CVE-2026-27136

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,002; of 17,790 indexed, latest versions
Container images: 3,680; deployed by those charts
Fix available: 1 of 1; affected package

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Carried by container images the latest versions of 3,002 of 17,790 indexed charts deploy, on 3,680 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,680

OSV records: GO-2026-5030

Charts affected

3,002 by stars

Chart

Latest

Affected images

Radar Score

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	golang.org/x/net@v0.22.0	0.55.0
quay.io/metallb/speaker :v0.14.4	37611bde45a2	golang.org/x/net@v0.22.0	0.55.0

Open the chart page →

2,600

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

1,131

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

4,500

openebskubeblocks

3.10.0

3 of 3 See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,568

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,554

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

10,302

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

9,249

snapshot-controllerkubeblocks

1.7.2

1 of 1 See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v6.2.1	98bab4eaf23c	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

1,128

spiderpoolkubeblocks

1.2.0

4 of 4 See more

spiderpool kubeblocks 1.2.0

4 of the 4 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	golang.org/x/net@v0.42.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	golang.org/x/net@v0.42.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

8,457

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/net@v0.35.0	0.55.0
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

2,742

victoria-metrics-alertkubeblocks

0.8.3-reload

2 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
victoriametrics/vmalert :v1.95.1	a83e5db0897a	golang.org/x/net@v0.18.0	0.55.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

3,715

kube-botblocker-operatorkube-botblocker

0.2.2

1 of 2 See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

493

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0	0.55.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0	0.55.0
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

5,496

airflow-operatorkubedoop

0.4.0

1 of 1 See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

409

commons-operatorkubedoop

0.4.0

1 of 1 See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

359

dolphinscheduler-operatorkubedoop

0.4.0

1 of 1 See more

dolphinscheduler-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

351

hbase-operatorkubedoop

0.4.0

1 of 1 See more

hbase-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

359

hdfs-operatorkubedoop

0.4.0

1 of 1 See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

409

hive-operatorkubedoop

0.4.0

1 of 1 See more

hive-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

351

kafka-operatorkubedoop

0.4.0

1 of 1 See more

kafka-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/kafka-operator :0.4.0	0a0b4c39c1ba	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

450

listener-operatorkubedoop

0.4.0

6 of 6 See more

listener-operator kubedoop 0.4.0

6 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/listener-csi-driver :0.4.0	b69bed123b02	golang.org/x/net@v0.53.0	0.55.0
quay.io/zncdatadev/listener-operator :0.4.0	68b92dae8d75	golang.org/x/net@v0.53.0	0.55.0
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

4,430

nifi-operatorkubedoop

0.4.0

1 of 1 See more

nifi-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/nifi-operator :0.4.0	bb4e26ff5e2f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

359

secret-operatorkubedoop

0.4.0

5 of 5 See more

secret-operator kubedoop 0.4.0

5 of the 5 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	golang.org/x/net@v0.47.0	0.55.0
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

4,378

spark-k8s-operatorkubedoop

0.4.0

1 of 1 See more

spark-k8s-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/spark-k8s-operator :0.4.0	d3f2b10c4a6d	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

382

superset-operatorkubedoop

0.4.0

1 of 1 See more

superset-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/superset-operator :0.4.0	102e66e32218	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

359

trino-operatorkubedoop

0.4.0

1 of 1 See more

trino-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/trino-operator :0.4.0	4f516757aee3	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

347

zookeeper-operatorkubedoop

0.4.0

1 of 1 See more

zookeeper-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/zookeeper-operator :0.4.0	b4f33d89ac45	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

359

kube-ecr-secrets-operatorkube-ecr-secrets-operator

0.4.0

1 of 2 See more

kube-ecr-secrets-operator kube-ecr-secrets-operator 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager :0.2.11	d078e45bac70	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0

Open the chart page →

4,445

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba	0.55.0

Open the chart page →

3,518

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

3,498

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

3,400

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/net@v0.17.0	0.55.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

4,825

knative-servingkubegems

1.0.1

7 of 8 See more

knative-serving kubegems 1.0.1

7 of the 8 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned	197fbb71d1f1	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	08315309da4b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	105bdd14ecaa	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mappingdigest-pinned	e384a295069b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhookdigest-pinned	15f1ce7f35b4	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	1282a399cbb9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

10,420

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

3,381

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

1,373

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

1,800

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

930

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462	0.55.0

Open the chart page →

1,628

volcanokubegems

1.12.1

3 of 3 See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/net@v0.38.0	0.55.0
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	golang.org/x/net@v0.38.0	0.55.0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

5,021

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd	0.55.0

Open the chart page →

2,317

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/net@v0.4.0	0.55.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

8,486

kubeintellectkubeintellect

2.5.0

1 of 2 See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

1,858

kubelet-summary-exporterkubelet-summary-exporter

1.0.0

1 of 1 See more

kubelet-summary-exporter kubelet-summary-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,015

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,269

log-socketkube-logging

0.1.2

1 of 1 See more

log-socket kube-logging 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/log-socket :latest	a514736d2d4d	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

1,220

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,624

kube-netlagkube-netlag

1.1.0

1 of 1 See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

1,483

kube-node-readykube-node-ready

0.5.0

1 of 1 See more

kube-node-ready kube-node-ready 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
ghcr.io/imunhatep/kube-node-ready :0.5.0	7439f6f9f85c	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

399

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c	0.55.0

Open the chart page →

7,196

Container images carrying it

3,680 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.55.0	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0	0.55.0	2
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.55.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.55.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.55.0	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/net@v0.38.0	0.55.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0	0.55.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0	0.55.0	2
bloomberg/goldpinger :3.11.3	a8ea8c61ff4c	golang.org/x/net@v0.49.0	0.55.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0	0.55.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0	0.55.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6	0.55.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.55.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/net@v0.51.0	0.55.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0	0.55.0	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0	0.55.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0	0.55.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.55.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0	0.55.0	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.55.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4	0.55.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.55.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0	0.55.0	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0	0.55.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0	0.55.0	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0	0.55.0	2