StackRadar

CVE-2026-27136

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,999
of 17,797 indexed, latest versions
Container images
3,673
deployed by those charts
Fix available
1 of 1
affected package

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Carried by container images the latest versions of 2,999 of 17,797 indexed charts deploy, on 3,673 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,673
OSV records
GO-2026-5030

Charts affected

2,999 by stars
ChartLatestAffected imagesRadar Score
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
golang.org/x/net@v0.17.0
0.55.0

Open the chart page →

12,876
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
golang.org/x/net@v0.35.0
0.55.0

Open the chart page →

3,051
openldaphelm-openldapVerified publisher2.0.41 of 3See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
0.55.0

Open the chart page →

6,220
netbirdjaconiVerified publisher0.15.13 of 4See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
golang.org/x/net@v0.39.0
0.55.0
netbirdio/relay:0.45.1872e3add0e1e
golang.org/x/net@v0.39.0
0.55.0
netbirdio/signal:0.45.146ce5a45538f
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

8,608
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

724
kube-starrockskube-starrocksOfficialVerified publisher1.11.71 of 1See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
starrocks/operator:v1.11.78c20435a7579
golang.org/x/net@v0.17.0
0.55.0

Open the chart page →

556
linkerd-jaegerlinkerd2Verified publisher30.12.112 of 4See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98
0.55.0
otel/opentelemetry-collector:0.59.0ee9da0b08d83
golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced
0.55.0

Open the chart page →

4,418
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

5,302
open-feature-operatoropen-feature-operatorOfficialVerified publisher0.9.31 of 1See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

135
amd-gpuamd-gpu-helmOfficialVerified publisher0.22.01 of 1See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
rocm/k8s-device-plugin:1.31.0.926212c665aab
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

1,031
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

6,854
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
0.55.0

Open the chart page →

5,181
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

1,641
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
golang.org/x/net@v0.15.0
0.55.0
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
golang.org/x/net@v0.15.0
0.55.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
golang.org/x/net@v0.15.0
0.55.0

Open the chart page →

11,997
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
golang.org/x/net@v0.17.0
0.55.0

Open the chart page →

1,353
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
golang.org/x/net@v0.42.0
0.55.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

4,885
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
golang.org/x/net@v0.38.0
0.55.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/net@v0.29.0
0.55.0

Open the chart page →

10,809
spirespiffeVerified publisher0.30.23 of 10See more

spire spiffe 0.30.2

3 of the 10 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
golang.org/x/net@v0.34.0
0.55.0
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
golang.org/x/net@v0.42.0
0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

1,685
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.02 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
golang.org/x/net@v0.54.0
0.55.0
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
golang.org/x/net@v0.54.0
0.55.0

Open the chart page →

507
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
golang.org/x/net@v0.36.0
0.55.0

Open the chart page →

1,242
vertical-pod-autoscalercluster-autoscaler0.12.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/net@v0.16.0
0.55.0

Open the chart page →

1,062
codefreshcodefresh-onpremOfficialVerified publisher2.12.143 of 42See more

codefresh codefresh-onprem 2.12.14

3 of the 42 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
golang.org/x/net@v0.43.0
0.55.0
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
golang.org/x/net@v0.27.0
0.55.0
quay.io/codefresh/dind:3.0.250885ab519dac
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

15,119
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/net@v0.43.0
0.55.0
couchbase/operator:2.9.369a385b49e1f
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

754
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
golang.org/x/net@v0.4.0
0.55.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
golang.org/x/net@v0.4.0
0.55.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
golang.org/x/net@v0.4.0
0.55.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
golang.org/x/net@v0.4.0
0.55.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
golang.org/x/net@v0.7.0
0.55.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
golang.org/x/net@v0.7.0
0.55.0

Open the chart page →

6,525
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.55.0
grafana/loki:2.6.11ee60f980950
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.55.0

Open the chart page →

6,484
kube-prometheus-stackkube-prometheus-stack-oci91.4.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
golang.org/x/net@v0.51.0
0.55.0

Open the chart page →

655
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

273
adguard-homerm3lVerified publisher0.24.11 of 2See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
golang.org/x/net@v0.25.0
0.55.0

Open the chart page →

1,149
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
golang.org/x/net@v0.30.0
0.55.0
supabase/gotrue:v2.163.0ba4ddc594b0b
golang.org/x/net@v0.23.0
0.55.0

Open the chart page →

23,400
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
golang.org/x/net@v0.22.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/net@v0.1.0
0.55.0

Open the chart page →

2,108
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
golang.org/x/net@v0.8.0
0.55.0

Open the chart page →

3,005
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

10,981
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
0.55.0
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e
0.55.0
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/net@v0.0.0-20191003171128-d98b1b443823
0.55.0
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
0.55.0

Open the chart page →

12,251
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.24 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

4 of the 5 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
golang.org/x/net@v0.40.0
0.55.0
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
golang.org/x/net@v0.39.0
0.55.0
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
golang.org/x/net@v0.47.0
0.55.0
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

