StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,270
of 17,792 indexed, latest versions
Container images
1,334
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,270 of 17,792 indexed charts deploy, on 1,334 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,334
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,270 by stars
ChartLatestAffected imagesRadar Score
cloudflare-tunnelrubxkubeVerified publisher0.3.31 of 1See more

cloudflare-tunnel rubxkube 0.3.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

618
gitearubxkubeVerified publisher1.2.31 of 1See more

gitea rubxkube 1.2.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
gitea/gitea:1.27.134e3f6b75f5c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

599
glancerubxkubeVerified publisher0.1.11 of 1See more

glance rubxkube 0.1.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.532ab73d80f2b
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

764
spindlerubxkubeVerified publisher0.1.21See more

spindle rubxkube 0.1.2

1 container image this version deploys carries GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

—
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

30,517
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

5,102
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.153.06ed874ea083d
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

3,746
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,852
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,649
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:noble6ede2806c78e
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,353
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/klauspost/compress@v1.18.5
1.18.7
library/influxdb:2.7b8d940ca9376
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

12,791
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,803
harborsb-helm-charts0.3.01 of 2See more

harbor sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

1,687
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

810
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

894
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,097
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,731
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,253
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

930
thanos-compactorsb-helm-charts0.3.01 of 1See more

thanos-compactor sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-querysb-helm-charts0.3.01 of 1See more

thanos-query sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-query-frontendsb-helm-charts0.3.01 of 1See more

thanos-query-frontend sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-receivesb-helm-charts0.3.01 of 1See more

thanos-receive sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-rulersb-helm-charts0.3.01 of 1See more

thanos-ruler sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

968
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,547
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

2,372
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

4,112
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

10,445
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
sealio/hermitcrab:v0.1.4a326a2f03660
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

4,890
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.81 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,099
operatorsecurecodebox-operator5.8.01 of 2See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
securecodebox/operator:5.8.0c14bd5c550e3
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

100
security-smellssecurity-smells0.1.01 of 1See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
durellirsd/security-smells-api:v17398aca4fc2e
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,425
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,681
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

4,210
serviceexampleserviceexample0.1.01 of 5See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/nats:2.9.20-alpined6c6ae7df4a0
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,449
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

9,091
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

4,018
serviceexampleservice-example-helm-chart0.1.01 of 4See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,292
service-exampleservice-example-jt0.1.14 of 9See more

service-example service-example-jt 0.1.1

4 of the 9 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
bitnami/mongodb:latest11ece5ac9685
github.com/klauspost/compress@v1.18.6
1.18.7
library/nats:2.12.2-alpine2d5fce3229ae
github.com/klauspost/compress@v1.18.1
1.18.7
natsio/nats-box:0.19.28031d190c7ee
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/prometheus-nats-exporter:0.17.326c826662ac8
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

7,201
ccx-monitoringseveralnines0.6.213 of 7See more

ccx-monitoring severalnines 0.6.21

3 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/klauspost/compress@v1.18.0
1.18.7
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
github.com/klauspost/compress@v1.18.0
1.18.7
victoriametrics/vmalert:v1.96.0150cd08fde94
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

7,719
operatorshopware-storeVerified publisher1.8.11 of 1See more

operator shopware-store 1.8.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

571
shopwareshopware-storeVerified publisher2.1.21 of 5See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

4,091
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,697
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,681
nut-exportersi-gitops0.5.01 of 1See more

nut-exporter si-gitops 0.5.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

811
ctlog-tilessigstoreVerified publisher0.1.71 of 1See more

ctlog-tiles sigstore 0.1.7

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

262
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

431
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ondrejsika/counter:latestd95eaeee2172
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

4,887

Container images carrying it

1,334 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
github.com/klauspost/compress@v1.17.7
1.18.7
1
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/klauspost/compress@v1.17.8
1.18.7
1
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/klauspost/compress@v1.17.10
1.18.7
1
quay.io/prometheus/prometheus:v3.13.13c42b892cf72
github.com/klauspost/compress@v1.18.6
1.18.7
1
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
github.com/klauspost/compress@v1.18.6
1.18.7
1
quay.io/prometheus/prometheus:v3.2.05888c188cf09
github.com/klauspost/compress@v1.17.11
1.18.7
1
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.2.16927e0919a14
github.com/klauspost/compress@v1.17.11
1.18.7
1
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/klauspost/compress@v1.18.5
1.18.7
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/klauspost/compress@v1.17.8
1.18.7
1
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
github.com/klauspost/compress@v1.17.9
1.18.7
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/klauspost/compress@v1.16.5
1.18.7
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/klauspost/compress@v1.18.0
1.18.7
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/klauspost/compress@v1.16.0
1.18.7
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
github.com/klauspost/compress@v1.18.3
1.18.7
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/klauspost/compress@v1.16.7
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
github.com/klauspost/compress@v1.18.2
1.18.7
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/klauspost/compress@v1.18.0
1.18.7
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.