CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,641; of 17,790 indexed, latest versions
Container images: 1,992; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,992

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,641 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.31

5 of 18 See more

catalyst-agents catalyst-agents 0.1.31

5 of the 18 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	google.golang.org/grpc@v1.70.0	1.79.3
grafana/loki :3.0.0	757b5fadf816	google.golang.org/grpc@v1.62.1	1.79.3
grafana/loki-canary :3.0.0	28d7c00588aa	google.golang.org/grpc@v1.62.1	1.79.3
grafana/tempo :2.5.0	f0200a9bff6d	google.golang.org/grpc@v1.63.2	1.79.3
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

17,099

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

1 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,783

clechaosnative

0.2.7

2 of 6 See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	google.golang.org/grpc@v1.32.0	1.79.3
chaosnative/cle-server :2.7.0	e7bcff4a20c0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	google.golang.org/grpc@v1.75.0	1.79.3

Open the chart page →

7,501

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,828

kubevirt-cloud-controller-managerchristianhuth

0.0.2

1 of 1 See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

kubevirt-managerchristianhuth

0.7.0

1 of 1 See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.5.4	1b98f1b5977a	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,993

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

7,034

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	google.golang.org/grpc@v1.22.1	1.79.3

Open the chart page →

3,602

clairclair-helm

0.12.0

1 of 3 See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/projectquay/clair :4.9.0	23329c3368e4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

1,625

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	google.golang.org/grpc@v1.61.1	1.79.3
calico/kube-controllers :v3.28.1	eadb3a25109a	google.golang.org/grpc@v1.61.1	1.79.3
calico/node :v3.28.1	d8c644a8a3ee	google.golang.org/grpc@v1.61.1	1.79.3

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

9 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.79.3
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.79.3
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

12,082

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

21,034

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	google.golang.org/grpc@v1.29.0	1.79.3

Open the chart page →

6,930

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

18,374

cloud-provider-kubevirtcloud-provider-kubevirt

0.2.0

1 of 1 See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	google.golang.org/grpc@v1.33.1	1.79.3

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

5,603

galaxy-cvmfs-csicloudve

2.5.1

2 of 3 See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	google.golang.org/grpc@v1.60.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

1,515

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	google.golang.org/grpc@v1.45.0	1.79.3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

3 of 7 See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	google.golang.org/grpc@v1.43.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

16,134

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

2,068

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

6,204

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,042

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

723

monitoringcluster-deploy

0.3.0

5 of 11 See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	google.golang.org/grpc@v1.78.0	1.79.3
grafana/loki :3.6.7	3c8fd3570dd9	google.golang.org/grpc@v1.75.1	1.79.3
grafana/loki-canary :3.6.7	0dac7d5cb383	google.golang.org/grpc@v1.75.1	1.79.3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

8,219

cluster-monitor-agentcluster-monitor-agent

0.10.2

1 of 1 See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

475

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,403

storage-piraeuscnap

1.0.1

1 of 1 See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.10.5	dd68a66332de	google.golang.org/grpc@v1.79.2	1.79.3

