CVE-2026-27136

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,011; of 17,792 indexed, latest versions
Container images: 3,684; deployed by those charts
Fix available: 1 of 1; affected package

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Carried by container images the latest versions of 3,011 of 17,792 indexed charts deploy, on 3,684 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,684

OSV records: GO-2026-5030

Charts affected

3,011 by stars

Chart

Latest

Affected images

Radar Score

cert-manager-setupmesosphere-stable

0.2.10

4 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.11.0	5c3eb25b0854	golang.org/x/net@v0.5.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/net@v0.5.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/net@v0.5.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

7,201

cosimesosphere-stable

0.2.2

1 of 1 See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

305

dexmesosphere-stable

2.14.1

3 of 5 See more

dex mesosphere-stable 2.14.1

3 of the 5 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0	0.55.0
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/net@v0.11.0	0.55.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/net@v0.25.0	0.55.0

Open the chart page →

19,285

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

3,041

gcpdisk-csi-drivermesosphere-stable

0.7.3

1 of 7 See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.55.0

Open the chart page →

3,613

istiomesosphere-stable

1.25.1

1 of 2 See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

5,461

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

3,342

istio-helm-istiodmesosphere-stable

1.23.6

2 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/net@v0.37.0	0.55.0
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

4,665

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,242

karmamesosphere-stable

2.0.3

1 of 1 See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
lmierzwa/karma :v0.70	d417abe7ddb5	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

1,966

knativemesosphere-stable

1.10.8

7 of 7 See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	golang.org/x/net@v0.7.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

7,528

kommandermesosphere-stable

0.39.2

18 of 29 See more

kommander mesosphere-stable 0.39.2

18 of the 29 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553	0.55.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.55.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.55.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0

Open the chart page →

68,432

kube-prometheus-stackmesosphere-stable

75.9.1

6 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

6 of the 7 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0	0.55.0
grafana/grafana :12.0.2	b5b59bfc7561	golang.org/x/net@v0.40.0	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	golang.org/x/net@v0.40.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

10,239

multusmesosphere-stable

0.1.1

1 of 1 See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.4-thick	3c20900b5381	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

1,808

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980	0.55.0

Open the chart page →

7,030

veleromesosphere-stable

3.2.5

1 of 1 See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,871

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.55.0

Open the chart page →

4,115

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0

Open the chart page →

8,958

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

2,752

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582	0.55.0

Open the chart page →

3,231

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

1,806

middleware-odigosmiddleware-labs

0.2.41

4 of 6 See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
ghcr.io/middleware-labs/odigos-odiglet :middleware-test-0.0.1	03c8c835ecee	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

8,382

middleware-visionmiddleware-labs

0.2.65

4 of 6 See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
ghcr.io/middleware-labs/vision-odiglet :middleware-test-0.0.3	bce34c98668e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

8,374

mw-autoinstrumentationmiddleware-labs

1.2.6

5 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

5 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-auto-injector :0.1.1	8512248e17e8	golang.org/x/net@v0.26.0	0.55.0
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	golang.org/x/net@v0.26.0	0.55.0
ghcr.io/middleware-labs/mw-lang-detector :0.1.2	a4776aa2a56b	golang.org/x/net@v0.26.0	0.55.0
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/net@v0.41.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

3,729

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

1,601

mw-kube-agent-v3middleware-labs

1.8.5

2 of 2 See more

mw-kube-agent-v3 middleware-labs 1.8.5

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.21.0	ff23f452813a	golang.org/x/net@v0.53.0	0.55.0
ghcr.io/middleware-labs/mw-kube-agent-config-updater :1.21.0	d4edc3f244f4	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

2,071

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

1,341

imaginemikejoh

0.2.0

1 of 1 See more

imagine mikejoh 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
mikejoh/imagine :0.1.0	78737d7345f9	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

559

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/net@v0.27.0	0.55.0

Open the chart page →

1,300

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/net@v0.25.0	0.55.0

Open the chart page →

1,544

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.55.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0

Open the chart page →

15,874

mimirmimir

0.1.10

1 of 1 See more

mimir mimir 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

382

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.55.0

Open the chart page →

6,086

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

10,713

standard-application-stackmintel

11.5.0

1 of 12 See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

10,623

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,890

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0

Open the chart page →

2,854

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.55.0

Open the chart page →

7,782

echoperatormmontes

0.0.2

1 of 1 See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

1,826

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0

Open the chart page →

2,554

smartthings-metricsmoikot

0.1.0

1 of 1 See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.55.0

Open the chart page →

1,744

smartthings-metrics-feat-log-detailsmoikot

0.0.92

1 of 1 See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.55.0

Open the chart page →

1,732

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

2,470

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0

Open the chart page →

16,304

mollysocketmollysocket-wrenix

0.1.14

1 of 2 See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.3	c4a11ae9a1cb	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,540

eks-pod-identity-webhookmondu-ai

0.3.1

1 of 1 See more

eks-pod-identity-webhook mondu-ai 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

474

mongodb-admin-interfacemongo-db-admin-interface

0.1.0

1 of 2 See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
library/mongo :5.0	41108d183e97	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

5,229

enterprise-operatormongodb-helm-charts

1.33.0

1 of 1 See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,562

mongodb-secure-backupmongodb-secure-backup

1.0.0

1 of 2 See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

1,033

mongopingmongoping

1.3.1

1 of 1 See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

1,137

Container images carrying it

3,684 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/net@v0.52.0	0.55.0	1
denniswitt/yas3p :0.2.4	88a235619af6	golang.org/x/net@v0.52.0	0.55.0	1
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0	0.55.0	1
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/net@v0.26.0	0.55.0	1
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0	0.55.0	1
devsecurely/cview-issuer :0.0.42	eecd4314e933	golang.org/x/net@v0.52.0	0.55.0	1
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0	0.55.0	1
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0	0.55.0	1
digitalocean/do-operator :v0.1.6	5e5deb4db76e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
distribution/distribution :3.1.1	bca24727f400	golang.org/x/net@v0.52.0	0.55.0	1
djjudas21/nova-exporter :0.0.10	e9094580885c	golang.org/x/net@v0.41.0	0.55.0	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0	0.55.0	1
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0	1
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0	0.55.0	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/net@v0.0.0-20201002202402-0a1ea396d57c	0.55.0	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.55.0	1
donetick/donetick :v0.1.79	a1cc21dd5a37	golang.org/x/net@v0.49.0	0.55.0	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0	0.55.0	1
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0	0.55.0	1
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0	0.55.0	1
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0	0.55.0	1
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0	0.55.0	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/net@v0.29.0	0.55.0	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/net@v0.29.0	0.55.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/net@v0.28.0	0.55.0	1
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0	0.55.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0	0.55.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0	0.55.0	1
dragonflyoss/scheduler :v2.5.2	d5dea9e662cd	golang.org/x/net@v0.48.0	0.55.0	1
drone/drone :2.28.2	55897c8fb22d	golang.org/x/net@v0.42.0	0.55.0	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.55.0	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.55.0	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/net@v0.19.0	0.55.0	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0	0.55.0	1
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0	0.55.0	1
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/net@v0.5.0	0.55.0	1
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0	0.55.0	1
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0	0.55.0	1
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0	1
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.55.0	1
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
easysoft/quickon-zentao :18.5	592ad5df1f8b	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.55.0	1
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0	1
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/net@v0.25.0	0.55.0	1
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0	0.55.0	1