Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.26.9
grafana/promtail :2.7.0	c16c710f7333	stdlib@go1.19.2	1.26.9
phntom/chartmuseum :v0.15.2	9242b4df9e65	stdlib@go1.18.5	1.26.9
phntom/kochi :1.1.3	3b82358bd56e	stdlib@go1.15.5	1.26.9
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	stdlib@go1.19.2	1.26.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	stdlib@go1.19.3	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	stdlib@go1.19.3	1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.26.9
quay.io/prometheuscommunity/elasticsearch-exporter :v1.5.0	13a41e8ac836	stdlib@go1.18.4	1.26.9
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	stdlib@go1.19.2	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	stdlib@go1.19.1	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	stdlib@go1.19.3	1.26.9

Open the chart page →

39,239

prometheus-elasticsearch-exporterphntom

4.5.1

1 of 2 See more

prometheus-elasticsearch-exporter phntom 4.5.1

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9

Open the chart page →

3,117

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	stdlib@go1.19	1.26.9

Open the chart page →

94,572

picoclawpicoclaw

0.1.26

1 of 1 See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/mattn/picoclaw :latest	517556c8b144	stdlib@go1.26.0	1.26.9

Open the chart page →

1,995

piepie

0.11.1

1 of 1 See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/pie :0.18.0	aa467443e407	stdlib@go1.25.14	1.26.9

Open the chart page →

2,712

piggy-webhookspiggy

0.7.6

1 of 1 See more

piggy-webhooks piggy 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/kongz/piggy-webhooks :0.7.6	9197edc00bbf	stdlib@go1.26.8	1.26.9

Open the chart page →

205

pagespighosh-pages

1.0.0

1 of 3 See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

pii-shieldpii-shield

2.2.7

1 of 1 See more

pii-shield pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
thelisdeep/pii-shield :2.2.7	6a8b0c89227b	stdlib@go1.27.1	1.26.9

Open the chart page →

141

pii-shield-operatorpii-shield

2.2.7

1 of 1 See more

pii-shield-operator pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/pii-shield/pii-shield-operator :2.2.7	1d21a4b3683c	stdlib@go1.27.1	1.26.9

Open the chart page →

224

pillar-csipillar-csi

0.5.4

8 of 9 See more

pillar-csi pillar-csi 0.5.4

8 of the 9 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/isac322/pillar-csi/agent :0.5.4	adb7fecffc4e	stdlib@go1.27.1	1.26.9
ghcr.io/isac322/pillar-csi/controller :0.5.4	f9eea76ec045	stdlib@go1.27.1	1.26.9
ghcr.io/isac322/pillar-csi/node :0.5.4	835432e4ddf1	stdlib@go1.27.1	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.20.0	19f2cf2f40e1	stdlib@go1.26.6	1.26.9

Open the chart page →

2,272

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	stdlib@go1.22.1	1.26.9

Open the chart page →

2,351

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	stdlib@go1.18.5	1.26.9

Open the chart page →

4,663

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	stdlib@go1.24.2	1.26.9

Open the chart page →

8,634

substreams-sink-kvpinax

0.0.4

1 of 1 See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	stdlib@go1.22.9	1.26.9

Open the chart page →

59,737

substreams-sink-nooppinax

0.0.3

1 of 1 See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	stdlib@go1.22.9	1.26.9

Open the chart page →

59,668

substreams-tier-2pinax

0.0.8

1 of 1 See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	stdlib@go1.24.5	1.26.9

Open the chart page →

6,204

pipekit-agentpipekit-helm

8.4.0

1 of 1 See more

pipekit-agent pipekit-helm 8.4.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
pipekit13/agent :v8.4.0	50afc3bd0158	stdlib@go1.26.8	1.26.9

Open the chart page →

378

pipelockpipelock

3.6.0

1 of 1 See more

pipelock pipelock 3.6.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/luckypipewrench/pipelock :3.6.0	66d65eaca81d	stdlib@go1.26.8	1.26.9

Open the chart page →

205

pixie-operator-chartpixie

0.1.7

1 of 3 See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	1b6002156f56	stdlib@go1.21.7	1.26.9

Open the chart page →

2,634

pixie-operator-helm2-chartpixie

0.1.2

1 of 2 See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	f9ea8cef95ac	stdlib@go1.19.6	1.26.9

