StackRadar

CVE-2026-114437

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
307
of 18,232 indexed, latest versions
Container images
274
deployed by those charts
Fix available
1 of 1
affected package

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

Carried by container images the latest versions of 307 of 18,232 indexed charts deploy, on 274 images.

Affected packageAffected versionsFixed inImages
github.com/go-chi/chi/v5golangv5.0.0, v5.0.2, v5.0.3, v5.0.7+15 more5.4.0274
OSV records
GHSA-j6qf-3m9c-vwj3

Charts affected

307 by stars
ChartLatestAffected imagesRadar Score
opencloudandibraeuVerified publisher1.1.11 of 1See more

opencloud andibraeu 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

391
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/go-chi/chi/v5@v5.0.8
5.4.0

Open the chart page →

181,358
accounts-uiappscodeVerified publisher2026.11.301 of 1See more

accounts-ui appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

2,766
aceappscodeVerified publisher2026.11.301 of 2See more

ace appscode 2026.11.30

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

3,503
ace-installerappscodeVerified publisher2026.11.301 of 2See more

ace-installer appscode 2026.11.30

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

3,887
ace-installer-certifiedappscodeVerified publisher2026.11.301 of 2See more

ace-installer-certified appscode 2026.11.30

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

3,887
billingappscodeVerified publisher2026.11.301 of 1See more

billing appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

2,766
clickhouse-uiappscodeVerified publisher2026.3.301 of 1See more

clickhouse-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/caioricciuti/ch-ui:v2.14.180f4d92c2d8d
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

237
cluster-profile-managerappscodeVerified publisher2026.9.181 of 1See more

cluster-profile-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-profile:v0.13.0596172d6c495
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

435
dns-proxyappscodeVerified publisher2026.11.301 of 1See more

dns-proxy appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/go-chi/chi/v5@v5.0.12
5.4.0

Open the chart page →

1,159
gh-ci-webhookappscodeVerified publisher2026.11.301 of 1See more

gh-ci-webhook appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/go-chi/chi/v5@v5.0.14
5.4.0

Open the chart page →

2,134
marketplace-apiappscodeVerified publisher2026.11.301 of 1See more

marketplace-api appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

2,766
platform-apiappscodeVerified publisher2026.11.301 of 3See more

platform-api appscode 2026.11.30

1 of the 3 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

49,447
platform-linksappscodeVerified publisher2026.11.301 of 1See more

platform-links appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
github.com/go-chi/chi/v5@v5.0.12
5.4.0

Open the chart page →

1,311
prom-proxyappscodeVerified publisher2023.3.231 of 1See more

prom-proxy appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
github.com/go-chi/chi/v5@v5.0.8
5.4.0

Open the chart page →

3,608
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
github.com/go-chi/chi/v5@v5.0.7
5.4.0

Open the chart page →

31,223
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
rclone/rclone:1.56.0f2fc45c8bc57
github.com/go-chi/chi/v5@v5.0.2
5.4.0

Open the chart page →

8,812
attestkeepattestkeepVerified publisher1.3.71 of 2See more

attestkeep attestkeep 1.3.7

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/attestkeep/attestkeep-k8s:1.3.71fbf69c89003
github.com/go-chi/chi/v5@v5.3.0
5.4.0

Open the chart page →

1,359
backrestbackrest0.2.01 of 1See more

backrest backrest 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
garethgeorge/backrest:latestb85297975428
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

1,385
binderybdclark-helm-chartsVerified publisher0.1.61 of 1See more

bindery bdclark-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/vavallee/bindery:v1.42.1792d48c8b782
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

15
tenzu-frontbiru-scop3.1.01 of 1See more

tenzu-front biru-scop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/biru-scop/tenzu-front:latest16759fa523f8
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

1,277
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
github.com/go-chi/chi/v5@v5.0.3
5.4.0

Open the chart page →

17,041
branchdbbranch-dbVerified publisher0.1.41 of 3See more

branchdb branch-db 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/masucchi/branchdb:0.1.47ea1820c1da1
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

1,157
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

2,251
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
github.com/go-chi/chi/v5@v5.0.2
5.4.0

Open the chart page →

6,891
ceems-api-serverceemsVerified publisher0.11.01 of 2See more

ceems-api-server ceems 0.11.0

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

478
ceems-exporterceemsVerified publisher0.9.01 of 1See more

ceems-exporter ceems 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

250
ceems-lbceemsVerified publisher0.9.01 of 1See more

ceems-lb ceems 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

250
kube-ceemsceemsOfficialVerified publisher1.57.11 of 5See more

kube-ceems ceems 1.57.1

1 of the 5 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

1,179
cloudflared-tunnelclouddrove0.2.01 of 1See more

cloudflared-tunnel clouddrove 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.3072c067d25cc
github.com/go-chi/chi/v5@v5.3.1
5.4.0

