Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

7,190

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	github.com/quic-go/webtransport-go@v0.8.0	0.10.0

Open the chart page →

1,799

spectrechronicle

0.3.8

1 of 1 See more

spectre chronicle 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/chronicleprotocol/spectre :0.68.3	4e872bc016e8	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

1,515

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	github.com/quic-go/webtransport-go@v0.9.0	0.10.0

Open the chart page →

1,181

mcpmcp-charts

0.0.23

1 of 7 See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	github.com/quic-go/webtransport-go@v0.9.0	0.10.0

Open the chart page →

6,929

graph-nodestakewise

3.1.0

1 of 3 See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.24.0	e3de33bd746b	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

4,661

celestia-localastria

9.0.0

1 of 2 See more

celestia-local astria 9.0.0

1 of the 2 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	github.com/quic-go/webtransport-go@v0.9.0	0.10.0

Open the chart page →

3,281

celestia-nodeastria

0.7.1

1 of 1 See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	github.com/quic-go/webtransport-go@v0.9.0	0.10.0

Open the chart page →

1,502

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

7,190

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

5,059

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

7,405

basechronicle

0.0.8

1 of 1 See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	github.com/quic-go/webtransport-go@v0.8.0	0.10.0

Open the chart page →

4,810

spirechronicle

0.3.6

1 of 1 See more

spire chronicle 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ghcr.io/chronicleprotocol/spire :0.68.3	79df4fb20322	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

1,515

iotaeclipse-aerios

1.0.2

1 of 4 See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
iotaledger/hornet :2.0	01206f1ba89c	github.com/quic-go/webtransport-go@v0.5.3	0.10.0

Open the chart page →

13,391

armiarmaethereum-helm-charts

0.1.2

1 of 2 See more

armiarma ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ethpandaops/armiarma :master	1a9c3264f0a9	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

1,155

forkyethereum-helm-charts

0.2.0

1 of 1 See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ethpandaops/forky :debian-latest	c937f4ba737c	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

1,703

beeethersphere

0.17.4

1 of 1 See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ethersphere/bee :2.2.0	a884fd84b72f	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

3,456

edgemeshkubesphere-stable

0.1.0

1 of 2 See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	github.com/quic-go/webtransport-go@v0.5.3	0.10.0

Open the chart page →

4,096

chainrss3

0.1.28

1 of 8 See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

8,528

vsl-chainrss3

0.1.0

1 of 7 See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

6,044

vsl-rpcrss3

0.3.4

1 of 4 See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

4,610

vsl-sequencerrss3

0.3.4

1 of 4 See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	github.com/quic-go/webtransport-go@v0.6.0	0.10.0

Open the chart page →

4,610

ipfsstakewise

2.2.0

1 of 2 See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.33.2	1a30f5ed8579	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

1,239

ssv-nodestakewise

2.2.0

1 of 2 See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	github.com/quic-go/webtransport-go@v0.8.0	0.10.0

Open the chart page →

6,779

v3-backendstakewise

3.6.0

1 of 5 See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-21438.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.33.2	1a30f5ed8579	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0

Open the chart page →

1,239

Container images carrying it

25 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	github.com/quic-go/webtransport-go@v0.6.0	0.10.0	3
ipfs/kubo :v0.33.2	1a30f5ed8579	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	github.com/quic-go/webtransport-go@v0.9.0	0.10.0	2
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	github.com/quic-go/webtransport-go@v0.8.0	0.10.0	1
ethersphere/bee :2.2.0	a884fd84b72f	github.com/quic-go/webtransport-go@v0.6.0	0.10.0	1
ethpandaops/armiarma :master	1a9c3264f0a9	github.com/quic-go/webtransport-go@v0.6.0	0.10.0	1
ethpandaops/forky :debian-latest	c937f4ba737c	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
evcc/evcc :0.300.8	ddf2a25afce5	github.com/quic-go/webtransport-go@v0.9.0	0.10.0	1
iotaledger/hornet :2.0	01206f1ba89c	github.com/quic-go/webtransport-go@v0.5.3	0.10.0	1
ipfs/kubo :v0.24.0	e3de33bd746b	github.com/quic-go/webtransport-go@v0.6.0	0.10.0	1
kubeedge/edgemesh-agent :latest	460c6061b608	github.com/quic-go/webtransport-go@v0.5.3	0.10.0	1
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	github.com/quic-go/webtransport-go@v0.6.0	0.10.0	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	github.com/quic-go/webtransport-go@v0.8.0	0.10.0	1
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	github.com/quic-go/webtransport-go@v0.8.0	0.10.0	1
ghcr.io/chronicleprotocol/spectre :0.68.3	4e872bc016e8	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
ghcr.io/chronicleprotocol/spire :0.68.3	79df4fb20322	github.com/quic-go/webtransport-go@v0.8.1-0.20241018022711-4ac2c9250e66	0.10.0	1
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	github.com/quic-go/webtransport-go@v0.9.0	0.10.0	1