Open the chart page →

2,606

planectlplanectl

0.7.0

6 of 10 See more

planectl planectl 0.7.0

6 of the 10 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	stdlib@go1.22.3	1.26.9
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	stdlib@go1.24.6	1.26.9
gitea/act_runner :0.2.11	c57233403eff	stdlib@go1.23.1	1.26.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.26.9
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	stdlib@go1.24.13	1.26.9
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	stdlib@go1.22.2	1.26.9

Open the chart page →

32,025

account-operatorplatform-mesh-account-operator

0.21.1

1 of 1 See more

account-operator platform-mesh-account-operator 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/account-operator :v0.15.5	fa4923226063	stdlib@go1.26.7	1.26.9

Open the chart page →

223

extension-manager-operatorplatform-mesh-extension-manager-operator

0.43.0

1 of 1 See more

extension-manager-operator platform-mesh-extension-manager-operator 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator :v0.10.0	9371fcf05f76	stdlib@go1.26.7	1.26.9

Open the chart page →

223

kubernetes-graphql-gatewayplatform-mesh-kubernetes-graphql-gateway

0.53.0

1 of 1 See more

kubernetes-graphql-gateway platform-mesh-kubernetes-graphql-gateway 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway :v1.20.0	2e6c9c111893	stdlib@go1.26.7	1.26.9

Open the chart page →

227

platform-mesh-operatorplatform-mesh-operator

0.47.0

1 of 1 See more

platform-mesh-operator platform-mesh-operator 0.47.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator :v0.89.0	b26d85c68aa8	stdlib@go1.26.7	1.26.9

Open the chart page →

223

rebac-authz-webhookplatform-mesh-rebac-authz-webhook

0.23.0

1 of 1 See more

rebac-authz-webhook platform-mesh-rebac-authz-webhook 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook :v0.12.0	fbb6df9ad2af	stdlib@go1.26.7	1.26.9

Open the chart page →

218

security-operatorplatform-mesh-security-operator

0.38.1

1 of 1 See more

security-operator platform-mesh-security-operator 0.38.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/security-operator :v0.36.0	9b26032812fd	stdlib@go1.26.7	1.26.9

Open the chart page →

227

virtual-workspacesplatform-mesh-virtual-workspaces

0.14.0

1 of 1 See more

virtual-workspaces platform-mesh-virtual-workspaces 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces :v0.17.0	bb2ee6241719	stdlib@go1.26.7	1.26.9

Open the chart page →

238

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	stdlib@go1.13.12	1.26.9

Open the chart page →

12,700

pixiecorepnnl-miscscripts

0.0.16

1 of 1 See more

pixiecore pnnl-miscscripts 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/pixiecore :1.0.1-1	c6f17741a0d7	stdlib@go1.24.1	1.26.9

Open the chart page →

1,497

tenant-namespacepnnl-miscscripts

0.6.23

1 of 1 See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	stdlib@go1.18.2	1.26.9

Open the chart page →

3,580

tenant-namespace-operatorpnnl-miscscripts

0.1.28

1 of 1 See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	stdlib@go1.19.13	1.26.9

Open the chart page →

13,995

podnat-controllerpodnat-controller

0.5.2

1 of 1 See more

podnat-controller podnat-controller 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
gutmensch/podnat-controller :0.5.2	566979793fc4	stdlib@go1.22.3	1.26.9

Open the chart page →

1,573

libretimepodzone-charts

0.4.1

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.26.9

Open the chart page →

13,328

static-sitepodzone-charts

0.1.1

1 of 2 See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.26.9

Open the chart page →

6,636

agentpolyaxon

2.17.0

1 of 4 See more

agent polyaxon 2.17.0

1 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
polyaxon/polyaxon-operator :2.17.0	7664c1cebb9d	stdlib@go1.24.13	1.26.9

Open the chart page →

10,479

polyaxonpolyaxon

2.17.0

1 of 5 See more

polyaxon polyaxon 2.17.0

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
polyaxon/polyaxon-operator :2.17.0	7664c1cebb9d	stdlib@go1.24.13	1.26.9

Open the chart page →

14,543

trainingjobspolyaxon

2.1.0

1 of 1 See more

trainingjobs polyaxon 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
polyaxon/training-operator :2.1.0	b5b29deaec9a	stdlib@go1.20.13	1.26.9

Open the chart page →

1,372

pomerium-verifypomerium

0.1.0

1 of 1 See more

pomerium-verify pomerium 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
pomerium/verify :latest	af9ac2c98007	stdlib@go1.27.1	1.26.9

