.26.9
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
stdlib@go1.25.12
1.26.9
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
stdlib@go1.26.3
1.26.9
1
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
stdlib@go1.26.2
1.26.9
1
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
stdlib@go1.26.5
1.26.9
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
stdlib@go1.16.12
1.26.9
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
stdlib@go1.22.2
1.26.9
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
stdlib@go1.23.3
1.26.9
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
stdlib@go1.16.7
1.26.9
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
stdlib@go1.26.1
1.26.9
1
ghcr.io/edgelesssys/privatemode/privatemode-proxy6ca9950ed58d
stdlib@go1.26.8
1.26.9
1
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
stdlib@go1.21.6
1.26.9
1
ghcr.io/element-hq/ess-helm/matrix-tools:0.3.20eac0521be29
stdlib@go1.23.7
1.26.9
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
stdlib@go1.19.8
1.26.9
1

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.