GO-2026-6225
UnscoredAdvisory
Published 18 Aug 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 61
- of 17,781 indexed, latest versions
- Container images
- 54
- deployed by those charts
- Fix available
- None
- affected package
Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env
Carried by container images the latest versions of 61 of 17,781 indexed charts deploy, on 54 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20220119192733-fe33c00cee21, v0.0.0-20220327082430-c57b701bfc08, v0.0.0-20221002210726-e883f69e0206, v0.0.0-20221129204813-6a4d6ed5d396+1 more | no fix listed | 54 |
- OSV records
- GO-2026-6225
Charts affected
61 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| redhat-trusted-application-pipelineopenshift | 1.0.2 | 1 of 2See more | 8,599 |
| voyager-gatewayopenshift | 2026.1.15 | 1 of 2See more | 2,567 |
| osdfir-infrastructureosdfir-infrastructureVerified publisher | 2.15.0 | 1 of 40See more | 71,208 |
| piggy-webhookspiggyVerified publisher | 0.7.5 | 1 of 1See more | 504 |
| argo-workflowsquench-argo-workflowsVerified publisher | 0.0.2 | 1 of 1See more | 8 |
| crossplanequench-crossplaneVerified publisher | 0.0.3 | 1 of 1See more | 8 |
| kyvernoquench-kyvernoVerified publisher | 0.0.1 | 1 of 2See more | 342 |
| rancher-auto-registerrancher-auto-registerVerified publisher | 0.1.0 | 1 of 1See more | 1,837 |
| argo-workflowromholdings | 0.1.6 | 1 of 1See more | 1,580 |
| sigstore-probersigstoreVerified publisher | 0.3.1 | 1 of 1See more | 424 |
| projectsveltossveltosVerified publisher | 1.15.0 | 1 of 11See more | 72 |
Container images carrying it
54 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 76d28575b71c | github.com/ | no fix listed | 7 |
| ghcr.io/ | 93fa0daf603c | github.com/ | no fix listed | 4 |
| ghcr.io/ | 9506a6cb98d1 | github.com/ | no fix listed | 4 |
| ghcr.io/ | 6d4c9fe66e4f | github.com/ | no fix listed | 4 |
| ghcr.io/ | 824d6d78d451 | github.com/ | no fix listed | 4 |
| ghcr.io/ | e67f14e5c853 | github.com/ | no fix listed | 3 |
| quay.io/ | f0c6fba81a24 | github.com/ | no fix listed | 3 |
| kubeshop/ | 8ffed0d2d494 | github.com/ | no fix listed | 2 |
| gcr.io/ | 5b93308a392c | github.com/ | no fix listed | 2 |
| ghcr.io/ | 2b8d06650a1b | github.com/ | no fix listed | 2 |
| artifacthub/ | 6596c8c4d955 | github.com/ | no fix listed | 1 |
| falcosecurity/ | 0eeb79adc580 | github.com/ | no fix listed | 1 |
| falcosecurity/ | 7df783d5269a | github.com/ | no fix listed | 1 |
| hauler/ | 4671f9bb6c5a | github.com/ | no fix listed | 1 |
| kubeflowkatib/ | 72f14e03b9e1 | github.com/ | no fix listed | 1 |
| kubeshop/ | e97dc620d9b4 | github.com/ | no fix listed | 1 |
| projectsveltos/ | 8eb5a2a2a474 | github.com/ | no fix listed | 1 |
| securesystemsengineering/ | 38918befbdad | github.com/ | no fix listed | 1 |
| gcr.io/ | 4e7a52dd1f14 | github.com/ | no fix listed | 1 |
| gcr.io/ | 53d9aa4d2c7a | github.com/ | no fix listed | 1 |
| gcr.io/ | 75cfdcfa050a | github.com/ | no fix listed | 1 |
| gcr.io/ | 98a2cc7fd62e | github.com/ | no fix listed | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 45554a03e448 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6b99ee9feece | github.com/ | no fix listed | 1 |
| ghcr.io/ | 40f46bb38d0f | github.com/ | no fix listed | 1 |
| ghcr.io/ | a058034ca006 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 00cd9316a379 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 85a4282455a0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ec36422b09af | github.com/ | no fix listed | 1 |
| ghcr.io/ | 42574f512837 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e24894e32cbc | github.com/ | no fix listed | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9c73f1841ebc | github.com/ | no fix listed | 1 |
| ghcr.io/ | a61c7022abcf | github.com/ | no fix listed | 1 |
| ghcr.io/ | 832a32779e6d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 185d2eebc60c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 63f7eaf5aa8a | github.com/ | no fix listed | 1 |
| ghcr.io/ | c62e3347611c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 14450f52a708 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7d5772435793 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 46bc09ce8fea | github.com/ | no fix listed | 1 |
| ghcr.io/ | 90c78c240157 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0bcd60beb93f | github.com/ | no fix listed | 1 |
| ghcr.io/ | d1e914e6d6b9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 62517726d0c4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 13fd0cccafe8 | github.com/ | no fix listed | 1 |
| quay.io/ | 66388d1b2f08 | github.com/ | no fix listed | 1 |
| quay.io/ | 6ab0da144235 | github.com/ | no fix listed | 1 |