StackRadar

CVE-2026-97031

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,554
of 18,071 indexed, latest versions
Container images
6,411
deployed by those charts
Fix available
1 of 2
affected packages

Reject malformed ECH outer extension references in crypto/tls

Carried by container images the latest versions of 5,554 of 18,071 indexed charts deploy, on 6,411 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,411
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97031GO-2026-6607
Trending
Rank 12 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,554 by stars
ChartLatestAffected imagesRadar Score
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
stdlib@go1.16.7
1.26.9

Open the chart page →

4,092
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
stdlib@go1.15.5
1.26.9
library/traefik:2.5.47d0228d19042
stdlib@go1.17.3
1.26.9

Open the chart page →

141,528
kuttchristianhuthVerified publisher9.11.21 of 3See more

kutt christianhuth 9.11.2

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
bitnami/redis:latest33a5a129cadc
stdlib@go1.26.8
1.26.9

Open the chart page →

746
clamavclamavVerified publisher1.10.391 of 2See more

clamav clamav 1.10.39

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-clamav/kubectl:1.10.397d7a46f5dc6d
stdlib@go1.26.8
1.26.9

Open the chart page →

177
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
stdlib@go1.26.4
1.26.9

Open the chart page →

825
cluster-api-operatorcluster-api-operator0.29.01 of 1See more

cluster-api-operator cluster-api-operator 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
stdlib@go1.26.6
1.26.9

Open the chart page →

135
immudbcodenotaryVerified publisher1.9.71 of 1See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
codenotary/immudb:1.9.77c85d7cc4f22
stdlib@go1.18.10
1.26.9

Open the chart page →

1,957
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
stdlib@go1.23.12
1.26.9

Open the chart page →

2,198
dolibarrcowboysysopVerified publisher9.0.32 of 3See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
stdlib@go1.23.7
1.26.9
wait4x/wait4x:3.3.14dcd86307de1
stdlib@go1.24.3
1.26.9

Open the chart page →

11,097
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.9

Open the chart page →

3,998
daskhubdask2024.1.13 of 9See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
stdlib@go1.21.4
1.26.9
quay.io/jupyterhub/k8s-image-awaiter:3.2.1f65b644ed6db
stdlib@go1.18.10
1.26.9
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
stdlib@go1.20.11
1.26.9

Open the chart page →

17,237
seafiledatamateVerified publisher0.6.05 of 6See more

seafile datamate 0.6.0

5 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
stdlib@go1.21.7
1.26.9
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
stdlib@go1.22.6
1.26.9
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
stdlib@go1.22.5
1.26.9
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
stdlib@go1.21.6
1.26.9
datamate/seafile-professional:11.0.202dd66b722464
stdlib@go1.21.4
1.26.9

Open the chart page →

85,124
k8s-event-loggerdeliveryheroVerified publisher1.4.01 of 1See more

k8s-event-logger deliveryhero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
maxrocketinternet/k8s-event-logger:2.70234bdec4626
stdlib@go1.24.13
1.26.9

Open the chart page →

538
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
stdlib@go1.16.15
1.26.9
library/docker:20-dindaf96c680a7e1
stdlib@go1.19.7
1.26.9

Open the chart page →

7,345
gateway-helmenvoy-gateway0.0.0-latest1 of 1See more

gateway-helm envoy-gateway 0.0.0-latest

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
envoyproxy/gateway-dev:latest97b2a036f523
stdlib@go1.27.1
1.26.9

Open the chart page →

332
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
stdlib@go1.21.6
1.26.9

Open the chart page →

2,537
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
stdlib@go1.24.12
1.26.9

Open the chart page →

2,286
flannelflannel0.28.102 of 2See more

flannel flannel 0.28.10

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.10f26b2403273c
stdlib@go1.26.8
1.26.9
ghcr.io/flannel-io/flannel-cni-plugin:v1.9.1-flannel39fccdf677e6e
stdlib@go1.26.5
1.26.9

Open the chart page →

431
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
stdlib@go1.15.1
1.26.9

Open the chart page →

4,464
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
stdlib@go1.21.0
1.26.9
thesisrobot/loop:v0.11.1-beta89ae07e787ca
stdlib@go1.13.12
1.26.9
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
stdlib@go1.14.12
1.26.9

Open the chart page →

11,647
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
jwilder/dockerize:v0.10.0839cd6793d19
stdlib@go1.25.6
1.26.9
registry.k8s.io/kubectl:v1.32.08ccae74fc039
stdlib@go1.23.3
1.26.9

Open the chart page →

62,128
gitops-promotergitops-promoterOfficialVerified publisher0.24.02 of 2See more

gitops-promoter gitops-promoter 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
stdlib@go1.27.1
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.23.0a6075902738e
stdlib@go1.27.1
1.26.9

