CVE-2026-101916
HighAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 134
- of 17,966 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 1 of 1
- affected package
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
Carried by container images the latest versions of 134 of 17,966 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @grpc/ | 1.1.8, 1.3.2, 1.3.3, 1.4.2+34 more | 1.13.6, 1.14.5 | 133 |
- OSV records
- GHSA-m9gg-hp2v-232j
Charts affected
134 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| n8ncommunity-chartsVerified publisher | 1.24.42 | 1 of 1See more | 1,230 |
| n8nopen-8gears | 2.1.1 | 1 of 1See more | 1,595 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 33,386 |
| rocketchatrocketchat-server | 7.0.2 | 4 of 12See more | 13,049 |
| homarrhomarr-labsOfficialVerified publisher | 8.29.2 | 1 of 1See more | 634 |
| oneuptimeoneuptimeOfficialVerified publisher | 14.0.10 | 3 of 7See more | 9,051 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,458 |
| supabasetokens-studioVerified publisher | 1.0.0 | 1 of 14See more | 24,811 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 11,464 |
| homepagem0nsterrr-homepageVerified publisher | 5.4.0 | 1 of 1See more | 556 |
| n8nn8n | 0.23.0 | 1 of 1See more | 6,105 |
| n8nhelmforgeVerified publisher | 2.1.2 | 1 of 2See more | 1,443 |
| backstagerhdh-chartVerified publisher | 4.0.1 | 1 of 2See more | 1,313 |
| dialdialOfficialVerified publisher | 8.0.0 | 1 of 4See more | 2,299 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 164,427 |
| librechatlibrechat | 1.8.10 | 1 of 3See more | 3,188 |
| code-serveralekcVerified publisher | 0.1.1 | 1 of 1See more | 8,631 |
| hermes-agenthermes-agentVerified publisher | 1.16.0 | 1 of 1See more | 6,235 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 6,947 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 1 of 9See more | 195,327 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 1 of 9See more | 195,308 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 1 of 12See more | 40,598 |
| growthbookgrowthbook | 5.1.0 | 1 of 2See more | 756 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 33,235 |
| uptimekumahelm-l3st86Verified publisher | 0.1.10 | 1 of 1See more | 4,521 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 17,362 |
| plane-enterprisemakeplaneOfficialVerified publisher | 3.10.2 | 3 of 13See more | 4,608 |
| mend-renovate-enterprise-editionmend-renovateVerified publisher | 10.6.0 | 1 of 2See more | 37,486 |
| n8nn8n-helm | 2.25.7 | 1 of 1See more | 3,221 |
| observability-mcpobservability-mcpOfficialVerified publisher | 2.9.12 | 1 of 2See more | 119 |
| growthbookone-acre-fundVerified publisher | 0.3.0 | 1 of 3See more | 1,575 |
| opentelemetry-demoopentelemetry-helmOfficialVerified publisher | 0.42.1 | 2 of 34See more | 23,320 |
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 7,680 |
| patchworkpatchworkVerified publisher | 0.8.6 | 1 of 2See more | 2,256 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 34,115 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 41,709 |
| immichsecustorVerified publisher | 2.0.7 | 1 of 1See more | 3,231 |
| supabasesupabse | 0.8.0 | 1 of 11See more | 20,099 |
| tenuretenureVerified publisher | 1.0.6 | 1 of 2See more | 2,972 |
| u-storeunifieVerified publisher | 1.2.0 | 1 of 1See more | 16,097 |
| trifidzazukoOfficialVerified publisher | 0.2.1 | 1 of 1See more | 500 |
