CVE-2026-101916
HighAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 134
- of 17,966 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 1 of 1
- affected package
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
Carried by container images the latest versions of 134 of 17,966 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @grpc/ | 1.1.8, 1.3.2, 1.3.3, 1.4.2+34 more | 1.13.6, 1.14.5 | 133 |
- OSV records
- GHSA-m9gg-hp2v-232j
Charts affected
134 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| n8ncommunity-chartsVerified publisher | 1.24.42 | 1 of 1See more | 1,230 |
| n8nopen-8gears | 2.1.1 | 1 of 1See more | 1,595 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 33,386 |
| rocketchatrocketchat-server | 7.0.2 | 4 of 12See more | 13,049 |
| homarrhomarr-labsOfficialVerified publisher | 8.29.2 | 1 of 1See more | 634 |
| oneuptimeoneuptimeOfficialVerified publisher | 14.0.10 | 3 of 7See more | 9,051 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,458 |
| supabasetokens-studioVerified publisher | 1.0.0 | 1 of 14See more | 24,811 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 11,464 |
| homepagem0nsterrr-homepageVerified publisher | 5.4.0 | 1 of 1See more | 556 |
| n8nn8n | 0.23.0 | 1 of 1See more | 6,105 |
| n8nhelmforgeVerified publisher | 2.1.2 | 1 of 2See more | 1,443 |
| backstagerhdh-chartVerified publisher | 4.0.1 | 1 of 2See more | 1,313 |
| dialdialOfficialVerified publisher | 8.0.0 | 1 of 4See more | 2,299 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 164,427 |
| librechatlibrechat | 1.8.10 | 1 of 3See more | 3,188 |
| code-serveralekcVerified publisher | 0.1.1 | 1 of 1See more | 8,631 |
| hermes-agenthermes-agentVerified publisher | 1.16.0 | 1 of 1See more | 6,235 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 6,947 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 1 of 9See more | 195,327 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 1 of 9See more | 195,308 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 1 of 12See more | 40,598 |
| growthbookgrowthbook | 5.1.0 | 1 of 2See more | 756 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 33,235 |
| uptimekumahelm-l3st86Verified publisher | 0.1.10 | 1 of 1See more | 4,521 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 17,362 |
| plane-enterprisemakeplaneOfficialVerified publisher | 3.10.2 | 3 of 13See more | 4,608 |
| mend-renovate-enterprise-editionmend-renovateVerified publisher | 10.6.0 | 1 of 2See more | 37,486 |
| n8nn8n-helm | 2.25.7 | 1 of 1See more | 3,221 |
| observability-mcpobservability-mcpOfficialVerified publisher | 2.9.12 | 1 of 2See more | 119 |
| growthbookone-acre-fundVerified publisher | 0.3.0 | 1 of 3See more | 1,575 |
| opentelemetry-demoopentelemetry-helmOfficialVerified publisher | 0.42.1 | 2 of 34See more | 23,320 |
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 7,680 |
| patchworkpatchworkVerified publisher | 0.8.6 | 1 of 2See more | 2,256 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 34,115 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 41,709 |
| immichsecustorVerified publisher | 2.0.7 | 1 of 1See more | 3,231 |
| supabasesupabse | 0.8.0 | 1 of 11See more | 20,099 |
| tenuretenureVerified publisher | 1.0.6 | 1 of 2See more | 2,972 |
| u-storeunifieVerified publisher | 1.2.0 | 1 of 1See more | 16,097 |
