CVE-2026-101915
LowAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.7
- base score, highest
- EPSS
- 0.003
- 15th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 134
- of 17,966 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 1 of 1
- affected package
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages
Carried by container images the latest versions of 134 of 17,966 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @grpc/ | 1.1.8, 1.3.2, 1.3.3, 1.4.2+34 more | 1.13.6, 1.14.5 | 133 |
- OSV records
- GHSA-f596-whhp-79r4
Charts affected
134 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| n8ncommunity-chartsVerified publisher | 1.24.42 | 1 of 1See more | 1,230 |
| n8nopen-8gears | 2.1.1 | 1 of 1See more | 1,595 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 33,386 |
| rocketchatrocketchat-server | 7.0.2 | 4 of 12See more | 13,049 |
| homarrhomarr-labsOfficialVerified publisher | 8.29.2 | 1 of 1See more | 634 |
| oneuptimeoneuptimeOfficialVerified publisher | 14.0.10 | 3 of 7See more | 9,051 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,458 |
| supabasetokens-studioVerified publisher | 1.0.0 | 1 of 14See more | 24,811 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 11,464 |
| homepagem0nsterrr-homepageVerified publisher | 5.4.0 | 1 of 1See more | 556 |
| n8nn8n | 0.23.0 | 1 of 1See more | 6,105 |
| n8nhelmforgeVerified publisher | 2.1.2 | 1 of 2See more | 1,443 |
| backstagerhdh-chartVerified publisher | 4.0.1 | 1 of 2See more | 1,313 |
| dialdialOfficialVerified publisher | 8.0.0 | 1 of 4See more | 2,299 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 164,427 |
| librechatlibrechat | 1.8.10 | 1 of 3See more | 3,188 |
| code-serveralekcVerified publisher | 0.1.1 | 1 of 1See more | 8,631 |
| hermes-agenthermes-agentVerified publisher | 1.16.0 | 1 of 1See more | 6,235 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 6,947 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 1 of 9See more | 195,327 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 1 of 9See more | 195,308 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 1 of 12See more | 40,598 |
| growthbookgrowthbook | 5.1.0 | 1 of 2See more | 756 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 33,235 |
| uptimekumahelm-l3st86Verified publisher | 0.1.10 | 1 of 1See more | 4,521 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 17,362 |
| plane-enterprisemakeplaneOfficialVerified publisher | 3.10.2 | 3 of 13See more | 4,608 |
| mend-renovate-enterprise-editionmend-renovateVerified publisher | 10.6.0 | 1 of 2See more | 37,486 |
| n8nn8n-helm | 2.25.7 | 1 of 1See more | 3,221 |
| observability-mcpobservability-mcpOfficialVerified publisher | 2.9.12 | 1 of 2See more | 119 |
| growthbookone-acre-fundVerified publisher | 0.3.0 | 1 of 3See more | 1,575 |
| opentelemetry-demoopentelemetry-helmOfficialVerified publisher | 0.42.1 | 2 of 34See more | 23,320 |
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 7,680 |
| patchworkpatchworkVerified publisher | 0.8.6 | 1 of 2See more | 2,256 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 34,115 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 41,709 |
| immichsecustorVerified publisher | 2.0.7 | 1 of 1See more | 3,231 |
| supabasesupabse | 0.8.0 | 1 of 11See more | 20,099 |
| tenuretenureVerified publisher | 1.0.6 | 1 of 2See more | 2,972 |
| u-storeunifieVerified publisher | 1.2.0 | 1 of 1See more | 16,097 |
| trifidzazukoOfficialVerified publisher | 0.2.1 | 1 of 1See more | 500 |
