StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,270
of 17,792 indexed, latest versions
Container images
1,334
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,270 of 17,792 indexed charts deploy, on 1,334 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,334
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,270 by stars
ChartLatestAffected imagesRadar Score
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.02 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

2 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
github.com/klauspost/compress@v1.18.0
1.18.7
natsio/nats-box:0.14.1a67913df95f1
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

4,996
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/klauspost/compress@v1.18.0
1.18.7
grafana/grafana:12.1.1a1701c218024
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

17,134
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

2,353
argocd-agent-addonocm-helm-chartsVerified publisher0.29.01 of 2See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

640
octantoctant0.1.861 of 1See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

542
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

6,096
onyx-stackonyx0.3.13 of 12See more

onyx-stack onyx 0.3.1

3 of the 12 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/klauspost/compress@v1.17.11
1.18.7
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

6,392
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

2,422
kafka-connectoropenfaas0.7.151 of 1See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

1,164
postgres-connectoropenfaas0.1.21 of 1See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,071
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

2,745
queue-workeropenfaas0.2.341 of 1See more

queue-worker openfaas 0.2.34

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/jetstream-queue-worker:0.5.10e9245a0bca88
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

572
rabbitmq-connectoropenfaas0.0.41 of 1See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

777
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

5,068
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

1,377
openobserveopenobserve0.92.23 of 6See more

openobserve openobserve 0.92.2

3 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/nats:2.14.2-alpine952d157e28d5
github.com/klauspost/compress@v1.18.6
1.18.7
natsio/nats-box:0.19.7ffce8bd10338
github.com/klauspost/compress@v1.18.6
1.18.7
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

3,166
openobserve-collectoropenobserve0.4.61 of 1See more

openobserve-collector openobserve 0.4.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

731
dify-enterpriseopenshift3.9.85 of 13See more

dify-enterprise openshift 3.9.8

5 of the 13 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
langgenius/dify-ee-audit:3.9.8-ubi9e99aed151fc5
github.com/klauspost/compress@v1.18.6
1.18.7
langgenius/dify-ee-collector:3.9.8-ubi9a9b91fd62c94
github.com/klauspost/compress@v1.18.6
1.18.7
langgenius/dify-ee-gateway:3.9.8-ubi99e314c29a61f
github.com/klauspost/compress@v1.18.6
1.18.7
langgenius/dify-ee-plugin-daemon-serverless:3.9.8-ubi9d2b8df196d08
github.com/klauspost/compress@v1.18.0
1.18.7
langgenius/dify-ee-plugin-manager:3.9.8-ubi9207b343013a0
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

4,899
exporteropenshift1.0.471 of 3See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

13,041
harikubeopenshift0.16.32 of 3See more

harikube openshift 0.16.3

2 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/harikube/harikube:release-v0.16.3b58b6d40c3bb
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

2,566
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

4,170
kubedb-certifiedopenshift2026.7.105 of 8See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/klauspost/compress@v1.18.1
1.18.7
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/klauspost/compress@v1.18.5
1.18.7
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

4,145
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,098
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

4,113
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

8,643
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/klauspost/compress@v1.18.1
1.18.7
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

2,645
soha-observabilityopensohaVerified publisher0.2.11 of 2See more

soha-observability opensoha 0.2.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/loki:3.7.487f0a0676737
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

349
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/klauspost/compress@v1.18.4
1.18.7
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

1,837
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

5,658
orkestraorkestraVerified publisher0.7.171 of 2See more

orkestra orkestra 0.7.17

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/orkspace/orkestra:0.7.1738c388cfc8d1
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

125
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/klauspost/compress@v1.16.6
1.18.7
prom/prometheus:v3.0.1565ee8650122
github.com/klauspost/compress@v1.17.10
1.18.7
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/klauspost/compress@v1.18.0
1.18.7
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

72,547
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/klauspost/compress@v1.16.6
1.18.7

Open the chart page →

6,679
lokiot-container-kit1.0.12 of 5See more

loki ot-container-kit 1.0.1

2 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/loki:3.1.0d947e68a84d9
github.com/klauspost/compress@v1.17.7
1.18.7
grafana/promtail:3.0.0d3de3da9431c
github.com/klauspost/compress@v1.17.7
1.18.7

Open the chart page →

4,844
loki-standaloneot-container-kit1.0.21 of 5See more

loki-standalone ot-container-kit 1.0.2

1 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

3,620
ot-karpenterot-container-kit0.3.01 of 1See more

ot-karpenter ot-container-kit 0.3.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
public.ecr.aws/karpenter/controller:1.1.1fe383abf1dbc
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

495
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

5,143
tempo-standaloneot-container-kit1.0.11 of 1See more

tempo-standalone ot-container-kit 1.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

594
vmot-container-kit0.0.32 of 7See more

vm ot-container-kit 0.0.3

2 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/klauspost/compress@v1.17.8
1.18.7
victoriametrics/operator:v0.47.271be93cfafb6
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

5,418
vm-standaloneot-container-kit0.0.42 of 6See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/klauspost/compress@v1.18.2
1.18.7
quay.io/opstree/victoriametrics-operator:v0.69.066fe5216c278
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

3,430
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

731
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,023
minioowan-charts0.1.22 of 2See more

minio owan-charts 0.1.2

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
cleanstart/minio:latest544bdb8811e1
github.com/klauspost/compress@v1.18.6
1.18.7
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

966
shlinkowan-charts0.1.01 of 1See more

shlink owan-charts 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
shlinkio/shlink:stable666cc24edf72
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

195
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

1,987
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

3,327
predicatep2p-avs0.1.41 of 1See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

892
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

27,702
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
github.com/klauspost/compress@v1.17.8
1.18.7

Open the chart page →

3,604
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/klauspost/compress@v1.16.7
1.18.7
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/klauspost/compress@v1.17.3
1.18.7

Open the chart page →

3,364
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,985

Container images carrying it

1,334 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GO-2026-5841.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.