Open the chart page →

3,301
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

12,962
grafana-mcpgrafana-communityVerified publisher0.27.11 of 1See more

grafana-mcp grafana-community 0.27.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/mcp-grafana:2.0.187b48c8fa1a0
stdlib@go1.27.1
1.26.9

Open the chart page →

1,015
mariadbgroundhog2k4.44.01 of 1See more

mariadb groundhog2k 4.44.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mariadb:11.8.46b848cb24fbb
stdlib@go1.24.6
1.26.9

Open the chart page →

3,488
mongodbgroundhog2k0.8.31 of 1See more

mongodb groundhog2k 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mongo:8.3.115d7043a4ffe0
stdlib@go1.26.5
1.26.9

Open the chart page →

1,370
haproxy-ingresshaproxy-ingressVerified publisher0.16.21 of 1See more

haproxy-ingress haproxy-ingress 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
stdlib@go1.26.8
1.26.9

Open the chart page →

106
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:17d74eeac9a635
stdlib@go1.24.6
1.26.9

Open the chart page →

2,759
autheliahelmforgeVerified publisher1.5.141 of 1See more

authelia helmforge 1.5.14

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
authelia/authelia:4.39.28bd97cff4fcbf
stdlib@go1.27.1
1.26.9

Open the chart page →

76
dolibarrhelmforgeVerified publisher1.2.191 of 3See more

dolibarr helmforge 1.2.19

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
stdlib@go1.24.6
1.26.9

Open the chart page →

4,955
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
stdlib@go1.20.7
1.26.9

Open the chart page →

11,972
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

1,753
umamihelmforgeVerified publisher2.3.41 of 3See more

umami helmforge 2.3.4

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

2,058
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:15724292da1f2e
stdlib@go1.24.6
1.26.9
victoriametrics/victoria-metrics:v1.95.1f52723a08a44
stdlib@go1.21.4
1.26.9

Open the chart page →

16,634
infrahubinfrahubVerified publisher4.33.61 of 5See more

infrahub infrahub 4.33.6

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.9

Open the chart page →

12,286
secret-manageritscontainedVerified publisher0.2.11 of 1See more

secret-manager itscontained 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
itscontained/secret-manager:0.3.07ec3e93c6469
stdlib@go1.15.3
1.26.9

Open the chart page →

4,171
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.9

Open the chart page →

1,925
kamu-api-serverkamuVerified publisher0.92.01 of 1See more

kamu-api-server kamu 0.92.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.92.016a23a285ffc
stdlib@go1.15.2
1.26.9

Open the chart page →

7,668
kerberneteskerbernetesVerified publisher1.1.111 of 1See more

kerbernetes kerbernetes 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
stdlib@go1.27.1
1.26.9

Open the chart page →

271
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
stdlib@go1.19.9
1.26.9

Open the chart page →

5,547
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.9

Open the chart page →

3,264
klusterviewklusterviewVerified publisher0.1.02 of 4See more

klusterview klusterview 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.9

Open the chart page →

3,534
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
stdlib@go1.24.5
1.26.9

Open the chart page →

1,238
kong-meshkong-meshVerified publisher2.14.53 of 3See more

kong-mesh kong-mesh 2.14.5

3 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
kong/kuma-cp:2.14.5a154795691d1
stdlib@go1.27.1-X:boringcrypto
1.26.9
kong/kumactl:2.14.58191df5c7019
stdlib@go1.27.1-X:boringcrypto
1.26.9
registry.k8s.io/kubectl:v1.36.1d08f476d04d0
stdlib@go1.26.2
1.26.9

Open the chart page →

919
kubeflowkubeflow1.6.226 of 45See more

kubeflow kubeflow 1.6.2

26 of the 45 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
stdlib@go1.15.13
1.26.9
istio/proxyv2:1.14.1df69c1a7af7c
stdlib@go1.18.2
1.26.9
kserve/kserve-controller:v0.8.0f0692a9ea09f
stdlib@go1.17.7
1.26.9
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
stdlib@go1.17.11
1.26.9
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
stdlib@go1.17.13
1.26.9
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
stdlib@go1.17.13
1.26.9
kubeflownotebookswg/poddefaults-webhook:v1.6.17d42600e1524
stdlib@go1.17.13
1.26.9
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
stdlib@go1.17.13
1.26.9
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
stdlib@go1.17.13
1.26.9
metacontrollerio/metacontroller:v2.0.4897c9601d2cc
stdlib@go1.16.7
1.26.9
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
stdlib@go1.17.6
1.26.9
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
stdlib@go1.17.6
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
stdlib@go1.17.8
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
stdlib@go1.17.8
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
stdlib@go1.17.8
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
stdlib@go1.17.8
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
stdlib@go1.17.8
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
stdlib@go1.17.8
1.26.9
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
stdlib@go1.17.6
1.26.9
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
stdlib@go1.17.6
1.26.9
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
stdlib@go1.16.7
1.26.9
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
stdlib@go1.17.6
1.26.9
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
stdlib@go1.17.6
1.26.9
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
stdlib@go1.17.6
1.26.9
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
stdlib@go1.17.11
1.26.9
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.9

