StackRadar

GHSA-xmrv-pmrh-hhx2

Medium

Advisory

Published 8 Apr 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
262
of 17,781 indexed, latest versions
Container images
246
deployed by those charts
Fix available
5 of 5
affected packages

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Carried by container images the latest versions of 262 of 17,781 indexed charts deploy, on 246 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-go-v2/service/s3golangv1.2.0, v1.5.0, v1.12.0, v1.16.0+73 more1.97.3220
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgolangv1.0.0, v1.4.1, v1.4.4, v1.4.8+26 more1.7.8219
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogsgolangv1.5.2, v1.15.14, v1.15.17, v1.15.20+27 more1.65.064
github.com/aws/aws-sdk-go-v2/service/kinesisgolangv1.6.0, v1.15.13, v1.15.19, v1.15.20+21 more1.43.539
github.com/aws/aws-sdk-go-v2/service/lambdagolangv1.23.8, v1.24.6, v1.34.1, v1.35.0+14 more1.88.532
OSV records
GHSA-xmrv-pmrh-hhx2
Also known as
CVE-2026-89090, GO-2026-5764

Charts affected

262 by stars
ChartLatestAffected imagesRadar Score
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.48.0
1.7.8
1.97.3

Open the chart page →

1,546
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.54.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.87.3
1.7.8
1.65.0
1.97.3

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.0
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.54.0
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.36.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.85.1
1.7.8
1.65.0
1.43.5
1.97.3

Open the chart page →

8,188
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.97.3

Open the chart page →

1,391
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.4
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.32.0
1.7.8
1.65.0

Open the chart page →

2,590
temporalgroundcover1.12.3571 of 2See more

temporal groundcover 1.12.357

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.0
1.88.5

Open the chart page →

2,013
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3

Open the chart page →

2,594
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3
1.7.8
1.97.3

Open the chart page →

9,573
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.66.2
1.7.8
1.43.5
1.97.3

Open the chart page →

1,384
influxdb-enterpriseinfluxdata0.2.11 of 2See more

influxdb-enterprise influxdata 0.2.1

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-datab0f9fc41ed79
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.54.4
1.7.8
1.97.3

Open the chart page →

5,939
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:latestf75e48af0598
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.54.4
1.7.8
1.97.3

Open the chart page →

2,333
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/aws/aws-sdk-go-v2/service/s3@v1.12.0
1.97.3

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/aws/aws-sdk-go-v2/service/s3@v1.12.0
1.97.3

Open the chart page →

4,478
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.51.4
1.7.8
1.97.3

Open the chart page →

1,836
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.20.11
1.65.0

Open the chart page →

5,713
sql-exporterjdstoneVerified publisher0.2.11 of 1See more

sql-exporter jdstone 0.2.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:0.16.0b8e4757c7def
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.97.3

Open the chart page →

885
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.97.3

Open the chart page →

3,968
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3

Open the chart page →

16,600
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/aws/aws-sdk-go-v2/service/s3@v1.59.0
1.97.3

Open the chart page →

1,893
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.32.0
1.7.8
1.65.0

Open the chart page →

2,034
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
versity/versitygw:v1.1.0f730e0dbc1ef
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1
1.7.8
1.97.3

Open the chart page →

5,455
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.8
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.15.20
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.43.5
1.97.3
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3

Open the chart page →

19,168
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.27.1
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.22.2
github.com/aws/aws-sdk-go-v2/service/lambda@v1.48.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.43.0
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

1,265
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/aws/aws-sdk-go-v2/service/s3@v1.2.0
1.97.3

Open the chart page →

3,812
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.97.3

Open the chart page →

2,742
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:2.8571eb4514977
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.54.4
1.7.8
1.97.3

Open the chart page →

5,500
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.47.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.77.1
1.7.8
1.65.0
1.97.3

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.49.0
1.7.8
1.97.3

Open the chart page →

20,204
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.32.0
1.7.8
1.65.0

Open the chart page →

2,113
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/lambda@v1.69.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.1
1.7.8
1.88.5
1.97.3

Open the chart page →

1,330
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.4
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.14
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.15.13
github.com/aws/aws-sdk-go-v2/service/lambda@v1.23.8
github.com/aws/aws-sdk-go-v2/service/s3@v1.27.5
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

4,271
llmarinerllmariner1.53.15 of 21See more

llmariner llmariner 1.53.1

5 of the 21 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.7.8
1.97.3
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.7.8
1.97.3
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.7.8
1.97.3
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.7.8
1.97.3
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.7.8
1.97.3

Open the chart page →

12,036
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0

Open the chart page →

3,225
sasquatchlsst-sqre0.1.131 of 6See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
github.com/aws/aws-sdk-go-v2/service/s3@v1.5.0
1.97.3

Open the chart page →

9,332
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/aws/aws-sdk-go-v2/service/s3@v1.5.0
1.97.3

