StackRadar

GHSA-xmrv-pmrh-hhx2

Medium

Advisory

Published 8 Apr 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
262
of 17,781 indexed, latest versions
Container images
246
deployed by those charts
Fix available
5 of 5
affected packages

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Carried by container images the latest versions of 262 of 17,781 indexed charts deploy, on 246 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-go-v2/service/s3golangv1.2.0, v1.5.0, v1.12.0, v1.16.0+73 more1.97.3220
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgolangv1.0.0, v1.4.1, v1.4.4, v1.4.8+26 more1.7.8219
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogsgolangv1.5.2, v1.15.14, v1.15.17, v1.15.20+27 more1.65.064
github.com/aws/aws-sdk-go-v2/service/kinesisgolangv1.6.0, v1.15.13, v1.15.19, v1.15.20+21 more1.43.539
github.com/aws/aws-sdk-go-v2/service/lambdagolangv1.23.8, v1.24.6, v1.34.1, v1.35.0+14 more1.88.532
OSV records
GHSA-xmrv-pmrh-hhx2
Also known as
CVE-2026-89090, GO-2026-5764

Charts affected

262 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3

Open the chart page →

3,218
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0
1.7.8
1.97.3
artifacthub/scanner:v1.23.02d8365601f0e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0
1.7.8
1.97.3

Open the chart page →

10,755
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3

Open the chart page →

1,765
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.46.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.65.0
1.97.3

Open the chart page →

23,894
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3

Open the chart page →

2,103
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3

Open the chart page →

1,891
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.49.0
1.7.8
1.97.3

Open the chart page →

3,475
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3

Open the chart page →

2,221
prometheus-mongodb-exporterprometheus-communityVerified publisher3.22.01 of 1See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
percona/mongodb_exporter:0.53.00214e482b2cd
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3

Open the chart page →

231
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3

Open the chart page →

19,391
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.4.02 of 3See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
kubeshark/hub:v53.46d3f22525a0e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.66.1
1.7.8
1.43.5
1.97.3
kubeshark/worker:v53.4b226490dfa11
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.66.1
1.43.5
1.97.3

Open the chart page →

825
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.63.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.65.0
1.97.3
grafana/grafana:12.4.1e932bd6ed0e0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.11
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.51.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.84.0
1.7.8
1.65.0
1.97.3

Open the chart page →

9,864
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.58.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.89.0
1.7.8
1.65.0
1.97.3

Open the chart page →

3,157
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.1
1.7.8
1.97.3

Open the chart page →

2,321
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.47.3
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.35.4
github.com/aws/aws-sdk-go-v2/service/lambda@v1.77.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.0
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

1,633
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3

Open the chart page →

1,235
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.66.1
1.7.8
1.97.3

Open the chart page →

23,123
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3
quay.io/devtron/kubectl:latest2ad610626658
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3

Open the chart page →

32,902
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.58.5
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.41.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.89.0
1.7.8
1.65.0
1.43.5
1.97.3

Open the chart page →

1,039
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.45.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.70.0
1.7.8
1.65.0
1.97.3

Open the chart page →

4,531
meshery-operatormesheryOfficialVerified publisher1.0.691 of 2See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.64.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.93.2
1.7.8
1.65.0
1.97.3

Open the chart page →

2,415
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.61.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.65.0
1.97.3

Open the chart page →

790
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8
github.com/aws/aws-sdk-go-v2/service/s3@v1.74.1
1.7.8
1.97.3

Open the chart page →

1,196
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8
github.com/aws/aws-sdk-go-v2/service/s3@v1.74.1
1.7.8
1.97.3

Open the chart page →

1,196
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.90.0
1.7.8
1.97.3

Open the chart page →

2,125
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.49.0
1.7.8
1.97.3

Open the chart page →

24,700
headscaleheadscaleVerified publisher1.0.191 of 3See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.64.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.93.2
1.7.8
1.65.0
1.97.3

Open the chart page →

3,383
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3

Open the chart page →

30,816
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3

Open the chart page →

744
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.97.3

Open the chart page →

17,693
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.2
1.7.8
1.97.3

Open the chart page →

1,942
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.5
1.7.8
1.97.3

Open the chart page →

1,311
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.24.7
github.com/aws/aws-sdk-go-v2/service/lambda@v1.50.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.43.5
1.88.5
1.97.3

Open the chart page →

1,046
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/aws/aws-sdk-go-v2/service/s3@v1.12.0
1.97.3

Open the chart page →

15,477
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3

Open the chart page →

10,315
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.64.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.93.2
1.7.8
1.65.0
1.97.3