Open the chart page →

188,880
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
stdlib@go1.20.6
1.26.9

Open the chart page →

12,137
testkubekubeshop2.14.16 of 6See more

testkube kubeshop 2.14.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.11e209888ede02
stdlib@go1.26.8
1.26.9
kubeshop/testkube-api-server:2.14.1ce04897e5ea2
stdlib@go1.27.1
1.26.9
kubeshop/testkube-kubectl:1.37.15011b74081fa
stdlib@go1.26.8
1.26.9
kubeshop/testkube-minio:2025.10d8e1af6aca99
stdlib@go1.26.0
1.26.9
library/nats:2.15.0-alpineac8f88a6494b
stdlib@go1.27.1
1.26.9
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.9

Open the chart page →

5,308
openelbkubesphere-stable0.5.02 of 2See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
stdlib@go1.15.15
1.26.9
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
stdlib@go1.16.9
1.26.9

Open the chart page →

6,372
operatorkube-starrocksVerified publisher1.11.71 of 1See more

operator kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
starrocks/operator:v1.11.78c20435a7579
stdlib@go1.22.12
1.26.9

Open the chart page →

963
sbomscannerkubewardenVerified publisher0.13.05 of 5See more

sbomscanner kubewarden 0.13.0

5 of the 5 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
stdlib@go1.26.7
1.26.9
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.9
ghcr.io/kubewarden/sbomscanner/controller:v0.13.0611e21c44268
stdlib@go1.27.1
1.26.9
ghcr.io/kubewarden/sbomscanner/storage:v0.13.064929d3a8ecf
stdlib@go1.27.1
1.26.9
ghcr.io/kubewarden/sbomscanner/worker:v0.13.00a8e4e31c890
stdlib@go1.27.1
1.26.9

Open the chart page →

1,660

Container images carrying it

6,411 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9
91
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9
37
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9
36
library/postgres:18:18.6:latest74935e722416
stdlib@go1.24.6
1.26.9
26
library/postgres:18:18.6:18.6-trixie:latest5a5a84b19854
stdlib@go1.24.6
1.26.9
21
library/postgres:16.15-alpine:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9
21
library/postgres:18:18.6-trixie:latestfc973eb97c9f
stdlib@go1.24.6
1.26.9
19
library/postgres:18.6-alpine:18.6-alpine3.24:18-alpine:alpine77f585114c32
stdlib@go1.24.6
1.26.9
18
quay.io/prometheus/prometheus:latest:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.9
18
library/mysql:8:8.4:8.4.116ea90827b110
stdlib@go1.24.6
1.26.9
17
jenkins/jenkins:2.580.1-jdk21:ltsa660310e39ad
stdlib@go1.27.0
1.26.9
16
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9
15
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.9
14
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.9
14
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9
14
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.9
14
quay.io/prometheus/node-exporter:latest:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
14
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.9
13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.9
13
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.9
12
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.9
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.9
12
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9
11
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.9
10
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.9
10
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.9
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
10
library/mongo:9.0.2:latestbac22ea7710d
stdlib@go1.26.8
1.26.9
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.9
10
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9
9
library/mariadb:13.0.2:latestf1bba652ba57
stdlib@go1.26.7
1.26.9
9
library/mysql:26.7.0:latestade067ae2fb1
stdlib@go1.24.6
1.26.9
9
library/postgres:161a6ab3f5345e
stdlib@go1.24.6
1.26.9
9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
stdlib@go1.27.1
1.26.9
9
ghcr.io/quenchworks/images/grafana4b7e7a134283
stdlib@go1.26.8
1.26.9
9
ghcr.io/quenchworks/images/kubectl4033ac5e5f35
stdlib@go1.27.1
1.26.9
9
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.26.9
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.9
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.9
8
quay.io/prometheus/alertmanager:latest:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9
8
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.9
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.9
8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.9
8
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.9
8
bitnami/kubectl:latestab90e1058e5a
stdlib@go1.26.8
1.26.9
7
bitnami/mariadb:latest354e5aec2045
stdlib@go1.26.8
1.26.9
7
bitnami/nginx:latestb8d42f076789
stdlib@go1.26.8
1.26.9
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.9
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9
7

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.