Open the chart page →

655
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
github.com/go-chi/chi/v5@v5.3.0
5.4.0

Open the chart page →

1,535
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/go-chi/chi/v5@v5.2.2
5.4.0

Open the chart page →

23,504
coder-logstream-kubecoder-logstream-kube0.0.161 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1614af1b1903d2
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

290
coder-ai-gatewaycoder-v2Verified publisher2.38.21 of 1See more

coder-ai-gateway coder-v2 2.38.2

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.38.2ab17fc8e172e
github.com/go-chi/chi/v5@v5.3.1
5.4.0

Open the chart page →

199
coder-provisionercoder-v2OfficialVerified publisher2.38.21 of 1See more

coder-provisioner coder-v2 2.38.2

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.38.2ab17fc8e172e
github.com/go-chi/chi/v5@v5.3.1
5.4.0

Open the chart page →

199
opencloudcommunity-opencloud3.2.01 of 13See more

opencloud community-opencloud 3.2.0

1 of the 13 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

11,459
homeboxcoo-ops-spaceVerified publisher0.1.61 of 1See more

homebox coo-ops-space 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/hay-kot/homebox:v0.9.2e6e0fbd7cca9
github.com/go-chi/chi/v5@v5.0.8
5.4.0

Open the chart page →

2,659
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
github.com/go-chi/chi/v5@v5.0.7
5.4.0

Open the chart page →

10,587
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
github.com/go-chi/chi/v5@v5.0.7
5.4.0

Open the chart page →

5,848
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/go-chi/chi/v5@v5.1.0
5.4.0

Open the chart page →

2,630
cloudflaredcyberjakeVerified publisher0.3.211 of 1See more

cloudflared cyberjake 0.3.21

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.10.1a15a3b50b8da
github.com/go-chi/chi/v5@v5.3.1
5.4.0

Open the chart page →

409
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
github.com/go-chi/chi/v5@v5.0.8
5.4.0

Open the chart page →

2,100
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/go-chi/chi/v5@v5.2.4
5.4.0

Open the chart page →

33,648
ddns-updaterdeimosfr-charts2.10.01 of 1See more

ddns-updater deimosfr-charts 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
qmcgaw/ddns-updater:v2.10.03e2aa558946b
github.com/go-chi/chi/v5@v5.2.5
5.4.0

Open the chart page →

605
kubeteach-coredergeberl0.2.31 of 1See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
github.com/go-chi/chi/v5@v5.0.7
5.4.0

Open the chart page →

2,431
kubeteach-exerciseset1dergeberl0.2.31 of 2See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
github.com/go-chi/chi/v5@v5.0.7
5.4.0

Open the chart page →

2,431
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
library/caddy:latestf2a1290d0463
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

265
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
library/caddy:latest504a44d7d74b
github.com/go-chi/chi/v5@v5.3.2
5.4.0

Open the chart page →

252
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-chi/chi/v5@v5.0.8
5.4.0

Open the chart page →

5,572
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-114437.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-chi/chi/v5@v5.2.2
5.4.0

Open the chart page →

2,101

Container images carrying it

274 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/go-chi/chi/v5@v5.0.12
5.4.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/go-chi/chi/v5@v5.2.2
5.4.0
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
github.com/go-chi/chi/v5@v5.0.7
5.4.0
1
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
github.com/go-chi/chi/v5@v5.2.4
5.4.0
1
public.ecr.aws/gravitational/teleport-plugin-email:18.11.722a89e27f771
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.35c83931b78908
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.4538cfe80c705c
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.7288f0fbbe74c6
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.393a04fd18e463
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.5143be72304cb9
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/go-chi/chi/v5@v5.0.10
5.4.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
github.com/go-chi/chi/v5@v5.2.5
5.4.0
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
github.com/go-chi/chi/v5@v5.2.2
5.4.0
1
quay.io/gogatekeeper/gatekeeper:5.0.11bf649057cce
github.com/go-chi/chi/v5@v5.3.2
5.4.0
1
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1
quay.io/nuclio/controller:1.17.10-amd642ab6589c01c1
github.com/go-chi/chi/v5@v5.3.1
5.4.0
1
quay.io/nuclio/dashboard:1.17.10-amd64539b498e7ca1
github.com/go-chi/chi/v5@v5.3.1
5.4.0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
github.com/go-chi/chi/v5@v5.2.5
5.4.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/go-chi/chi/v5@v5.3.0
5.4.0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.