StackRadar

CVE-2026-97030

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,176 indexed, latest versions
Container images
6,074
deployed by those charts
Fix available
1 of 2
affected packages

Recognize yield as regexp preceder keyword in html/template

Carried by container images the latest versions of 5,239 of 18,176 indexed charts deploy, on 6,074 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,074
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97030GO-2026-6600
Also known as
BIT-golang-2026-97030
Trending
Rank 22 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,074 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
stdlib@go1.20.6
1.26.9
1
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
stdlib@go1.24.13
1.26.9
1
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
stdlib@go1.22.5
1.26.9
1
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
stdlib@go1.26.3
1.26.9
1
ghcr.io/fluxcd/flagger:1.45.015b372d35012
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
stdlib@go1.24.12
1.26.9
1
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
stdlib@go1.26.4
1.26.9
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
stdlib@go1.23.6
1.26.9
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
stdlib@go1.23.6
1.26.9
1
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
stdlib@go1.26.4
1.26.9
1
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
stdlib@go1.23.6
1.26.9
1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
stdlib@go1.26.4
1.26.9
1
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.9
1
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
stdlib@go1.25.0
1.26.9
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
stdlib@go1.20.12
1.26.9
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
stdlib@go1.23.8
1.26.9
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
stdlib@go1.19.1
1.26.9
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
stdlib@go1.18.10
1.26.9
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
stdlib@go1.24.6
1.26.9
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
stdlib@go1.23.8
1.26.9
1
ghcr.io/foxcpp/maddy:0.9.6e1074e92a452
stdlib@go1.26.8
1.26.9
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
stdlib@go1.22.0
1.26.9
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver:1.9.0cdba39e3f3d0
stdlib@go1.22.0
1.26.9
1
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
stdlib@go1.27.1
1.26.9
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
stdlib@go1.18.3
1.26.9
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
stdlib@go1.18.1
1.26.9
1
ghcr.io/gabe565/ascii-movie:1.9.627f85bb98da3
stdlib@go1.24.0
1.26.9
1
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
stdlib@go1.23.4
1.26.9
1
ghcr.io/gabe565/domain-watch:latest34c5a1e351d6
stdlib@go1.24.1
1.26.9
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
stdlib@go1.20.12
1.26.9
1
ghcr.io/gabe565/matrimony:latestd39a9d7c3e1b
stdlib@go1.22.0
1.26.9
1
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
stdlib@go1.27.1
1.26.9
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
stdlib@go1.24.1
1.26.9
1
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
stdlib@go1.21.3
1.26.9
1
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
stdlib@go1.24.4
1.26.9
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
stdlib@go1.19.8
1.26.9
1
ghcr.io/getsentry/sentry-kubernetes:latestc88fec0dde4a
stdlib@go1.26.4
1.26.9
1
ghcr.io/gijsvandulmen/k8qu:1.4e897b18db13d
stdlib@go1.22.6
1.26.9
1
ghcr.io/github/github-mcp-server:v1.9.0881b53d6f75f
stdlib@go1.25.12
1.26.9
1
ghcr.io/github/github-mcp-server:latestffced0d76e77
stdlib@go1.27.1
1.26.9
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
stdlib@go1.25.0
1.26.9
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
stdlib@go1.25.4
1.26.9
1
ghcr.io/glassflow/kafka-kerberos-gateway:latest2ae01c524a6e
stdlib@go1.21.13
1.26.9
1
ghcr.io/glauth/glauth:v2.5.4905b5db533fc
stdlib@go1.25.0
1.26.9
1
ghcr.io/gluesys/daos-operator:v0.1.0-rc.4c38bd9a7691c
stdlib@go1.26.8
1.26.9
1

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.