| adeptia-automate-mcpadeptia-automate-mcp | 1.0.0 | 2 of 2See more | 4,038 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 33,246 |
| homepagealareira | 1.0.1 | 1 of 1See more | 556 |
| openhab-cloudandibraeuVerified publisher | 1.2.6 | 1 of 1See more | 3,582 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 1 of 9See more | 195,327 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 1 of 9See more | 195,327 |
| immichbear | 0.1.1 | 1 of 2See more | 7,703 |
| countlychristianhuthVerified publisher | 5.3.3 | 2 of 3See more | 8,134 |
| cloudpremcloudprem | 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad | 3 of 6See more | 19,655 |
Container images carrying it
133 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| decisionrules/ | 6a8f32aa11bc | @grpc/ | 1.14.5 | 4 |
| assistiot/ | e36a8922fa0c | @grpc/ | 1.13.6 | 3 |
| ghcr.io/ | f0fb462299af | @grpc/ | 1.13.6 | 3 |
| quay.io/ | 709c7da19c5a | @grpc/ | 1.13.6 | 3 |
| krtk6160/ | cc82a694f818 | @grpc/ | 1.13.6 | 2 |
| louislam/ | 917318f9d7be | @grpc/ | 1.13.6 | 2 |
| louislam/ | 96510915e6be | @grpc/ | 1.13.6 | 2 |
| louislam/ | 9aeb4e51d038 | @grpc/ | 1.13.6 | 2 |
| louislam/ | a8610b3b4c38 | @grpc/ | 1.13.6 | 2 |
| louislam/ | c74379ac4509 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 1e0d24d28512 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 265102a049d6 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | def4bf273721 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 12af60892c75 | @grpc/ | 1.14.5 | 2 |
| n8nio/ | 14c4285bc303 | @grpc/ | 1.14.5 | 2 |
| nousresearch/ | fca358f12efd | @grpc/ | 1.14.5 | 2 |
| siscc/ | 12c5048f7402 | @grpc/ | 1.14.5 | 2 |
| ghcr.io/ | 643bd0be730d | @grpc/ | 1.14.5 | 2 |
| ghcr.io/ | b434cb9287ee | @grpc/ | 1.14.5 | 2 |
| adeptiainc/ | 283001e83739 | @grpc/ | 1.14.5 | 1 |
| adeptiainc/ | 31f295e948e6 | @grpc/ | 1.14.5 | 1 |
| arturisimo/ | d8dc4430531e | @grpc/ | 1.13.6 | 1 |
| assistiot/ | c8a170683be7 | @grpc/ | 1.13.6 | 1 |
| budibase/ | 44fe6feab985 | @grpc/ | 1.14.5 | 1 |
| ccjacobs14/ | 9a9b14a6f09e | @grpc/ | 1.13.6 | 1 |
| codercom/ | 1e2cc688008e | @grpc/ | 1.13.6 | 1 |
| cortezaproject/ | 4ea78dfe5364 | @grpc/ | 1.13.6 | 1 |
| countly/ | f4cc7447c4f5 | @grpc/ | 1.13.6 | 1 |
| countly/ | e3c238248f99 | @grpc/ | 1.13.6 | 1 |
| countly/ | 2acbc11499b6 | @grpc/ | 1.13.6 | 1 |
| cryptexlabs/ | 189c07411d7c | @grpc/ | 1.13.6 | 1 |
| epam/ | 1ecee9f1aa09 | @grpc/ | 1.14.5 | 1 |
| epam/ | 974c1ddceab6 | @grpc/ | 1.14.5 | 1 |
| ethereumoptimism/ | e07968a0e686 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e8c84b5eaa67 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | 5f8f380dc174 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | 051ba9c34ef5 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e4d5f5ff1945 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e27001f2813c | @grpc/ | 1.13.6 | 1 |
| growthbook/ | c8a124f55dca | @grpc/ | 1.14.5 | 1 |
| growthbook/ | cbf1bc59e9a9 | @grpc/ | 1.14.5 | 1 |
| hugohg34/ | 503e5d8960ff | @grpc/ | 1.13.6 | 1 |
| infisical/ | 02082bf13163 | @grpc/ | 1.14.5 | 1 |
| infisical/ | 3365445909be | @grpc/ | 1.14.5 | 1 |
| kubeflownotebookswg/ | 37300551dea6 | @grpc/ | 1.13.6 | 1 |
| kubeflownotebookswg/ | af55c22ef5de | @grpc/ | 1.13.6 | 1 |
| library/ | 83f7bf209844 | @grpc/ | 1.13.6 | 1 |
| library/ | 35544f1ff28a | @grpc/ | 1.14.5 | 1 |
| linuxserver/ | a5e43a05ae79 | @grpc/ | 1.13.6 | 1 |
| louislam/ | 059b49d64739 | @grpc/ | 1.13.6 | 1 |