StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,280
of 17,790 indexed, latest versions
Container images
1,354
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,280 of 17,790 indexed charts deploy, on 1,354 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,354
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,280 by stars
ChartLatestAffected imagesRadar Score
cbt-apiethereum-helm-chartsVerified publisher0.0.141 of 1See more

cbt-api ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/cbt-api:latest9dc0b50e6c27
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

408
chaos-meshethereum-helm-chartsVerified publisher0.0.33 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

3 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

12,202
checkpointzethereum-helm-chartsVerified publisher0.1.31 of 1See more

checkpointz ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
samcm/checkpointz:latesta66b24a87766
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

710
contributoorethereum-helm-chartsVerified publisher0.0.21 of 1See more

contributoor ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/contributoor:latest1edd4074fd79
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

884
erpcethereum-helm-chartsVerified publisher0.0.41 of 1See more

erpc ethereum-helm-charts 0.0.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

905
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,735
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,499
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,246
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

961
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/klauspost/compress@v1.17.5
1.18.7

Open the chart page →

913
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/klauspost/compress@v1.17.5
1.18.7

Open the chart page →

913
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/klauspost/compress@v1.17.5
1.18.7

Open the chart page →

913
xatuethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-cannonethereum-helm-chartsVerified publisher0.2.21 of 1See more

xatu-cannon ethereum-helm-charts 0.2.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,224
xatu-cl-mimicryethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-cl-mimicry ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

606
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/klauspost/compress@v1.17.6
1.18.7

Open the chart page →

3,483
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

521
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/loki-canary:2.9.6549a40203e97
github.com/klauspost/compress@v1.16.7
1.18.7
grafana/promtail:3.5.165bfae480b57
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,813
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,247
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,838
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

1,743
fairwinds-insightsfairwinds-stableVerified publisher10.1.102 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

2 of the 13 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
github.com/klauspost/compress@v1.18.0
1.18.7
temporalio/server:1.31.2b5ecdb8282be
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,820
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

502
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.28 of 18See more

farm-observability farm-observability 0.27.2

8 of the 18 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/alloy:v1.12.2f94b1c82957a
github.com/klauspost/compress@v1.18.1
1.18.7
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/klauspost/compress@v1.18.4
1.18.7
grafana/loki:3.6.73c8fd3570dd9
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/loki-canary:3.6.70dac7d5cb383
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/pyroscope:2.0.3cfd00e7f73c2
github.com/klauspost/compress@v1.18.5
1.18.7
grafana/tempo:2.9.065a578975943
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

13,409
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

756
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

6,150
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

5,355
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

5,709
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,452
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,481
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,429
flyte-devboxflyte0.1.07 of 13See more

flyte-devbox flyte 0.1.0

7 of the 13 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/klauspost/compress@v1.17.11
1.18.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

4,678
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

801
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

11,982
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,310
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/klauspost/compress@v1.17.10
1.18.7

Open the chart page →

11,982
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/klauspost/compress@v1.17.9
1.18.7
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,310
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latesta792931146b4
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

1,769
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

564
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

136
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

553
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

622

Container images carrying it

1,354 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
github.com/klauspost/compress@v1.17.9
1.18.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
github.com/klauspost/compress@v1.17.11
1.18.7
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
github.com/klauspost/compress@v1.17.11
1.18.7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.