Open the chart page →

4,243
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3

Open the chart page →

3,218
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.56.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.65.0
1.97.3

Open the chart page →

14,917
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3

Open the chart page →

22,202
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3

Open the chart page →

5,299
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.3
1.7.8
1.43.5
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.3
1.7.8
1.43.5

Open the chart page →

2,276
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.20
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.15.19
github.com/aws/aws-sdk-go-v2/service/lambda@v1.24.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.33.1
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

2,898
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3

Open the chart page →

10,037
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.8
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.20
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.15.19
github.com/aws/aws-sdk-go-v2/service/lambda@v1.24.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.27.11
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

5,598
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3

Open the chart page →

2,238
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.97.3

Open the chart page →

1,542
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.11
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.51.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.65.0
1.97.3
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.0
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.22.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.43.5
1.97.3

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3

Open the chart page →

31,510

Container images carrying it

246 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
owncloud/server:10.15.051d9b74fc2a8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.55.1
1.7.8
1.97.3
1
percona/mongodb_exporter:0.53.00214e482b2cd
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3
1
percona/pmm-server:3.9.1003f9c25f842
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.61.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.65.0
1.97.3
1
pomerium/pomerium:v0.22.19c69b10a2126
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.2
1.7.8
1.97.3
1
rqlite/rqlite:9.1.37b992a526eee
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.5
1.7.8
1.97.3
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/aws/aws-sdk-go-v2/service/s3@v1.12.0
1.97.3
1
tailwarden/komiser:3.1.103f68c8ae7993
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.27.1
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.22.2
github.com/aws/aws-sdk-go-v2/service/lambda@v1.48.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.43.0
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3
1
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.0
1.88.5
1
temporalio/auto-setup:1.29.7f14912b699cf
github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.0
1.88.5
1
temporalio/server:1.31.2b5ecdb8282be
github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.0
1.88.5
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0
1
udhos/forward:1.1.312e120d39fdb
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.35.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.33.1
1.7.8
1.88.5
1.97.3
1
udhos/gateboard:1.12.53acc0e7599bf
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.58.3
github.com/aws/aws-sdk-go-v2/service/lambda@v1.78.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.5
1.7.8
1.65.0
1.88.5
1.97.3
1
udhos/gateboard-discovery:1.9.55567c9363c4c
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2
github.com/aws/aws-sdk-go-v2/service/lambda@v1.78.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.5
1.7.8
1.88.5
1.97.3
1
udhos/lambdaping:1.0.46bd2cf2ac732
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/lambda@v1.69.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.1
1.7.8
1.88.5
1.97.3
1
udhos/mongoping:1.3.103b08b63f524
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.71.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.3
1.7.8
1.88.5
1.97.3
1
udhos/prime:1.0.0e432012dd34a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.34.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.33.1
1.7.8
1.88.5
1.97.3
1
udhos/rabbitping:1.3.0474c467bbf42
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.71.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.3
1.7.8
1.88.5
1.97.3
1
udhos/secrets:1.0.6daa2b4eaac09
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.71.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.1
1.7.8
1.88.5
1.97.3
1
udhos/snsping:1.2.96ae70677b6a3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/lambda@v1.69.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.1
1.7.8
1.88.5
1.97.3
1
udhos/token-server:1.0.9728013f2fac1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/lambda@v1.77.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.1
1.7.8
1.88.5
1.97.3
1
velero/velero:v1.18.0e4d1e79be2ee
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.48.0
1.7.8
1.97.3
1
velero/velero-plugin-for-aws:v1.14.07e82f717f44e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.48.0
1.7.8
1.97.3
1
versity/versitygw:v1.0.145192635d0353
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3
1
versity/versitygw:v1.1.0f730e0dbc1ef
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.3
1.7.8
1.97.3
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.0
1.7.8
1.97.3
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.97.3
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.0
1.7.8
1.97.3
1
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.3
1.7.8
1.97.3
1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3
1
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.4
1.7.8
1.97.3
1
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3
1.7.8
1.97.3
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.4
1.7.8
1.97.3
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.20
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.15.19
github.com/aws/aws-sdk-go-v2/service/lambda@v1.24.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.33.1
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.3
1.7.8
1.97.3
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3
1
ghcr.io/chronicleprotocol/gofer:0.613915d2e41e04
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.4
1.7.8
1.97.3
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.90.0
1.7.8
1.97.3
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.97.3
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.4
1.7.8
1.97.3
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.0
1.7.8
1.97.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.