CVE-2026-107386
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 101
- of 18,071 indexed, latest versions
- Container images
- 90
- deployed by those charts
- Fix available
- 1 of 1
- affected package
amqp091-go: Pre-negotiation frame limit is not enforced to 4KB
Carried by container images the latest versions of 101 of 18,071 indexed charts deploy, on 90 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.1.0, v1.5.0, v1.6.1, v1.8.1+5 more | 1.14.0 | 90 |
- OSV records
- GHSA-w6r9-248c-frg8
Charts affected
101 by stars
Container images carrying it
90 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| lumenvox/ | 98fe71067039 | github.com/ | 1.14.0 | 1 |
| lumenvox/ | 57d15feb3603 | github.com/ | 1.14.0 | 1 |
| mdenda/ | 9e559aa83030 | github.com/ | 1.14.0 | 1 |
| otel/ | 125bdbeb7590 | github.com/ | 1.14.0 | 1 |
| otel/ | 1ab0baba0ee3 | github.com/ | 1.14.0 | 1 |
| otel/ | 37fa87091cfa | github.com/ | 1.14.0 | 1 |
| otel/ | 3bc07732530c | github.com/ | 1.14.0 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | 1.14.0 | 1 |
| otel/ | 923eb1cfae32 | github.com/ | 1.14.0 | 1 |
| otel/ | b3079f45e19b | github.com/ | 1.14.0 | 1 |
| otel/ | f2f01157055a | github.com/ | 1.14.0 | 1 |
| otel/ | faf125d656fa | github.com/ | 1.14.0 | 1 |
| pgsty/ | 2711cdc5bce0 | github.com/ | 1.14.0 | 1 |
| signoz/ | deb566a7a3c0 | github.com/ | 1.14.0 | 1 |
| sysadminsmedia/ | 56e880b62309 | github.com/ | 1.14.0 | 1 |
| udhos/ | 474c467bbf42 | github.com/ | 1.14.0 | 1 |
| versity/ | f730e0dbc1ef | github.com/ | 1.14.0 | 1 |
| wait4x/ | 4dcd86307de1 | github.com/ | 1.14.0 | 1 |
| yukimochi/ | 5798afb69216 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | f630e47772c9 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | a96e06ec5e9f | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | f80349eb018b | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 84cb5a2b8b81 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 02348a19aeae | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 112fc427d933 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 72dc058e478d | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 167fd532bd43 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 73a2ebae4413 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | f312f50ddc57 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 349f7dca95ec | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 1eb1764b21a0 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 38f87039197f | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 2d16b28a72f3 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 2c807cd41ed4 | github.com/ | 1.14.0 | 1 |
| ghcr.io/ | 21715979aefa | github.com/ | 1.14.0 | 1 |
| public.ecr.aws/ | 08c90bd040bf | github.com/ | 1.14.0 | 1 |
| quay.io/ | a83d2699ae53 | github.com/ | 1.14.0 | 1 |
| quay.io/ | fa948df30d44 | github.com/ | 1.14.0 | 1 |
| quay.io/ | 23329c3368e4 | github.com/ | 1.14.0 | 1 |