CVE-2026-32283

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,960; of 17,821 indexed, latest versions
Container images: 4,503; deployed by those charts
Fix available: 1 of 2; affected packages

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Carried by container images the latest versions of 3,960 of 17,821 indexed charts deploy, on 4,503 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+180 more	1.25.9	4,503

OSV records: DEBIAN-CVE-2026-32283 GO-2026-4870
Also known as: BIT-golang-2026-32283

Charts affected

3,960 by stars

Chart

Latest

Affected images

Radar Score

rawfile-csiymatrix

0.2.1

4 of 4 See more

rawfile-csi ymatrix 0.2.1

4 of the 4 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	stdlib@go1.17.8	1.25.9
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	stdlib@go1.17.9	1.25.9
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	stdlib@go1.16	1.25.9
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	stdlib@go1.16	1.25.9

Open the chart page →

8,002

nginx-vts-exporterymrs

0.1.2

1 of 1 See more

nginx-vts-exporter ymrs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
sophos/nginx-vts-exporter :latest	f1073556b29b	stdlib@go1.13.6	1.25.9

Open the chart page →

1,337

version-checkerymrs

0.2.3

1 of 1 See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	stdlib@go1.15.2	1.25.9

Open the chart page →

3,025

prometheus-monitoring-stackyotron-helm-charts

1.2.0

1 of 3 See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	stdlib@go1.25.7	1.25.9

Open the chart page →

936

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	stdlib@go1.20.4	1.25.9
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	stdlib@go1.20.4	1.25.9

Open the chart page →

5,077

zahori-moonzahori

1.0.1

3 of 3 See more

zahori-moon zahori 1.0.1

3 of the 3 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	stdlib@go1.20.4	1.25.9
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	stdlib@go1.20.4	1.25.9
quay.io/aerokube/moon-ui :2.0.5	89990b146824	stdlib@go1.20.5	1.25.9

Open the chart page →

2,908

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	stdlib@go1.20.5	1.25.9

Open the chart page →

2,485

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	stdlib@go1.17.13	1.25.9

Open the chart page →

3,701

zookeeper-exporterzookeeper-exporter

0.1.0

1 of 1 See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.25.9

Open the chart page →

1,249

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-32283.

Container image	Digest	Package	Fixed in
library/postgres :18.4-alpine3.24	9a8afca54e78	stdlib@go1.24.6	1.25.9

Open the chart page →

7,966

Container images carrying it

4,503 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.25.9	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	stdlib@go1.20.14	1.25.9	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	stdlib@go1.14.5	1.25.9	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.25.9	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.9	2
coredns/coredns :1.13.1	9b9128672209	stdlib@go1.25.2	1.25.9	2
crate/crate_adapter :latest	b8d89fa5d19b	stdlib@go1.16.3	1.25.9	2
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.25.9	2
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.25.9	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.25.9	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.25.9	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.25.9	2
datawire/emissary :3.12.2	1f67a1292d2a	stdlib@go1.22.4	1.25.9	2
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.25.9	2
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.25.9	2
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.25.9	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.25.9	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	stdlib@go1.16.15	1.25.9	2
dtzar/helm-kubectl :3.14.4	55429449408e	stdlib@go1.21.8	1.25.9	2
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.25.9	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.9	2
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.25.9	2
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.25.9	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.25.9	2
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	stdlib@go1.16.2	1.25.9	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.25.9	2
free5gc/ausf :v3.4.3	687ff4daf5da	stdlib@go1.21.8	1.25.9	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	stdlib@go1.21.8	1.25.9	2
free5gc/nrf :v3.4.3	99e46b860efb	stdlib@go1.21.8	1.25.9	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	stdlib@go1.21.8	1.25.9	2
free5gc/pcf :v3.4.3	f712e8ecd927	stdlib@go1.21.8	1.25.9	2
free5gc/smf :v3.4.3	60e38baa4b10	stdlib@go1.21.8	1.25.9	2
free5gc/udm :v3.4.3	2f68df062a50	stdlib@go1.21.8	1.25.9	2
free5gc/udr :v3.4.3	c0783bcdcbdc	stdlib@go1.21.8	1.25.9	2
free5gc/upf :v3.4.3	b6b362a39fdd	stdlib@go1.21.8	1.25.9	2
free5gc/webui :v3.4.3	9adeb18492cb	stdlib@go1.21.8	1.25.9	2
freikin/dawarich :1.14.5	11826c67e4b1	stdlib@go1.24.4	1.25.9	2
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.25.9	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.25.9	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	stdlib@go1.18	1.25.9	2
gomods/athens :v0.11.0	efb811df7844	stdlib@go1.13.10	1.25.9	2
gotson/komga :1.26.3	6c2a967bbe9a	stdlib@go1.17.8	1.25.9	2
governify/dashboard :latest	e83a17ba5038	stdlib@go1.17	1.25.9	2
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.25.9	2
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.9	2
grafana/alloy :v1.12.2	f94b1c82957a	stdlib@go1.25.5	1.25.9	2
grafana/grafana :9.2.4	057896e23443	stdlib@go1.19.3	1.25.9	2
grafana/grafana :11.1.0	079600c9517b	stdlib@go1.22.4	1.25.9	2
grafana/grafana :13.0.1	0f86bada30d6	stdlib@go1.26.0	1.25.9	2
grafana/grafana :12.3.1	2175aaa91c96	stdlib@go1.25.5	1.25.9	2