GO-2026-5841
UnscoredAdvisory
Published 27 Jul 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,280
- of 17,790 indexed, latest versions
- Container images
- 1,354
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OOB read in github.com/klauspost/compress/s2
Carried by container images the latest versions of 1,280 of 17,790 indexed charts deploy, on 1,354 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more | 1.18.7 | 1,354 |
- OSV records
- GO-2026-5841
- Also known as
- GHSA-259r-337f-4rfw
Charts affected
1,280 by stars
Container images carrying it
1,354 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| milvusdb/ | a3a55e1c1497 | github.com/ | 1.18.7 | 1 |
| milvusdb/ | 5d63c8894f3a | github.com/ | 1.18.7 | 1 |
| minio/ | 591b097ea2d4 | github.com/ | 1.18.7 | 1 |
| minio/ | aead63c77f9d | github.com/ | 1.18.7 | 1 |
| minio/ | 14b7076ca85a | github.com/ | 1.18.7 | 1 |
| minio/ | 391d1d45fdbe | github.com/ | 1.18.7 | 1 |
| minio/ | 4c4a4876193f | github.com/ | 1.18.7 | 1 |
| minio/ | 551682a57a94 | github.com/ | 1.18.7 | 1 |
| minio/ | 6d770d7f255c | github.com/ | 1.18.7 | 1 |
| minio/ | d249d1fb6966 | github.com/ | 1.18.7 | 1 |
| missuo/ | 32e492587678 | github.com/ | 1.18.7 | 1 |
| moby/ | a095b3d11ce1 | github.com/ | 1.18.7 | 1 |
| mongodb/ | 925c3d34f0c6 | github.com/ | 1.18.7 | 1 |
| mvisonneau/ | fc45ad8abf10 | github.com/ | 1.18.7 | 1 |
| nathanfirmo/ | 6b0487e6e987 | github.com/ | 1.18.7 | 1 |
| natsio/ | 1cc420186664 | github.com/ | 1.18.7 | 1 |
| natsio/ | abdc9f9f0120 | github.com/ | 1.18.7 | 1 |
| natsio/ | e808e0644ce1 | github.com/ | 1.18.7 | 1 |
| natsio/ | bb241956b0dc | github.com/ | 1.18.7 | 1 |
| natsio/ | 104a3e938b23 | github.com/ | 1.18.7 | 1 |
| natsio/ | 02469dc907bc | github.com/ | 1.18.7 | 1 |
| natsio/ | 2adf791d9f9f | github.com/ | 1.18.7 | 1 |
| natsio/ | 4fbf6dacb847 | github.com/ | 1.18.7 | 1 |
| netapp/ | 06f6c9a0653f | github.com/ | 1.18.7 | 1 |
| netapp/ | 09c6cc6b5f71 | github.com/ | 1.18.7 | 1 |
| netapp/ | 8235a77cfc92 | github.com/ | 1.18.7 | 1 |
| netbirdio/ | 0c9994b393ea | github.com/ | 1.18.7 | 1 |
| netbirdio/ | 52682e5f48f9 | github.com/ | 1.18.7 | 1 |
| netbirdio/ | b0adc4ad4ec6 | github.com/ | 1.18.7 | 1 |
| netbirdio/ | 3086534361a1 | github.com/ | 1.18.7 | 1 |
| netbirdio/ | e71f39cefcd9 | github.com/ | 1.18.7 | 1 |
| netbirdio/ | 3104d5ca3a76 | github.com/ | 1.18.7 | 1 |
| newrelic/ | 1a448492b55a | github.com/ | 1.18.7 | 1 |
| ngosang/ | a8f9cfa30162 | github.com/ | 1.18.7 | 1 |
| nineinfra/ | d4aad414eccd | github.com/ | 1.18.7 | 1 |
| noooste/ | 0b68a9237da6 | github.com/ | 1.18.7 | 1 |
| novosga/ | 34b9acbe6e51 | github.com/ | 1.18.7 | 1 |
| obolnetwork/ | e263be0a7440 | github.com/ | 1.18.7 | 1 |
| offchainlabs/ | 9f779fa84b7b | github.com/ | 1.18.7 | 1 |
| offchainlabs/ | e95865866129 | github.com/ | 1.18.7 | 1 |
| oliver006/ | 120f7ec77293 | github.com/ | 1.18.7 | 1 |
| oliver006/ | d98e6db8094f | github.com/ | 1.18.7 | 1 |
| oliver006/ | da9e89ee4e75 | github.com/ | 1.18.7 | 1 |
| ondrejsika/ | d95eaeee2172 | github.com/ | 1.18.7 | 1 |
| opencloudeu/ | 6d992ccc5f1c | github.com/ | 1.18.7 | 1 |
| opencsghq/ | 93ad59164d87 | github.com/ | 1.18.7 | 1 |
| opencsghq/ | 302c9d45d8a8 | github.com/ | 1.18.7 | 1 |
| opencsghq/ | 04121fd19ef9 | github.com/ | 1.18.7 | 1 |
| opencsghq/ | bdd2c58b9744 | github.com/ | 1.18.7 | 1 |
| opencsghq/ | f6d7e7d6be5d | github.com/ | 1.18.7 | 1 |