StackRadar

CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,641
of 17,790 indexed, latest versions
Container images
1,992
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more1.79.31,992
OSV records
GHSA-p77j-4mvh-x3m3
Also known as
GO-2026-4762

Charts affected

1,641 by stars
ChartLatestAffected imagesRadar Score
maddyk8s-home-lab-repo4.2.11 of 1See more

maddy k8s-home-lab-repo 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
foxcpp/maddy:0.8.2eeb5813fc4d1
google.golang.org/grpc@v1.70.0
1.79.3

Open the chart page →

1,059
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
google.golang.org/grpc@v1.30.0
1.79.3

Open the chart page →

14,872
k8s-s3-bucket-operatork8s-s3-bucket-operator0.2.21 of 1See more

k8s-s3-bucket-operator k8s-s3-bucket-operator 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/devangradadiya/k8s-s3-bucket-operator:0.2.258288de9f9fa
google.golang.org/grpc@v1.72.2
1.79.3

Open the chart page →

535
kagentkagent0.10.12 of 6See more

kagent kagent 0.10.1

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
google.golang.org/grpc@v1.72.1
1.79.3
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
google.golang.org/grpc@v1.65.0
1.79.3

Open the chart page →

2,942
gpu-provisionerkaitoVerified publisher0.2.01 of 1See more

gpu-provisioner kaito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

1,045
workspacekaitoVerified publisher0.12.02 of 7See more

workspace kaito 0.12.0

2 of the 7 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v5.2.0afdfa3da79df
google.golang.org/grpc@v1.69.2
1.79.3
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v1.13.2fa8eba9843ff
google.golang.org/grpc@v1.69.2
1.79.3

Open the chart page →

2,410
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
google.golang.org/grpc@v1.72.2
1.79.3

Open the chart page →

2,041
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
google.golang.org/grpc@v1.76.0
1.79.3

Open the chart page →

1,485
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
google.golang.org/grpc@v1.20.0
1.79.3

Open the chart page →

3,364
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
google.golang.org/grpc@v1.54.0
1.79.3

Open the chart page →

2,083
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.79.3

Open the chart page →

3,514
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.79.3
grafana/promtail:2.6.1072527b12cdf
google.golang.org/grpc@v1.44.0
1.79.3
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.79.3
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
google.golang.org/grpc@v1.50.1
1.79.3
ghcr.io/dexidp/dex:v2.35.313964b29d63e
google.golang.org/grpc@v1.49.0
1.79.3
ghcr.io/kiaedev/kiae:latestebd03028ff6a
google.golang.org/grpc@v1.48.0
1.79.3

Open the chart page →

19,257
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
google.golang.org/grpc@v1.69.0
1.79.3

Open the chart page →

12,206
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.79.3

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.79.3

Open the chart page →

3,777
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.79.3
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.79.3
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.79.3

Open the chart page →

2,149
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

1,272
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
google.golang.org/grpc@v1.67.0
1.79.3

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

1,208
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/grpc@v1.33.2
1.79.3

Open the chart page →

3,185
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.79.3
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
google.golang.org/grpc@v1.72.1
1.79.3

Open the chart page →

3,252
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.79.3

Open the chart page →

2,542
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
google.golang.org/grpc@v1.71.1
1.79.3

Open the chart page →

1,512
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
google.golang.org/grpc@v1.67.1
1.79.3
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
google.golang.org/grpc@v1.58.3
1.79.3
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
google.golang.org/grpc@v1.58.3
1.79.3
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
google.golang.org/grpc@v1.58.3
1.79.3
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
google.golang.org/grpc@v1.42.0
1.79.3
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.79.3
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.79.3
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.79.3
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.79.3

Open the chart page →

70,968
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
google.golang.org/grpc@v1.38.0
1.79.3
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.79.3
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.79.3

Open the chart page →

8,471
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.79.3

Open the chart page →

2,320
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.79.3

Open the chart page →

3,819
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.79.3

Open the chart page →

3,207
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/grpc@v1.53.0
1.79.3

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/grpc@v1.53.0
1.79.3

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.79.3

Open the chart page →

2,276
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.79.3
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.79.3

Open the chart page →

8,174
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/grpc@v1.29.1
1.79.3

Open the chart page →

3,995
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.79.3

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.79.3

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/grpc@v1.50.1
1.79.3
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/grpc@v1.52.3
1.79.3

Open the chart page →

7,471
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.79.3

Open the chart page →

6,502
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/grpc@v1.51.0
1.79.3
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/grpc@v1.51.0
1.79.3

Open the chart page →

2,420
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.79.3
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.79.3

Open the chart page →

13,834
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/grpc@v1.47.0
1.79.3

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.79.3
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

2,885
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
google.golang.org/grpc@v1.61.1
1.79.3
calico/kube-controllers:v3.28.08f04e4772a2b
google.golang.org/grpc@v1.61.1
1.79.3
calico/node:v3.28.0385bf6391fea
google.golang.org/grpc@v1.61.1
1.79.3

Open the chart page →

3,308
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

2,306
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/grpc@v1.29.1
1.79.3
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/grpc@v1.58.3
1.79.3
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/grpc@v1.58.3
1.79.3
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/grpc@v1.58.3
1.79.3

Open the chart page →

13,572
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.79.3
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

