StackRadar

GO-2026-5841

Unscored

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,270
of 17,792 indexed, latest versions
Container images
1,334
deployed by those charts
Fix available
1 of 1
affected package

OOB read in github.com/klauspost/compress/s2

Carried by container images the latest versions of 1,270 of 17,792 indexed charts deploy, on 1,334 images.

Affected packageAffected versionsFixed inImages
github.com/klauspost/compressgolangv1.16.0, v1.16.3, v1.16.5, v1.16.6+20 more1.18.71,334
OSV records
GO-2026-5841
Also known as
GHSA-259r-337f-4rfw

Charts affected

1,270 by stars
ChartLatestAffected imagesRadar Score
jaegerquench-jaegerVerified publisher0.0.81 of 1See more

jaeger quench-jaeger 0.0.8

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/jaegerdigest-pinnede4b01d247df8
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

8
kedaquench-kedaVerified publisher0.0.21 of 1See more

keda quench-keda 0.0.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kedadigest-pinned71c4fb311763
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

22
kyvernoquench-kyvernoVerified publisher0.0.11 of 2See more

kyverno quench-kyverno 0.0.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kyvernodigest-pinned90c78c240157
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

352
lgtm-stackquench-lgtm-stackVerified publisher0.0.192 of 9See more

lgtm-stack quench-lgtm-stack 0.0.19

2 of the 9 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/alertmanagerdigest-pinned7131b1e72afc
github.com/klauspost/compress@v1.18.6
1.18.7
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

403
logging-stackquench-logging-stackVerified publisher0.0.121 of 3See more

logging-stack quench-logging-stack 0.0.12

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

203
observability-stackquench-observability-stackVerified publisher0.0.142 of 5See more

observability-stack quench-observability-stack 0.0.14

2 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/alertmanagerdigest-pinned7131b1e72afc
github.com/klauspost/compress@v1.18.6
1.18.7
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

287
persesquench-perses0.0.101 of 1See more

perses quench-perses 0.0.10

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/persesdigest-pinned50e8541200ae
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

18
thanosquench-thanosVerified publisher0.0.111 of 1See more

thanos quench-thanos 0.0.11

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/thanosdigest-pinned4e55c3d93db2
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

8
tracing-stackquench-tracing-stackVerified publisher0.0.91 of 3See more

tracing-stack quench-tracing-stack 0.0.9

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

304
tykquench-tyk0.0.131 of 2See more

tyk quench-tyk 0.0.13

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/tykdigest-pinnedfca606eb53eb
github.com/klauspost/compress@v1.18.4
1.18.7

Open the chart page →

46
veleroquench-veleroVerified publisher0.1.41 of 1See more

velero quench-velero 0.1.4

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/velerodigest-pinnedb1ec34dd9525
github.com/klauspost/compress@v1.18.2
1.18.7

Open the chart page →

8
victorialogsquench-victorialogsVerified publisher0.0.61 of 1See more

victorialogs quench-victorialogs 0.0.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/victorialogsdigest-pinned15b46094b449
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

4
zitadelquench-zitadelVerified publisher0.0.161 of 2See more

zitadel quench-zitadel 0.0.16

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/zitadeldigest-pinneded99c430e159
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

291
rad-pluginsradOfficialVerified publisher2.4.142 of 5See more

rad-plugins rad 2.4.14

2 of the 5 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.44f30f0dc32205
github.com/klauspost/compress@v1.18.6
1.18.7
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.701afcfbc000e0
github.com/klauspost/compress@v1.18.5
1.18.7

Open the chart page →

63
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

856
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

622
kubecostradar-baseVerified publisher1.0.03 of 7See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/klauspost/compress@v1.17.9
1.18.7
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
github.com/klauspost/compress@v1.17.11
1.18.7
quay.io/prometheus/prometheus:v3.2.05888c188cf09
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

9,411
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,674
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,889
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

757
mihomos-clusterre8ch-mihomos-clusterVerified publisher0.1.11 of 3See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
metacubex/mihomo:v1.19.29e1d7dadaa936
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

582
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

369
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

11,446
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/klauspost/compress@v1.17.3
1.18.7

Open the chart page →

16,388
longhornrelease-longhorn1.12.01 of 3See more

longhorn release-longhorn 1.12.0

1 of the 3 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.0fd245bae2e82
github.com/klauspost/compress@v1.18.1
1.18.7

Open the chart page →

1,579
restic-pvc-backuprestic-pvc-backupVerified publisher0.2.12 of 2See more

restic-pvc-backup restic-pvc-backup 0.2.1

2 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ngosang/restic-exporter:2.1.2a8f9cfa30162
github.com/klauspost/compress@v1.18.4
1.18.7
restic/restic:0.19.1136600b6ff68
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

954
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

7,116
rke2-ciliumrke2-charts1.20.2002See more

rke2-cilium rke2-charts 1.20.200

2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.22939231d0d3e
github.com/klauspost/compress@v1.18.6
1.18.7
quay.io/cilium/operator-generic:v1.20.264d8798350e8
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

—
olivetinrm3lVerified publisher0.2.01 of 1See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,377
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/klauspost/compress@v1.17.0
1.18.7

Open the chart page →

4,047
kubewatchrobusta3.5.01 of 1See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
robustadev/kubewatch:v2.9.00457a51e36e8
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

1,854
fleet-vendoredrock8sVerified publisher6.5.11 of 1See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
fleetdm/fleet:v4.66.012e644b7f40e
github.com/klauspost/compress@v1.17.11
1.18.7

Open the chart page →

1,588
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,954
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
prometheuscommunity/postgres-exporter:v0.17.0f8381eb4326a
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

9,299
monitoringrocketchat-server0.0.173 of 9See more

monitoring rocketchat-server 0.0.17

3 of the 9 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
github.com/klauspost/compress@v1.18.0
1.18.7
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/klauspost/compress@v1.18.2
1.18.7
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

6,884
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

1,605
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/klauspost/compress@v1.17.9
1.18.7

Open the chart page →

9,685
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/klauspost/compress@v1.16.0
1.18.7

Open the chart page →

1,587
caddy-reverse-proxyromholdings0.10.11 of 1See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
library/caddy:latestdf7f1c2fb114
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

853
devtron-enterpriseromholdings48.0.07 of 28See more

devtron-enterprise romholdings 48.0.0

7 of the 28 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

68,695
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/klauspost/compress@v1.16.5
1.18.7

Open the chart page →

5,055
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/klauspost/compress@v1.18.0
1.18.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

33,180
controllerrookout0.2.561 of 1See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

1,967
rookout-hybridrookout0.3.11 of 2See more

rookout-hybrid rookout 0.3.1

1 of the 2 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
github.com/klauspost/compress@v1.16.7
1.18.7

Open the chart page →

3,915
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

8,532
vsl-chainrss30.1.01 of 7See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

6,048
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

4,615
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/klauspost/compress@v1.17.2
1.18.7

Open the chart page →

4,615
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
github.com/klauspost/compress@v1.18.6
1.18.7

Open the chart page →

7,527
donetickrtomik-helm-chartsVerified publisher1.1.01 of 1See more

donetick rtomik-helm-charts 1.1.0

1 of the 1 container images this version deploys carry GO-2026-5841.

Container imageDigestPackageFixed in
donetick/donetick:v0.1.79a1cc21dd5a37
github.com/klauspost/compress@v1.18.0
1.18.7

Open the chart page →

791

Container images carrying it

1,334 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GO-2026-5841.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.