StackRadar

CVE-2019-9514

High

Advisory

Published 13 Aug 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.834
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
65
deployed by those charts
Fix available
2 of 4
affected packages

golang.org/x/net/http vulnerable to a reset flood

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 65 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+16 more0.0.0-20190813141303-74dc4d7220e749
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+4 moreno fix listed12
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed3
nodejsapk10.14.2-r010.16.3-r01
OSV records
ALPINE-CVE-2019-9514GHSA-39qc-96h7-956fGHSA-hgr8-6h9x-f7q9UBUNTU-CVE-2019-9514GO-2022-0536
Also known as
CVE-2019-9512

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

12,402
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,822
online-boutiquekubesphere-testVerified publisher0.1.04 of 11See more

online-boutique kubesphere-test 0.1.0

4 of the 11 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

26,018
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

7,802
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

8,484
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
0.0.0-20190813141303-74dc4d7220e7
weaveworks/flagger-loadtester:0.9.03cdac6928a63
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

6,048
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,806
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

3,603
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

7,027
approuvezmvisonneau0.1.11 of 1See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

1,971
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,806
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
nodejs@10.23.0-1nodesource1
no fix listed

Open the chart page →

27,465
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

88,546
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

4,612
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

38,865
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

36,215
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

29,227
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
reportportal/migrations:5.7.0da5d8e1395fe
golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6
0.0.0-20190813141303-74dc4d7220e7
reportportal/service-index:5.0.112b27a2d7a87d
golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

25,737
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

8,694
preemptible-killersoftonic1.2.61 of 1See more

preemptible-killer softonic 1.2.6

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
softonic/preemptible-killer:1.2.6-294b87f1fb362
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,338
proxyinjectorstakaterVerified publisher0.0.231 of 1See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,853
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

16,506
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

12,237
vaultstatcan0.1.81 of 2See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

4,222
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
grpc@1.51.1-4.1build5
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
grpc@1.51.1-4.1build5
no fix listed

Open the chart page →

12,460
prometheustnh11.6.01 of 6See more

prometheus tnh 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

8,484
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
golang.org/x/net@v0.0.0-20170114055629-f2499483f923
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

10,127
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7
prom/prometheus:v2.16.0e4ca62c0d62f
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

22,665
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2019-9514.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/net@v0.0.0-20190522155817-f3200d17e092
0.0.0-20190813141303-74dc4d7220e7

Open the chart page →

2,791

Container images carrying it

65 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
weaveworks/flagger-loadtester:0.9.03cdac6928a63
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
golang.org/x/net@v0.0.0-20170114055629-f2499483f923
golang.org/x/net@v0.0.0-20170114055629-f2499483f923
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
grpc@1.16.1-1ubuntu5
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
grpc@1.16.1-1ubuntu5
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
golang.org/x/net@v0.0.0-20180811021610-c39426892332
golang.org/x/net@v0.0.0-20180811021610-c39426892332
0.0.0-20190813141303-74dc4d7220e7
0.0.0-20190813141303-74dc4d7220e7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.