Open the chart page →

634

portagerportager

0.5.0

1 of 1 See more

portager portager 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/jarodr47/portager :0.5.0	6a7a61b37568	stdlib@go1.26.5	1.26.9

Open the chart page →

433

beylaportefaix-hub

0.1.0

1 of 1 See more

beyla portefaix-hub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
grafana/beyla :1.3.3	36d07f8d276e	stdlib@go1.21.7	1.26.9

Open the chart page →

3,565

cloudflare-tunnelportefaix-hub

0.4.0

1 of 1 See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2024.8.3	14d9c6b01b29	stdlib@go1.22.2-devel-cf	1.26.9

Open the chart page →

2,024

Container images carrying it

6,223 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.26.9	2
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.26.9	2
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	stdlib@go1.14.4	1.26.9	2
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	stdlib@go1.15	1.26.9	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.26.9	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.26.9	2
danielqsj/kafka-exporter :latest	d1014f41712d	stdlib@go1.27.1	1.26.9	2
datawire/emissary :3.12.2	1f67a1292d2a	stdlib@go1.22.4	1.26.9	2
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.26.9	2
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.26.9	2
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.26.9	2
dexidp/dex :v2.39.1-distroless	43655afd1a8f	stdlib@go1.21.6	1.26.9	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.26.9	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	stdlib@go1.16.15	1.26.9	2
dunglas/mercure :v0 :v0.24.2	916834e49961	stdlib@go1.26.3	1.26.9	2
envoyproxy/gateway :v1.9.1	0049bcb384c5	stdlib@go1.26.7	1.26.9	2
epamedp/cd-pipeline-operator :2.32.0	fc858071b7a1	stdlib@go1.25.12	1.26.9	2
epamedp/codebase-operator :2.35.0	295a008abcef	stdlib@go1.25.12	1.26.9	2
epamedp/edp-tekton :0.27.0	88189f16f94b	stdlib@go1.25.12	1.26.9	2
epamedp/gitfusion :0.6.1	0b7eb7d5ca43	stdlib@go1.25.12	1.26.9	2
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.26.9	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.26.9	2
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.26.9	2
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.26.9	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.26.9	2
filebrowser/filebrowser :latest :v2.63.23	a469ea076d4a	stdlib@go1.26.5	1.26.9	2
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	stdlib@go1.16.2	1.26.9	2
flanksource/incident-manager-ui :v1.4.322	8d17f0c08b20	stdlib@go1.23.5	1.26.9	2
flashcatcloud/categraf :latest	42e6ab16472e	stdlib@go1.25.14	1.26.9	2
foundationdb/fdb-kubernetes-operator :v2.3.0	7d7b6985291e	stdlib@go1.23.7	1.26.9	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.26.9	2
free5gc/ausf :v3.4.3	687ff4daf5da	stdlib@go1.21.8	1.26.9	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	stdlib@go1.21.8	1.26.9	2
free5gc/nrf :v3.4.3	99e46b860efb	stdlib@go1.21.8	1.26.9	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	stdlib@go1.21.8	1.26.9	2
free5gc/pcf :v3.4.3	f712e8ecd927	stdlib@go1.21.8	1.26.9	2
free5gc/smf :v3.4.3	60e38baa4b10	stdlib@go1.21.8	1.26.9	2
free5gc/udm :v3.4.3	2f68df062a50	stdlib@go1.21.8	1.26.9	2
free5gc/udr :v3.4.3	c0783bcdcbdc	stdlib@go1.21.8	1.26.9	2
free5gc/upf :v3.4.3	b6b362a39fdd	stdlib@go1.21.8	1.26.9	2
free5gc/webui :v3.4.3	9adeb18492cb	stdlib@go1.21.8	1.26.9	2
freikin/dawarich :1.15.3	589e3606b11b	stdlib@go1.24.4	1.26.9	2
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.26.9	2
frinx/krakend :7.0.0	bf8edd4f52f3	stdlib@go1.22.7	1.26.9	2
frinx/resource-manager :6.1.0	9cd0147a09bd	stdlib@go1.21.7	1.26.9	2
frinx/schellar :6.1.0	4693dc627d32	stdlib@go1.21.11	1.26.9	2
garethgeorge/backrest :latest :v1.14.1	b85297975428	stdlib@go1.26.0	1.26.9	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.26.9	2
githubexporter/github-exporter :v2.3.1	a36fbedeedf8	stdlib@go1.26.4	1.26.9	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	stdlib@go1.18	1.26.9	2