Open the chart page →

334

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
prom/prometheus :v2.19.2	cd134bd4fca0	google.golang.org/grpc@v1.29.1	1.79.3	1
prom/prometheus :v3.8.0	d936808bdea5	google.golang.org/grpc@v1.76.0	1.79.3	1
prom/prometheus :v2.16.0	e4ca62c0d62f	google.golang.org/grpc@v1.22.1	1.79.3	1
prom/prometheus :v2.22.2	f7ffebdd428b	google.golang.org/grpc@v1.32.0	1.79.3	1
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	google.golang.org/grpc@v1.72.1	1.79.3	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	google.golang.org/grpc@v1.28.0	1.79.3	1
qumine/minecraft-server :v0.1.15	c0b650d51132	google.golang.org/grpc@v1.51.0	1.79.3	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	google.golang.org/grpc@v1.19.0	1.79.3	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	google.golang.org/grpc@v1.19.0	1.79.3	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	google.golang.org/grpc@v1.27.0	1.79.3	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	google.golang.org/grpc@v1.23.0	1.79.3	1
rancher/k3s :v1.28.2-k3s1	8c2599ecfca8	google.golang.org/grpc@v1.57.0	1.79.3	1
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	google.golang.org/grpc@v1.40.0	1.79.3	1
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	google.golang.org/grpc@v1.65.0	1.79.3	1
rclone/rclone :1.63.0	08e1af3c8814	google.golang.org/grpc@v1.54.0	1.79.3	1
rclone/rclone :1.57.0	1e6eeabddc01	google.golang.org/grpc@v1.40.0	1.79.3	1
rclone/rclone :1.56.0	f2fc45c8bc57	google.golang.org/grpc@v1.37.0	1.79.3	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	google.golang.org/grpc@v1.62.1	1.79.3	1
reportportal/migrations :5.15.4	464468240d7b	google.golang.org/grpc@v1.67.0	1.79.3	1
reportportal/migrations :5.7.0	da5d8e1395fe	google.golang.org/grpc@v1.20.1	1.79.3	1
restic/restic :0.15.2	579e4e6a4931	google.golang.org/grpc@v1.54.0	1.79.3	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	google.golang.org/grpc@v1.65.0	1.79.3	1
rotationalio/geoping :1.3.0	34bcb6fc3cb7	google.golang.org/grpc@v1.79.2	1.79.3	1
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	google.golang.org/grpc@v1.75.1	1.79.3	1
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	google.golang.org/grpc@v1.79.2	1.79.3	1
rqlite/rqlite :9.1.3	7b992a526eee	google.golang.org/grpc@v1.76.0	1.79.3	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	google.golang.org/grpc@v1.21.1	1.79.3	1
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	google.golang.org/grpc@v1.65.0	1.79.3	1
ryuunosukeds3/orbital :latest	0879f7261b10	google.golang.org/grpc@v1.70.0	1.79.3	1
sarwansharma/minio :v3	59d1da9385d1	google.golang.org/grpc@v1.46.0	1.79.3	1
scaleway/scaleway-csi :v0.3.4	11135998e31c	google.golang.org/grpc@v1.73.0	1.79.3	1
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	google.golang.org/grpc@v1.53.0	1.79.3	1
semaphoreui/semaphore :latest :v2.19.12	3996804607eb	google.golang.org/grpc@v1.76.0	1.79.3	1
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	google.golang.org/grpc@v1.76.0	1.79.3	1
semaphoreui/semaphore :v2.18.3	e9260bfa8255	google.golang.org/grpc@v1.59.0	1.79.3	1
semitechnologies/weaviate :1.19.1	7a00d226f063	google.golang.org/grpc@v1.47.0	1.79.3	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	google.golang.org/grpc@v1.50.1	1.79.3	1
sikalabs/slu :v0.72.0	7bd267f30247	google.golang.org/grpc@v1.59.0	1.79.3	1
silkeh/alertmanager_matrix :0.6.1	900010497f8c	google.golang.org/grpc@v1.78.0	1.79.3	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	google.golang.org/grpc@v1.40.0	1.79.3	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	google.golang.org/grpc@v1.58.3	1.79.3	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	google.golang.org/grpc@v1.62.1	1.79.3	1
skylenet/ethereum-testnet-homepage :latest	8698903e379f	google.golang.org/grpc@v1.39.0	1.79.3	1
softonic/homing-pigeon :0.9.6	f26d467b7b82	google.golang.org/grpc@v1.73.0	1.79.3	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	google.golang.org/grpc@v1.43.0	1.79.3	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	google.golang.org/grpc@v1.23.1	1.79.3	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	google.golang.org/grpc@v1.24.0	1.79.3	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	google.golang.org/grpc@v1.29.1	1.79.3	1
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	google.golang.org/grpc@v1.46.2	1.79.3	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	google.golang.org/grpc@v1.46.2	1.79.3	1