CVE-2026-27136

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,015; of 17,787 indexed, latest versions
Container images: 3,690; deployed by those charts
Fix available: 1 of 1; affected package

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Carried by container images the latest versions of 3,015 of 17,787 indexed charts deploy, on 3,690 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,690

OSV records: GO-2026-5030

Charts affected

3,015 by stars

Chart

Latest

Affected images

Radar Score

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0	0.55.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,355

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,620

valkey-operatorvalkey

0.6.0

1 of 1 See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/valkey-io/valkey-operator :v0.6.0	52a0f1ed0c03	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

134

vaultvault

1.22.0

3 of 4 See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0	0.55.0
hashicorp/vault :2.0.1	755355002715	golang.org/x/net@v0.54.0	0.55.0
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

4,243

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

1,031

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

1,344

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.55.0

Open the chart page →

2,245

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,000

wallarm-ingresswallarm

5.3.10-1

2 of 2 See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

1,301

wallarm-sidecarwallarm

6.13.1

1 of 3 See more

wallarm-sidecar wallarm 6.13.1

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0	0.55.0

Open the chart page →

965

argo-cdwenerme

10.9.1

2 of 3 See more

argo-cd wenerme 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0	0.55.0
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

2,989

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.55.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0

Open the chart page →

10,033

buildkitdwiremind

0.33.0

1 of 1 See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

1,153

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

4,713

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0

Open the chart page →

4,041

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

828

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,836

no-latest-tag-webhookadmission-webhook-no-latest

1.0.14

1 of 1 See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

162

agentareaagentarea

0.0.18

3 of 16 See more

agentarea agentarea 0.0.18

3 of the 16 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0	0.55.0
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/net@v0.35.0	0.55.0
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

14,960

alertmanager-matrixalertmanager-matrix

0.1.16

1 of 1 See more

alertmanager-matrix alertmanager-matrix 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
silkeh/alertmanager_matrix :0.6.1	900010497f8c	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

454

clearml-servingallegroai

1.6.2

3 of 9 See more

clearml-serving allegroai 1.6.2

3 of the 9 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0	0.55.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

17,879

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

3,119

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

2,173

cloudflare-operatorankra-charts

0.2.0

1 of 1 See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
adyanth/cloudflare-operatordigest-pinned	6b168dc237d5	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

493

upcloud-csiankra-charts

0.4.0

8 of 8 See more

upcloud-csi ankra-charts 0.4.0

8 of the 8 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.43.0	0.55.0
ghcr.io/upcloudltd/upcloud-csidigest-pinned	5af91c663788	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0
registry.k8s.io/sig-storage/snapshot-controller :v4.2.1	95587f8777d7	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

14,920

annotations-exporterannotations-exporter

0.5.0

1 of 1 See more

annotations-exporter annotations-exporter 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/alex123012/annotations-exporter :v0.5.0	4c2b8dbc798e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

1,149

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

3,378

anteonanteon

2.6.4

4 of 13 See more

anteon anteon 2.6.4

4 of the 13 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.64	634b094b2183	golang.org/x/net@v0.21.0	0.55.0
ddosify/selfhosted_hammer :2.0.0	181965edb12e	golang.org/x/net@v0.8.0	0.55.0
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.55.0
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

22,233

api-usage-serverapi-usage-server

1.16.0

1 of 1 See more

api-usage-server api-usage-server 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

733

gateway-helmappscode

0.0.0-latest

1 of 2 See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v0.0.1	a8a144f14889	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,057

scannerappscode

2026.1.15

3 of 3 See more

scanner appscode 2026.1.15

3 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/net@v0.17.0	0.55.0
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

5,301

smtprelayappscode

2026.9.11

1 of 1 See more

smtprelay appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

840

stash-enterpriseappscode

0.42.0

4 of 4 See more

stash-enterprise appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
ghcr.io/appscode/kubectl-nonroot :1.31	83d43cc41590	golang.org/x/net@v0.26.0	0.55.0
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	golang.org/x/net@v0.38.0	0.55.0
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

3,620

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

5,231

argocd-rbac-operatorargocd-rbac-operator

0.4.5

1 of 1 See more

argocd-rbac-operator argocd-rbac-operator 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-rbac-operator :v0.2.4	51dded00137a	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

