StackRadar

GHSA-mpwr-8vm7-h73f

Medium

Advisory

Published 22 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 1
affected package

package pkcs12: Authentication bypass in Decode functions

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
software.sslmate.com/src/go-pkcs12golangv0.6.0, v0.7.0, v0.7.10.7.29
OSV records
GHSA-mpwr-8vm7-h73fGO-2026-5052

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

5,576
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

22,420
otel-collectorarieotechVerified publisher0.1.01 of 1See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
software.sslmate.com/src/go-pkcs12@v0.7.1
0.7.2

Open the chart page →

245
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
software.sslmate.com/src/go-pkcs12@v0.6.0
0.7.2

Open the chart page →

716
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

21,641
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

13,255
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

4,288
secrets-operatorinfisical-charts0.11.91 of 1See more

secrets-operator infisical-charts 0.11.9

1 of the 1 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
infisical/kubernetes-operator:v0.11.9769ad1630a13
software.sslmate.com/src/go-pkcs12@v0.6.0
0.7.2

Open the chart page →

96
newtjeffrescVerified publisher0.2.11 of 1See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
fosrl/newt:1.10.4ccd2b0e9a049
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

1,097
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
software.sslmate.com/src/go-pkcs12@v0.7.1
0.7.2

Open the chart page →

4,341
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

7,398
tfy-agenttruefoundryVerified publisher0.2.1031 of 5See more

tfy-agent truefoundry 0.2.103

1 of the 5 container images this version deploys carry GHSA-mpwr-8vm7-h73f.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2

Open the chart page →

681

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:13.1.0121a7a9ece6d
software.sslmate.com/src/go-pkcs12@v0.7.0
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2
0.7.2
4
fosrl/newt:1.10.4ccd2b0e9a049
software.sslmate.com/src/go-pkcs12@v0.7.0
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2
0.7.2
1
grafana/grafana:13.0.10f86bada30d6
software.sslmate.com/src/go-pkcs12@v0.7.0
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2
0.7.2
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
software.sslmate.com/src/go-pkcs12@v0.7.0
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2
0.7.2
1
infisical/kubernetes-operator:v0.11.9769ad1630a13
software.sslmate.com/src/go-pkcs12@v0.6.0
software.sslmate.com/src/go-pkcs12@v0.6.0
0.7.2
0.7.2
1
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
software.sslmate.com/src/go-pkcs12@v0.7.1
software.sslmate.com/src/go-pkcs12@v0.7.1
0.7.2
0.7.2
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
software.sslmate.com/src/go-pkcs12@v0.7.0
software.sslmate.com/src/go-pkcs12@v0.7.0
0.7.2
0.7.2
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
software.sslmate.com/src/go-pkcs12@v0.6.0
software.sslmate.com/src/go-pkcs12@v0.6.0
0.7.2
0.7.2
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
software.sslmate.com/src/go-pkcs12@v0.7.1
software.sslmate.com/src/go-pkcs12@v0.7.1
0.7.2
0.7.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.