Open the chart page →

3,764
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.14
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.23.5
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.18.5
github.com/aws/aws-sdk-go-v2/service/lambda@v1.39.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.40.2
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3

Open the chart page →

9,774
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.3
1.7.8
1.97.3

Open the chart page →

24,400
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.46.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.65.0
1.97.3

Open the chart page →

21,064
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.11
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.51.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.84.0
1.7.8
1.65.0
1.97.3

Open the chart page →

11,689
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3

Open the chart page →

19,214
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3
1.7.8
1.97.3

Open the chart page →

10,180
mongopingmongoping1.3.11 of 1See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
udhos/mongoping:1.3.103b08b63f524
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/lambda@v1.71.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.3
1.7.8
1.88.5
1.97.3

Open the chart page →

1,136
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.0.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.19.0
1.7.8
1.97.3

Open the chart page →

10,959
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
neosmemo/memos:0.26.23eefcc231141
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.87.3
1.7.8
1.97.3

Open the chart page →

2,443
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.27.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.43.5
1.97.3

Open the chart page →

7,309
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.54.4
1.7.8
1.97.3

Open the chart page →

3,867
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.29.3
github.com/aws/aws-sdk-go-v2/service/lambda@v1.56.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.43.5
1.88.5
1.97.3
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.29.3
github.com/aws/aws-sdk-go-v2/service/lambda@v1.56.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.43.5
1.88.5
1.97.3

Open the chart page →

7,184
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.29.3
github.com/aws/aws-sdk-go-v2/service/lambda@v1.56.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.43.5
1.88.5
1.97.3

Open the chart page →

2,819
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry GHSA-xmrv-pmrh-hhx2.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.29.3
github.com/aws/aws-sdk-go-v2/service/lambda@v1.56.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.78.2
1.7.8
1.43.5
1.88.5
1.97.3

Open the chart page →

2,796

Container images carrying it

246 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.79.2
1.7.8
1.97.3
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.88.1
1.7.8
1.97.3
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.47.2
1.7.8
1.97.3
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.97.3
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.3
1.7.8
1.43.5
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.33.2
1.7.8
1.43.5
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.33.2
1.7.8
1.43.5
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.33.2
1.7.8
1.43.5
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.32.3
1.7.8
1.43.5
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.33.2
1.7.8
1.43.5
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/aws/aws-sdk-go-v2/service/s3@v1.63.2
1.97.3
1
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.58.2
1.7.8
1.97.3
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.20.11
github.com/aws/aws-sdk-go-v2/service/lambda@v1.34.1
1.7.8
1.65.0
1.88.5
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.20.11
github.com/aws/aws-sdk-go-v2/service/lambda@v1.34.1
1.7.8
1.65.0
1.88.5
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.95.0
1.7.8
1.97.3
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.15.17
1.65.0
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.14
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.23.5
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.18.5
github.com/aws/aws-sdk-go-v2/service/lambda@v1.39.5
github.com/aws/aws-sdk-go-v2/service/s3@v1.40.2
1.7.8
1.65.0
1.43.5
1.88.5
1.97.3
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/aws/aws-sdk-go-v2/service/s3@v1.59.0
1.97.3
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.10
1.7.8
1.97.3
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.3
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.61.0
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.42.6
github.com/aws/aws-sdk-go-v2/service/s3@v1.92.0
1.7.8
1.65.0
1.43.5
1.97.3
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/aws/aws-sdk-go-v2/service/s3@v1.2.0
1.97.3
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.1
github.com/aws/aws-sdk-go-v2/service/s3@v1.26.3
1.7.8
1.97.3
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3
1
ghcr.io/shaharia-lab/teredix:0.0.2ec727be4417a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.5.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.47.7
1.7.8
1.97.3
1
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.60.1
1.7.8
1.97.3
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.0
1.7.8
1.97.3
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.2
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.97.3
1
ghcr.io/usememos/memos:0.24.04723d86e6797
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8
github.com/aws/aws-sdk-go-v2/service/s3@v1.75.2
1.7.8
1.97.3
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.6
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.24.7
github.com/aws/aws-sdk-go-v2/service/lambda@v1.50.0
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.1
1.7.8
1.43.5
1.88.5
1.97.3
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.71.1
1.7.8
1.97.3
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1
github.com/aws/aws-sdk-go-v2/service/lambda@v1.53.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.53.0
1.7.8
1.88.5
1.97.3
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.0
1.88.5
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3
github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3
1.7.8
1.97.3
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.97.3
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10
github.com/aws/aws-sdk-go-v2/service/kinesis@v1.17.14
github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0
1.7.8
1.43.5
1.97.3
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8
github.com/aws/aws-sdk-go-v2/service/s3@v1.75.3
1.7.8
1.97.3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0
1.7.8
1.97.3
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7
github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1
1.7.8
1.97.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.