GHSA-gcjh-h69q-9w9g
MediumAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 508
- of 17,787 indexed, latest versions
- Container images
- 465
- deployed by those charts
- Fix available
- 1 of 1
- affected package
cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag
Carried by container images the latest versions of 508 of 17,787 indexed charts deploy, on 465 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.22.0, v0.22.1, v0.23.0, v0.23.2+9 more | 0.29.0, 0.30.0 | 465 |
- OSV records
- GHSA-gcjh-h69q-9w9gGO-2026-6094
Charts affected
508 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kube-state-metricswenerme | 8.5.0 | 1 of 1See more | 82 |
| prometheuswenerme | 29.30.0 | 1 of 6See more | 458 |
| rancherwenerme | 2.15.1 | 1 of 2See more | 1,456 |
| victoria-metrics-k8s-stackwenerme | 0.92.1 | 2 of 7See more | 1,890 |
| orcwiremindVerified publisher | 0.3.0 | 1 of 1See more | 262 |
| xboardxboard | 0.2.0 | 1 of 1See more | 1,042 |
| xonodepoolsxonodepoolsOfficialVerified publisher | 1.0.7 | 1 of 1See more | 388 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
Container images carrying it
465 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 4f1d8e79e9d3 | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | eb40174cd20d | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 822f0c03a3bd | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 0a20e1b41740 | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 483efca276a8 | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | d24a579a3c75 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 84cb5a2b8b81 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | ebcf66281fc1 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 3108194a4ecc | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 3aecec8bafdb | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 9ce503e7bcb8 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 6f031172a5ec | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 2088dcb22aaa | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 2ce23f948e02 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 4ee4b71cf16a | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | ae85d68749c7 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | c5bad40655a3 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 015f5ba04bcb | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 0c4b6132b0ad | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 1b099cfe9e5e | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 9e24d8a6a3b2 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 0e1559e36575 | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 5e0814e0f11c | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 02c657d62d1d | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 6a7a61b37568 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 4de19a5373db | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | aabb136cbaaf | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 229b05e3c717 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 878a55478c17 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 50b431281d3e | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | c8882543f693 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 83276357d448 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 86ab878da25a | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | cd8bf46d98e0 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | d579b952ff0a | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 27286536a8a7 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | cf6d86e057bb | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 49b5aef82877 | github.com/ | 0.30.0 | 1 |
| ghcr.io/ | 58bed8d1e7fc | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | f22cae0e6cf3 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 7390a215d63c | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 3475404bef5c | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 0cbced8e6240 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 8d5d41ab22aa | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 2f88856584a8 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | c743f8d7a199 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 735dd5d2709d | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 4e2a3cce7ce8 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | e93dfe7454d4 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |
| ghcr.io/ | 98ffb48f5b60 | github.com/ github.com/ | 0.29.0 0.30.0 | 1 |