GO-2026-5841
UnscoredAdvisory
Published 27 Jul 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,280
- of 17,790 indexed, latest versions
- Container images
- 1,354
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OOB read in github.com/klauspost/compress/s2
Carried by container images the latest versions of 1,280 of 17,790 indexed charts deploy, on 1,354 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more | 1.18.7 | 1,354 |
- OSV records
- GO-2026-5841
- Also known as
- GHSA-259r-337f-4rfw
Charts affected
1,280 by stars
Container images carrying it
1,354 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 88fe8e0e09d6 | github.com/ | 1.18.7 | 1 |
| library/ | 952d157e28d5 | github.com/ | 1.18.7 | 1 |
| library/ | b7752304692b | github.com/ | 1.18.7 | 1 |
| library/ | bca70839d953 | github.com/ | 1.18.7 | 1 |
| library/ | c8cd23806eef | github.com/ | 1.18.7 | 1 |
| library/ | d402af4147fc | github.com/ | 1.18.7 | 1 |
| library/ | d6c6ae7df4a0 | github.com/ | 1.18.7 | 1 |
| library/ | e0882ab68e01 | github.com/ | 1.18.7 | 1 |
| library/ | 0ad6861379c9 | github.com/ | 1.18.7 | 1 |
| library/ | ced93c701875 | github.com/ | 1.18.7 | 1 |
| library/ | 507a3eecf809 | github.com/ | 1.18.7 | 1 |
| library/ | 0a5157f742d2 | github.com/ | 1.18.7 | 1 |
| library/ | 104204dadedf | github.com/ | 1.18.7 | 1 |
| library/ | 1957e3314f43 | github.com/ | 1.18.7 | 1 |
| library/ | 34d5089d0b41 | github.com/ | 1.18.7 | 1 |
| lightstep/ | c800e05e1eff | github.com/ | 1.18.7 | 1 |
| linuxserver/ | bf03578ef731 | github.com/ | 1.18.7 | 1 |
| linuxserver/ | dca67384e3e9 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3d5752dac834 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | c79a67657baf | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3d00485e64dc | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 3e7d05ded625 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 0970dfe5dc8f | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 8145c3dc83c8 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | github.com/ | 1.18.7 | 1 |
| lishimeng/ | e0b8d2d8ca28 | github.com/ | 1.18.7 | 1 |
| livekit/ | 1ab01641b366 | github.com/ | 1.18.7 | 1 |
| livekit/ | 3602a85840d5 | github.com/ | 1.18.7 | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ | 1.18.7 | 1 |
| lokxy/ | e4ac800dc55d | github.com/ | 1.18.7 | 1 |
| longhornio/ | fd245bae2e82 | github.com/ | 1.18.7 | 1 |
| looplj/ | 2c71eeaef295 | github.com/ | 1.18.7 | 1 |
| louislam/ | 059b49d64739 | github.com/ | 1.18.7 | 1 |
| louislam/ | 3d632903e6af | github.com/ | 1.18.7 | 1 |
| louislam/ | 4c364ef96aad | github.com/ | 1.18.7 | 1 |
| louislam/ | 91e963bfda56 | github.com/ | 1.18.7 | 1 |
| louislam/ | 9865163f92c1 | github.com/ | 1.18.7 | 1 |
| lumenvox/ | dadac2a74be6 | github.com/ | 1.18.7 | 1 |
| lumenvox/ | 9d83efc340cf | github.com/ | 1.18.7 | 1 |
| lumenvox/ | c961fe78e2ca | github.com/ | 1.18.7 | 1 |
| machines/ | 0b8fc005e52e | github.com/ | 1.18.7 | 1 |
| maponyacharles/ | 7c8a525f08e9 | github.com/ | 1.18.7 | 1 |
| mattermost/ | ca5e5553a767 | github.com/ | 1.18.7 | 1 |
| mattermost/ | a27058aaa53a | github.com/ | 1.18.7 | 1 |
| mavrick1/ | 45ca0429a1d4 | github.com/ | 1.18.7 | 1 |
| mdenda/ | 187ed3062f60 | github.com/ | 1.18.7 | 1 |
| megaease/ | fad1c7452958 | github.com/ | 1.18.7 | 1 |
| metacubex/ | e1d7dadaa936 | github.com/ | 1.18.7 | 1 |
| migrate/ | 76cc2074cb66 | github.com/ | 1.18.7 | 1 |
| mikejoh/ | 5c5a3b734271 | github.com/ | 1.18.7 | 1 |