StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,280
of 17,790 indexed, latest versions
Container images
1,354
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,280 of 17,790 indexed charts deploy, on 1,354 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,354
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,280 by stars
ChartLatestAffected imagesRadar Score
fargocdappscodeVerified publisher2026.5.221 of 1See more

fargocd appscode 2026.5.22

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

456
fargocd-managerappscodeVerified publisher2026.5.221 of 1See more

fargocd-manager appscode 2026.5.22

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

456
gh-ci-webhookappscodeVerified publisher2026.9.111 of 1See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,248
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-agent:v0.0.66b99ee9feece
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

2,129
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

519
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/klauspost/compress@v1.18.1
1.18.7
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

4,145
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

503
kubedb-dashboardappscodeVerified publisher0.42.01 of 1See more

kubedb-dashboard appscode 0.42.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-kibana:v0.42.0735dd5d2709d
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

173
kubedb-oneappscodeVerified publisher2023.12.286 of 10See more

kubedb-one appscode 2023.12.28

6 of the 10 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/klauspost/compress@v1.17.0
1.18.7
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/klauspost/compress@v1.17.0
1.18.7
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/klauspost/compress@v1.17.0
1.18.7
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/klauspost/compress@v1.17.0
1.18.7
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/klauspost/compress@v1.17.0
1.18.7
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

15,265
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

572
kubedb-schema-managerappscodeVerified publisher0.42.01 of 1See more

kubedb-schema-manager appscode 0.42.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-schema-manager:v0.42.04e2a3cce7ce8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

170
kubestashappscodeVerified publisher2026.7.101 of 2See more

kubestash appscode 2026.7.10

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,098
kubestash-certifiedappscodeVerified publisher2026.7.101 of 2See more

kubestash-certified appscode 2026.7.10

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,098
kubestash-operatorappscodeVerified publisher0.29.01 of 2See more

kubestash-operator appscode 0.29.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,098
kube-ui-serverappscodeVerified publisher2026.9.111 of 1See more

kube-ui-server appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.7.079e67164b4f0
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

277
kubevaultappscodeVerified publisher2026.8.71 of 2See more

kubevault appscode 2026.8.7

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

806
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,129
kubevault-operatorappscodeVerified publisher0.25.01 of 1See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

504
kubevault-webhook-serverappscodeVerified publisher0.25.01 of 2See more

kubevault-webhook-server appscode 0.25.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

806
kubevirt-infra-csi-driverappscodeVerified publisher0.1.01 of 6See more

kubevirt-infra-csi-driver appscode 0.1.0

1 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,209
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,655
opentelemetry-kube-stackappscodeVerified publisher0.14.121 of 3See more

opentelemetry-kube-stack appscode 0.14.12

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,886
outbox-syncerappscodeVerified publisher2026.9.111 of 1See more

outbox-syncer appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/outboxsyncer:v0.5.0150baab6115d
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

346
panopticonappscodeVerified publisher2026.6.221 of 2See more

panopticon appscode 2026.6.22

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/panopticon:v0.0.23a645b40d2d3b
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

475
persesappscodeVerified publisher2026.6.21 of 1See more

perses appscode 2026.6.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

530
petsetappscodeVerified publisher2026.5.221 of 1See more

petset appscode 2026.5.22

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

860
pgoutboxappscodeVerified publisher2026.7.101 of 1See more

pgoutbox appscode 2026.7.10

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

727
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

37,629
regcacheappscodeVerified publisher2026.9.111 of 1See more

regcache appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

641
service-backendappscodeVerified publisher2026.9.111 of 1See more

service-backend appscode 2026.9.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

1,337
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
github.com/klauspost/compress@v1.18.1
1.18.7
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,155
service-providerappscodeVerified publisher2026.9.111 of 2See more

service-provider appscode 2026.9.11

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

2,238
stash-communityappscodeVerified publisher0.42.01 of 4See more

stash-community appscode 0.42.0

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,669
tenant-operatorappscodeVerified publisher2026.7.151 of 1See more

tenant-operator appscode 2026.7.15

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/tenant-operator:v0.0.2787f6de2b620
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

176
tricksterappscodeVerified publisher2026.1.151 of 1See more

trickster appscode 2026.1.15

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/trickster:v2.0.0cdbbed831f28
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

1,221
voyagerappscodeVerified publisher2026.3.231 of 1See more

voyager appscode 2026.3.23

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

720
voyager-gatewayappscodeVerified publisher2026.7.212 of 2See more

voyager-gateway appscode 2026.7.21

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
github.com/klauspost/compress@v1.18.1
1.18.7
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

1,331
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

8,913
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

9,855
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

7,359
argo-workflowsargo-helm-charts1.0.02 of 2See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,840
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

4,956
otel-collectorarieotechVerified publisher0.1.01 of 1See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

252
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/klauspost/compress@v1.17.11
1.18.7
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

40,580
assemblylineassemblylineVerified publisher7.4.192 of 12See more

assemblyline assemblyline 7.4.19

2 of the 12 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-01-11T05-49-32Z026ae522febc
github.com/klauspost/compress@v1.17.4
1.18.7
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/klauspost/compress@v1.17.4
1.18.7

Open the chart page →

12,666
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,084
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

45,656
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-indexer:0.1.05cf1e5709820
github.com/klauspost/compress@v1.17.8
1.18.7
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

32,638
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,299
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,513

Container images carrying it

1,354 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.