| trifidzazukoOfficialVerified publisher | 0.2.1 | 1 of 1See more | 500 |
| adeptia-automate-mcpadeptia-automate-mcp | 1.0.0 | 2 of 2See more | 4,038 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 33,246 |
| homepagealareira | 1.0.1 | 1 of 1See more | 556 |
| openhab-cloudandibraeuVerified publisher | 1.2.6 | 1 of 1See more | 3,582 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 1 of 9See more | 195,327 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 1 of 9See more | 195,327 |
| immichbear | 0.1.1 | 1 of 2See more | 7,703 |
| countlychristianhuthVerified publisher | 5.3.3 | 2 of 3See more | 8,134 |
| cloudpremcloudprem | 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad | 3 of 6See more | 19,655 |
Container images carrying it
133 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| louislam/ | 0b55bcb83a1c | @grpc/ | 1.13.6 | 1 |
| louislam/ | 4c364ef96aad | @grpc/ | 1.13.6 | 1 |
| louislam/ | 70233f4acb51 | @grpc/ | 1.13.6 | 1 |
| louislam/ | 91e963bfda56 | @grpc/ | 1.13.6 | 1 |
| louislam/ | 9865163f92c1 | @grpc/ | 1.13.6 | 1 |
| louislam/ | bc6f244ecf27 | @grpc/ | 1.13.6 | 1 |
| makeplane/ | 488a6684637c | @grpc/ | 1.13.6 | 1 |
| makeplane/ | 27bf6bbf59bd | @grpc/ | 1.13.6 | 1 |
| makeplane/ | 3dba6a659fb9 | @grpc/ | 1.13.6 | 1 |
| markdegroot/ | d8445f2a0de6 | @grpc/ | 1.13.6 | 1 |
| mcp/ | 5ffbf7f0a8aa | @grpc/ | 1.14.5 | 1 |
| mitchxxx/ | 4e72480ec63a | @grpc/ | 1.13.6 | 1 |
| n8nio/ | 761374d4eb84 | @grpc/ | 1.14.5 | 1 |
| n8nio/ | 8b39ed5a2de9 | @grpc/ | 1.13.6 | 1 |
| n8nio/ | 9f693fd55655 | @grpc/ | 1.14.5 | 1 |
| n8nio/ | cfe2704ff858 | @grpc/ | 1.14.5 | 1 |
| n8nio/ | dd171d45102a | @grpc/ | 1.13.6 | 1 |
| n8nio/ | ed16e560c40e | @grpc/ | 1.13.6 | 1 |
| n8nio/ | fdce8f852ac7 | @grpc/ | 1.14.5 | 1 |
| nocodb/ | 4ccfc5114506 | @grpc/ | 1.14.5 | 1 |
| nousresearch/ | e0df6adebddf | @grpc/ | 1.14.5 | 1 |
| oneuptime/ | 50a0b6b3b161 | @grpc/ | 1.14.5 | 1 |
| oneuptime/ | 2a29fe29ddc8 | @grpc/ | 1.14.5 | 1 |
| oneuptime/ | 65ffc551c71d | @grpc/ | 1.14.5 | 1 |
| ooghenekaro/ | 03394ba1d6d8 | @grpc/ | 1.13.6 | 1 |
| openhab/ | 29dd2bac8c4b | @grpc/ | 1.13.6 | 1 |
| qxip/ | 77acc9c7a9fd | @grpc/ | 1.13.6 | 1 |
| rahulbhiwagade122/ | 08490b70998c | @grpc/ | 1.13.6 | 1 |
| roadiehq/ | ef355bf5b639 | @grpc/ | 1.13.6 | 1 |
| rocketchat/ | 44af8ac4e711 | @grpc/ | 1.14.5 | 1 |
| rocketchat/ | 6bc18fb5d0e5 | @grpc/ | 1.14.5 | 1 |
| rocketchat/ | 819771c4abe4 | @grpc/ | 1.14.5 | 1 |
| rocketchat/ | c1170bdfe797 | @grpc/ | 1.14.5 | 1 |
| siscc/ | b6f9a7c888fc | @grpc/ | 1.13.6 | 1 |
| supabase/ | 5fea789899d4 | @grpc/ | 1.14.5 | 1 |
| supabase/ | c8eb9858eafe | @grpc/ | 1.14.5 | 1 |
| supabase/ | f983fb50bd95 | @grpc/ | 1.13.6 | 1 |
| supporttools/ | f8a49ed65809 | @grpc/ | 1.13.6 | 1 |
| tenureai/ | 5f5b222df9a5 | @grpc/ | 1.14.5 | 1 |
| thecodingmachine/ | 53a30c962ce9 | @grpc/ | 1.13.6 | 1 |
| thecodingmachine/ | 64001369dad5 | @grpc/ | 1.13.6 | 1 |
| thecodingmachine/ | 519c31c6e7ec | @grpc/ | 1.13.6 | 1 |
| thecodingmachine/ | 5bdab56da2fa | @grpc/ | 1.13.6 | 1 |
| thecodingmachine/ | d8f66979b9b4 | @grpc/ | 1.13.6 | 1 |
| thecodingmachine/ | df31006cc4ce | @grpc/ | 1.13.6 | 1 |
| thingsboard/ | 13e1eadf8ace | @grpc/ | 1.13.6 | 1 |
| tooljet/ | c85a4720e42e | @grpc/ | 1.13.6 | 1 |
| veecode/ | 28d1bafed0cf | @grpc/ | 1.14.5 | 1 |
| winfred008/ | 10a68de5b398 | @grpc/ | 1.13.6 | 1 |
| ghcr.io/ | ba359097329d | @grpc/ | 1.13.6 | 1 |