GHSA-gxhx-2686-5h9g
HighAdvisory
Published 14 May 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.3
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 58
- of 17,803 indexed, latest versions
- Container images
- 47
- deployed by those charts
- Fix available
- 1 of 1
- affected package
slack-go `SecretsVerifier` accepts empty signing secret without precondition
Carried by container images the latest versions of 58 of 17,803 indexed charts deploy, on 47 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.6.5, v0.6.6, v0.7.4, v0.8.0+14 more | 0.23.1 | 47 |
- OSV records
- GHSA-gxhx-2686-5h9gGO-2026-5410
Charts affected
58 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| planectlplanectlVerified publisher | 0.7.0 | 1 of 10See more | 26,158 |
| kratosradar-baseVerified publisher | 0.43.1 | 1 of 1See more | 1,783 |
| radar-kratosradar-baseVerified publisher | 0.1.5 | 1 of 1See more | 1,568 |
| rancher-auto-registerrancher-auto-registerVerified publisher | 0.1.0 | 1 of 1See more | 1,889 |
| kubewatchrobusta | 3.5.0 | 1 of 1See more | 1,854 |
| controllerrookout | 0.2.56 | 1 of 1See more | 1,967 |
| rookout-hybridrookout | 0.3.1 | 1 of 2See more | 3,915 |
| pingmetektonops | 0.1.2 | 1 of 1See more | 1,254 |
Container images carrying it
47 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| keelhq/ | 73714afb4443 | github.com/ github.com/ | 0.23.1 0.23.1 | 5 |
| quay.io/ | dd3f47d5a5e4 | github.com/ github.com/ | 0.23.1 0.23.1 | 3 |
| casbin/ | 7729da148c61 | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| oryd/ | d06fc5845f63 | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| oryd/ | fe2428f103a6 | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| rookout/ | 4451a6f6b8ec | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| ghcr.io/ | e2abb798f29f | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| quay.io/ | 5fc69e31c755 | github.com/ github.com/ | 0.23.1 0.23.1 | 2 |
| casbin/ | 770ad9ec3190 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| everpcpc/ | b378d137ae8b | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| goalert/ | 08d57388b0cb | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| keelhq/ | 02ac4ea616c4 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| khaliq/ | 49f96888d2ab | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| kubeshark/ | 6d3f22525a0e | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| kubeshark/ | b226490dfa11 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| kubeshop/ | e97dc620d9b4 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| oryd/ | 2a13bb8d362c | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| oryd/ | 8f15006a080d | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| pannoi/ | 9559617788fc | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| robustadev/ | 0457a51e36e8 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| tailwarden/ | 3f68c8ae7993 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| uptrace/ | 34a02c3b2d12 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 324f9b7b689c | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | cdba39e3f3d0 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 74426c1fe00f | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 8abb52b66557 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 50b431281d3e | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | c8882543f693 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 315e188a07c2 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 669e27a5d1af | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | c6fe64c7bfcd | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 560a16a56d4e | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 42e1b6862913 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 517556c8b144 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | 441da62e6cb3 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | b61c750ade19 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| ghcr.io/ | bcb7f0f733f5 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| public.ecr.aws/ | 1eb61443d68e | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| public.ecr.aws/ | e8014c6c58b6 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | 0deb1a1c9176 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | 5b6701d8fb31 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | 95b5cf7ba6fe | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | a36ab0c0860c | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | acaf37352569 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | a83d2699ae53 | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| quay.io/ | d78cd113b2bc | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |
| registry.gitlab.com/ | 9b9d1ed86b6a | github.com/ github.com/ | 0.23.1 0.23.1 | 1 |