5,130
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
google.golang.org/grpc@v1.63.2
1.79.3

Open the chart page →

1,419
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
google.golang.org/grpc@v1.45.0
1.79.3

Open the chart page →

3,568
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
google.golang.org/grpc@v1.47.0
1.79.3

Open the chart page →

2,090
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
google.golang.org/grpc@v1.45.0
1.79.3
grafana/loki:2.9.26074e01dbe03
google.golang.org/grpc@v1.56.3
1.79.3
grafana/loki-canary:2.9.24249db29b992
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

5,862
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

1,137

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/operator:1.18.270f9d1fe5fff
google.golang.org/grpc@v1.54.0
1.79.3
1
istio/pilot:1.10.0294ca55bd1cc
google.golang.org/grpc@v1.36.0
1.79.3
1
istio/pilot:1.29.0325156535773
google.golang.org/grpc@v1.78.0
1.79.3
1
istio/pilot:1.23.69c3d6a218181
google.golang.org/grpc@v1.65.0
1.79.3
1
istio/pilot:1.16.0ac0284d75ec9
google.golang.org/grpc@v1.49.0
1.79.3
1
istio/pilot:1.17.1ce9d87606701
google.golang.org/grpc@v1.52.3
1.79.3
1
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.79.3
1
istio/pilot:1.10.3e7e110a421c2
google.golang.org/grpc@v1.36.0
1.79.3
1
istio/pilot:1.29.1f8b0e412ac4a
google.golang.org/grpc@v1.78.0
1.79.3
1
istio/proxyv2:1.9.687a9db561d2e
google.golang.org/grpc@v1.36.0
1.79.3
1
istio/proxyv2:1.10.088c6c693e67a
google.golang.org/grpc@v1.36.0
1.79.3
1
istio/proxyv2:1.14.1df69c1a7af7c
google.golang.org/grpc@v1.45.0
1.79.3
1
jaegertracing/all-in-one:1.2942822be7888b
google.golang.org/grpc@v1.41.0
1.79.3
1
jaegertracing/all-in-one:1.53.060e65bfffe1f
google.golang.org/grpc@v1.60.0
1.79.3
1
jaegertracing/all-in-one:1.42.07d32a4eddec7
google.golang.org/grpc@v1.52.1
1.79.3
1
jaegertracing/all-in-one:1.22.0ca6b73330616
google.golang.org/grpc@v1.29.1
1.79.3
1
jaegertracing/all-in-one:1.18db45c07f2e1b
google.golang.org/grpc@v1.27.1
1.79.3
1
jaegertracing/all-in-one:1.55f6b5d09073f1
google.golang.org/grpc@v1.62.0
1.79.3
1
jaegertracing/jaeger:2.9.0e128b9adbb29
google.golang.org/grpc@v1.74.2
1.79.3
1
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
google.golang.org/grpc@v1.51.0
1.79.3
1
jaegertracing/jaeger-query:1.41.0b636f0f464bc
google.golang.org/grpc@v1.51.0
1.79.3
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
google.golang.org/grpc@v1.66.2
1.79.3
1
jkremser/log2rbac:v0.0.5e35cf56ef183
google.golang.org/grpc@v1.45.0
1.79.3
1
jmferrer/azure-devops-agent:latest030f68ec6998
google.golang.org/grpc@v1.24.0
1.79.3
1
johnblack77/clustereye-api:latest9b8dbc0264ac
google.golang.org/grpc@v1.71.0
1.79.3
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
google.golang.org/grpc@v1.56.3
1.79.3
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
google.golang.org/grpc@v1.48.0
1.79.3
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
google.golang.org/grpc@v1.48.0
1.79.3
1
junktext/getting-started:1.0.5a70936c04aed
google.golang.org/grpc@v1.54.0
1.79.3
1
k8scloudprovider/cinder-csi-plugin:latesta30c7a2a594a
google.golang.org/grpc@v1.40.0
1.79.3
1
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
google.golang.org/grpc@v1.72.1
1.79.3
1
keelhq/keel:0.19.202ac4ea616c4
google.golang.org/grpc@v1.54.0
1.79.3
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
google.golang.org/grpc@v1.72.1
1.79.3
1
keptncontrib/prometheus-service:0.6.029969dd547de
google.golang.org/grpc@v1.27.1
1.79.3
1
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
google.golang.org/grpc@v1.20.0
1.79.3
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.79.3
1
kfserving/kfserving-controller:v0.6.163d79d04c2e3
google.golang.org/grpc@v1.31.1
1.79.3
1
kiosksh/kiosk:0.2.11501725ba2025
google.golang.org/grpc@v1.27.1
1.79.3
1
kong/gateway-operator:1.603510967482b
google.golang.org/grpc@v1.71.1
1.79.3
1
kserve/kserve-controller:v0.10.022ff858b57c1
google.golang.org/grpc@v1.48.0
1.79.3
1
kserve/kserve-controller:v0.8.0f0692a9ea09f
google.golang.org/grpc@v1.42.0
1.79.3
1
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.79.3
1
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.79.3
1
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.79.3
1
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.79.3
1
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.79.3
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.79.3
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.79.3
1
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
google.golang.org/grpc@v1.58.3
1.79.3
1
kubedb/kubedb-enterprise:v0.11.05829bcedcb0d
google.golang.org/grpc@v1.27.1
1.79.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.