| adeptia-automate-mcpadeptia-automate-mcp | 1.0.0 | 2 of 2See more | 4,038 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 33,246 |
| homepagealareira | 1.0.1 | 1 of 1See more | 556 |
| openhab-cloudandibraeuVerified publisher | 1.2.6 | 1 of 1See more | 3,582 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 1 of 9See more | 195,327 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 1 of 9See more | 195,327 |
| immichbear | 0.1.1 | 1 of 2See more | 7,703 |
| countlychristianhuthVerified publisher | 5.3.3 | 2 of 3See more | 8,134 |
| cloudpremcloudprem | 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad | 3 of 6See more | 19,655 |
Container images carrying it
133 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| decisionrules/ | 6a8f32aa11bc | @grpc/ | 1.14.5 | 4 |
| assistiot/ | e36a8922fa0c | @grpc/ | 1.13.6 | 3 |
| ghcr.io/ | f0fb462299af | @grpc/ | 1.13.6 | 3 |
| quay.io/ | 709c7da19c5a | @grpc/ | 1.13.6 | 3 |
| krtk6160/ | cc82a694f818 | @grpc/ | 1.13.6 | 2 |
| louislam/ | 917318f9d7be | @grpc/ | 1.13.6 | 2 |
| louislam/ | 96510915e6be | @grpc/ | 1.13.6 | 2 |
| louislam/ | 9aeb4e51d038 | @grpc/ | 1.13.6 | 2 |
| louislam/ | a8610b3b4c38 | @grpc/ | 1.13.6 | 2 |
| louislam/ | c74379ac4509 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 1e0d24d28512 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 265102a049d6 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | def4bf273721 | @grpc/ | 1.13.6 | 2 |
| mojaloop/ | 12af60892c75 | @grpc/ | 1.14.5 | 2 |
| n8nio/ | 14c4285bc303 | @grpc/ | 1.14.5 | 2 |
| nousresearch/ | fca358f12efd | @grpc/ | 1.14.5 | 2 |
| siscc/ | 12c5048f7402 | @grpc/ | 1.14.5 | 2 |
| ghcr.io/ | 643bd0be730d | @grpc/ | 1.14.5 | 2 |
| ghcr.io/ | b434cb9287ee | @grpc/ | 1.14.5 | 2 |
| adeptiainc/ | 283001e83739 | @grpc/ | 1.14.5 | 1 |
| adeptiainc/ | 31f295e948e6 | @grpc/ | 1.14.5 | 1 |
| arturisimo/ | d8dc4430531e | @grpc/ | 1.13.6 | 1 |
| assistiot/ | c8a170683be7 | @grpc/ | 1.13.6 | 1 |
| budibase/ | 44fe6feab985 | @grpc/ | 1.14.5 | 1 |
| ccjacobs14/ | 9a9b14a6f09e | @grpc/ | 1.13.6 | 1 |
| codercom/ | 1e2cc688008e | @grpc/ | 1.13.6 | 1 |
| cortezaproject/ | 4ea78dfe5364 | @grpc/ | 1.13.6 | 1 |
| countly/ | f4cc7447c4f5 | @grpc/ | 1.13.6 | 1 |
| countly/ | e3c238248f99 | @grpc/ | 1.13.6 | 1 |
| countly/ | 2acbc11499b6 | @grpc/ | 1.13.6 | 1 |
| cryptexlabs/ | 189c07411d7c | @grpc/ | 1.13.6 | 1 |
| epam/ | 1ecee9f1aa09 | @grpc/ | 1.14.5 | 1 |
| epam/ | 974c1ddceab6 | @grpc/ | 1.14.5 | 1 |
| ethereumoptimism/ | e07968a0e686 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e8c84b5eaa67 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | 5f8f380dc174 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | 051ba9c34ef5 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e4d5f5ff1945 | @grpc/ | 1.13.6 | 1 |
| fonoster/ | e27001f2813c | @grpc/ | 1.13.6 | 1 |
| growthbook/ | c8a124f55dca | @grpc/ | 1.14.5 | 1 |
| growthbook/ | cbf1bc59e9a9 | @grpc/ | 1.14.5 | 1 |
| hugohg34/ | 503e5d8960ff | @grpc/ | 1.13.6 | 1 |
| infisical/ | 02082bf13163 | @grpc/ | 1.14.5 | 1 |
| infisical/ | 3365445909be | @grpc/ | 1.14.5 | 1 |
| kubeflownotebookswg/ | 37300551dea6 | @grpc/ | 1.13.6 | 1 |
| kubeflownotebookswg/ | af55c22ef5de | @grpc/ | 1.13.6 | 1 |
| library/ | 83f7bf209844 | @grpc/ | 1.13.6 | 1 |
| library/ | 35544f1ff28a | @grpc/ | 1.14.5 | 1 |
| linuxserver/ | a5e43a05ae79 | @grpc/ | 1.13.6 | 1 |
| louislam/ | 059b49d64739 | @grpc/ | 1.13.6 | 1 |