StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,270
of 17,792 indexed, latest versions
Container images
1,334
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,270 of 17,792 indexed charts deploy, on 1,334 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,334
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,270 by stars
ChartLatestAffected imagesRadar Score
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

4,656
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
github.com/klauspost/compress@v1.16.3
1.18.7

Open the chart page →

1,242
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

10,227
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,601
mw-kube-agent-v3middleware-labsVerified publisher1.8.51 of 2See more

mw-kube-agent-v3 middleware-labs 1.8.5

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,063
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,341
miniomilvus-helm8.0.201 of 1See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,544
milvus-operatormilvus-operator1.3.91 of 1See more

milvus-operator milvus-operator 1.3.9

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
milvusdb/milvus-operator:v1.3.95d63c8894f3a
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

95
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

4,382
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

5,220
enterprise-operatormongodb-helm-charts1.33.01 of 1See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,562
mongodb-query-exportermongodb-query-exporterVerified publisher5.1.01 of 1See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

989
mongodb-secure-backupmongodb-secure-backup1.0.01 of 2See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,033
mongopingmongoping1.3.11 of 1See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
udhos/mongoping:1.3.103b08b63f524
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,137
cloudflare-tunnel-remotemoonswitchVerified publisher0.1.41 of 1See more

cloudflare-tunnel-remote moonswitch 0.1.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

553
backupmorremeyer4.0.01 of 1See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
restic/restic:0.15.2579e4e6a4931
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

2,302
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,536
maddymt1905024.1.21 of 1See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
foxcpp/maddy:0.9.2a4b839985b9b
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

899
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

6,649
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,991
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

1,987
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

3,836
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/klauspost/compress@v1.17.4
1.18.7
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

7,367
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

3,436
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

728
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

3,892
nats-kafkanatsVerified publisher0.15.41 of 1See more

nats-kafka nats 0.15.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
natsio/nats-kafka:1.4.2bb241956b0dc
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

1,731
account-servernatz-operatorVerified publisher0.9.51 of 1See more

account-server natz-operator 0.9.5

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

745
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

4,148
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

30,326
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

7,245
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,849
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,826
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,415
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,874
agent-control-cdnewrelic1.0.03 of 3See more

agent-control-cd newrelic 1.0.0

3 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

5,054
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

3,805
nginx-examplengrok-ingress-helm0.3.01 of 2See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
wernight/ngrok:latestd211f29ebcfe
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

2,977
cert-managernicklasfrahm-cert-managerVerified publisher0.1.24 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

4 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.18.2af59e01ad975
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/jetstack/cert-manager-startupapicheck:v1.18.21075e0974151
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

2,840
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

2,485
yopassnimbolus0.6.11 of 2See more

yopass nimbolus 0.6.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
jhaals/yopass:11.17.026873480863b
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,824
nineinfranineinfra-charts0.7.01 of 1See more

nineinfra nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
nineinfra/nineinfra:v0.7.0d4aad414eccd
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,120
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,014
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,014
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

6,558
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/klauspost/compress@v1.18.3
1.18.7

Open the chart page →

5,667
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

4,735
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

2,973
prometheusnodepulse25.0.02 of 6See more

prometheus nodepulse 25.0.0

2 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/klauspost/compress@v1.16.7
1.18.7
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

7,746
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.11 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

3,762

Container images carrying it

1,334 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GO-2026-5841.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.