2,323
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
golang.org/x/net@v0.34.0
0.55.0

Open the chart page →

1,248
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
golang.org/x/net@v0.10.0
0.55.0

Open the chart page →

3,055
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
golang.org/x/net@v0.1.0
0.55.0

Open the chart page →

4,176
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
0.55.0

Open the chart page →

7,968
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
golang.org/x/net@v0.21.0
0.55.0

Open the chart page →

1,223
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

1,273
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

1,396
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

2,668
opentelemetry-kube-stackopentelemetry-helmOfficialVerified publisher0.21.01 of 2See more

opentelemetry-kube-stack opentelemetry-helm 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

558
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.55.0

Open the chart page →

4,413
dex-k8s-authenticatorsagikazarmarkVerified publisher0.0.31 of 1See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/net@v0.0.0-20190522155817-f3200d17e092
0.55.0

Open the chart page →

2,792
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.02 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
public.ecr.aws/sumologic/tailing-sidecar-operator:0.111.0920b8f901aef
golang.org/x/net@v0.38.0
0.55.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

1,212
openstack-cinder-csicloud-provider-openstack2.36.57 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

7 of the 7 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.36.078adaeb154c7
golang.org/x/net@v0.53.0
0.55.0
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
golang.org/x/net@v0.40.0
0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
golang.org/x/net@v0.40.0
0.55.0
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
golang.org/x/net@v0.40.0
0.55.0
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

3,653
kubeviewcowboysysopVerified publisher6.0.01 of 1See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
0.55.0

Open the chart page →

1,513
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

4,702
devtron-operatordevtron0.23.38 of 11See more

devtron-operator devtron 0.23.3

8 of the 11 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
0.55.0
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
golang.org/x/net@v0.48.0
0.55.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420
0.55.0
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
golang.org/x/net@v0.48.0
0.55.0
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
0.55.0
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
golang.org/x/net@v0.48.0
0.55.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
golang.org/x/net@v0.10.0
0.55.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
0.55.0

Open the chart page →

33,219

Container images carrying it

3,673 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
golang.org/x/net@v0.7.0
0.55.0
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
0.55.0
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
golang.org/x/net@v0.23.0
0.55.0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
golang.org/x/net@v0.10.0
0.55.0
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
0.55.0
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
golang.org/x/net@v0.9.0
0.55.0
1
ghcr.io/kubelauncher/kubectl7280594a2f18
golang.org/x/net@v0.49.0
0.55.0
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
golang.org/x/net@v0.7.0
0.55.0
1
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
golang.org/x/net@v0.10.0
0.55.0
1
ghcr.io/kubepattern/kubepattern:0.0.50762baa6d9b0
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/kuberecord/kuberecord:v0.4.02a19792ad2ec
golang.org/x/net@v0.50.0
0.55.0
1
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
golang.org/x/net@v0.36.0
0.55.0
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
golang.org/x/net@v0.7.0
0.55.0
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
golang.org/x/net@v0.23.0
0.55.0
1
ghcr.io/kubestellar/console:v0.3.41457cfc94b4da
golang.org/x/net@v0.23.0
0.55.0
1
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/kubetail-org/kubetail-cluster-api:0.8.28e6acd0da9ac
golang.org/x/net@v0.52.0
0.55.0
1
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
golang.org/x/net@v0.52.0
0.55.0
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
golang.org/x/net@v0.48.0
0.55.0
1
ghcr.io/kubewall/kubewall:0.0.23d9a03cfb557b
golang.org/x/net@v0.53.0
0.55.0
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
golang.org/x/net@v0.39.0
0.55.0
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
golang.org/x/net@v0.30.0
0.55.0
1
ghcr.io/kubiyabot/kubiya-operator:runner_v26bf945565865
golang.org/x/net@v0.28.0
0.55.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
golang.org/x/net@v0.42.0
0.55.0
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
golang.org/x/net@v0.39.0
0.55.0
1
ghcr.io/kuoss/eventrouter:v0.4.1300b48beff3ae
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/kuoss/ingress-annotator:v0.3.0ae179f65d869
golang.org/x/net@v0.43.0
0.55.0
1
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
golang.org/x/net@v0.41.0
0.55.0
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
golang.org/x/net@v0.41.0
0.55.0
1
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
golang.org/x/net@v0.42.0
0.55.0
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
0.55.0
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.55.0
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
0.55.0
1
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
0.55.0
1
ghcr.io/kymaroshq/kymaros:0.6.9fb3b88633381
golang.org/x/net@v0.50.0
0.55.0
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
0.55.0
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
0.55.0
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/kyverno/policy-reporter:2.14.1e74c6bf33d1b
golang.org/x/net@v0.8.0
0.55.0
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
golang.org/x/net@v0.22.0
0.55.0
1
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
golang.org/x/net@v0.25.0
0.55.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.