StackRadar

CVE-2026-32934

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
73
of 17,781 indexed, latest versions
Container images
61
deployed by those charts
Fix available
1 of 1
affected package

CoreDNS' DoQ worker pool does not bound stream backlog

Carried by container images the latest versions of 73 of 17,781 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
github.com/coredns/corednsgolangv0.0.0-20200803163833-7d5f5b87a4fb, v0.0.0-20230206182419-055b2c31a9cf, v0.0.0-20241121192733-51e11f166ef6, v0.0.0-20251008152637-1db4568df6aa+17 more1.14.361
OSV records
GHSA-2wpx-qpw2-g5h5
Also known as
GO-2026-4969

Charts affected

73 by stars
ChartLatestAffected imagesRadar Score
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60
1.14.3

Open the chart page →

8,202
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/coredns/coredns@v1.4.0
1.14.3

Open the chart page →

23,613
miniomilvus-helm8.0.191 of 1See more

minio milvus-helm 8.0.19

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
github.com/coredns/coredns@v1.11.3
1.14.3

Open the chart page →

1,529
minioopenobserve5.0.71 of 2See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/coredns/coredns@v1.10.0
1.14.3

Open the chart page →

7,459
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/coredns/coredns@v1.13.2
1.14.3

Open the chart page →

2,525
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
github.com/coredns/coredns@v1.12.2
1.14.3

Open the chart page →

2,028
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/coredns/coredns@v1.10.0
1.14.3

Open the chart page →

1,306
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
github.com/coredns/coredns@v1.9.2
1.14.3

Open the chart page →

6,668
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/coredns/coredns@v1.10.0
1.14.3

Open the chart page →

4,744
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
1.14.3

Open the chart page →

2,407
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/coredns/coredns@v1.10.1
1.14.3

Open the chart page →

4,203
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
1.14.3

Open the chart page →

1,047
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/coredns/coredns@v1.11.1
1.14.3

Open the chart page →

10,651
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/coredns/coredns@v1.4.0
1.14.3

Open the chart page →

6,836
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/coredns/coredns@v1.9.4
1.14.3

Open the chart page →

66,266
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/coredns/coredns@v1.9.4
1.14.3

Open the chart page →

4,960
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa
1.14.3

Open the chart page →

887
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
github.com/coredns/coredns@v1.10.1
1.14.3

Open the chart page →

4,060
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/coredns/coredns@v1.4.0
1.14.3

Open the chart page →

9,117
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
1.14.3

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/coredns/coredns@v1.4.0
1.14.3

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/coredns/coredns@v1.11.1
1.14.3

Open the chart page →

14,983
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-32934.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/coredns/coredns@v1.6.6
1.14.3

Open the chart page →

5,033

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
1.14.3
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/coredns/coredns@v1.13.2
1.14.3
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/coredns/coredns@v1.11.1
1.14.3
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/coredns/coredns@v1.11.1
1.14.3
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
github.com/coredns/coredns@v1.9.4
1.14.3
1
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/coredns/coredns@v1.11.3
1.14.3
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/coredns/coredns@v1.9.4
1.14.3
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
1.14.3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
github.com/coredns/coredns@v1.10.0
1.14.3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
github.com/coredns/coredns@v1.13.1
1.14.3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
github.com/coredns/coredns@v1.10.0
1.14.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.