954

kedaarieotech

0.1.0

2 of 3 See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.16.0	02348a19aeae	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/kedacore/keda-metrics-apiserver :2.16.0	73a2ebae4413	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

2,276

s3dartur9010

1.0.1

1 of 1 See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

1,722

arvancloud-webhookarvancloud-webhook

1.0.0

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,309

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

10,731

dltbrokerassist-iot-distributed-broker

0.2.0

4 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

77,821

dltloggingassist-iot-logging-auditing

0.2.0

4 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

77,802

astradnsastradns

0.2.9

2 of 2 See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	golang.org/x/net@v0.51.0	0.55.0
ghcr.io/astradns/astradns-operator :v0.2.9	09e58b62416a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,541

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91	0.55.0

Open the chart page →

4,298

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0

Open the chart page →

3,391

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

3,729

kubebrowseravisto

1.4.0

1 of 1 See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/avistotelecom/kubebrowser :0.10.0	a354b8dc7e6a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

677

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5	0.55.0

Open the chart page →

4,814

music-assistantbdclark-helm-charts

0.4.13

1 of 1 See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.10.3	885872224fa5	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

3,617

Container images carrying it

3,690 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/kubectl :1.31	64614ef8290f	golang.org/x/net@v0.26.0	0.55.0	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	golang.org/x/net@v0.23.0	0.55.0	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0	0.55.0	1
bitnamilegacy/kube-state-metrics :2	04a3044b384b	golang.org/x/net@v0.40.0	0.55.0	1
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0	0.55.0	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	golang.org/x/net@v0.4.0	0.55.0	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/net@v0.26.0	0.55.0	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/net@v0.19.0	0.55.0	1
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	golang.org/x/net@v0.39.0	0.55.0	1
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	golang.org/x/net@v0.39.0	0.55.0	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/net@v0.26.0	0.55.0	1
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	golang.org/x/net@v0.37.0	0.55.0	1
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	golang.org/x/net@v0.29.0	0.55.0	1
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	golang.org/x/net@v0.32.0	0.55.0	1
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	golang.org/x/net@v0.39.0	0.55.0	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0	0.55.0	1
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	golang.org/x/net@v0.40.0	0.55.0	1
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/net@v0.22.0	0.55.0	1
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129	0.55.0	1
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	golang.org/x/net@v0.19.0	0.55.0	1
bitnamilegacy/mongodb :latest	b0652af9c8d0	golang.org/x/net@v0.40.0	0.55.0	1
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0	0.55.0	1
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0	1
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/net@v0.17.0	0.55.0	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	golang.org/x/net@v0.27.0	0.55.0	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	golang.org/x/net@v0.27.0	0.55.0	1
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	golang.org/x/net@v0.19.0	0.55.0	1
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	golang.org/x/net@v0.33.0	0.55.0	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0	0.55.0	1
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	golang.org/x/net@v0.42.0	0.55.0	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	golang.org/x/net@v0.33.0	0.55.0	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/net@v0.17.0	0.55.0	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/net@v0.27.0	0.55.0	1
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022	0.55.0	1
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	golang.org/x/net@v0.39.0	0.55.0	1
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/net@v0.30.0	0.55.0	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.36.0	0.55.0	1
bitnami/sealed-secrets-controller :v0.18.5	0516f987fae2	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	1
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/net@v0.42.0	0.55.0	1
bitpoke/wordpress-operator :v0.12.4	21284d1df473	golang.org/x/net@v0.8.0	0.55.0	1
bitpoke/wordpress-operator :v0.12.2	7fb3aad37b5f	golang.org/x/net@v0.8.0	0.55.0	1
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/net@v0.10.0	0.55.0	1
bloomberg/goldpinger :3.10.0	8520120f5598	golang.org/x/net@v0.17.0	0.55.0	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	golang.org/x/net@v0.29.0	0.55.0	1
bluenviron/mediamtx :1.17.1	9e39256d1ba3	golang.org/x/net@v0.52.0	0.55.0	1
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0	0.55.0	1
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0	0.55.0	1
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0	1