CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,641; of 17,790 indexed, latest versions
Container images: 1,992; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,992

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,641 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.31

5 of 18 See more

catalyst-agents catalyst-agents 0.1.31

5 of the 18 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	google.golang.org/grpc@v1.70.0	1.79.3
grafana/loki :3.0.0	757b5fadf816	google.golang.org/grpc@v1.62.1	1.79.3
grafana/loki-canary :3.0.0	28d7c00588aa	google.golang.org/grpc@v1.62.1	1.79.3
grafana/tempo :2.5.0	f0200a9bff6d	google.golang.org/grpc@v1.63.2	1.79.3
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

17,099

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

1 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,783

clechaosnative

0.2.7

2 of 6 See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	google.golang.org/grpc@v1.32.0	1.79.3
chaosnative/cle-server :2.7.0	e7bcff4a20c0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	google.golang.org/grpc@v1.75.0	1.79.3

Open the chart page →

7,501

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,828

kubevirt-cloud-controller-managerchristianhuth

0.0.2

1 of 1 See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

kubevirt-managerchristianhuth

0.7.0

1 of 1 See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.5.4	1b98f1b5977a	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,993

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

7,034

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	google.golang.org/grpc@v1.22.1	1.79.3

Open the chart page →

3,602

clairclair-helm

0.12.0

1 of 3 See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/projectquay/clair :4.9.0	23329c3368e4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

1,625

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	google.golang.org/grpc@v1.61.1	1.79.3
calico/kube-controllers :v3.28.1	eadb3a25109a	google.golang.org/grpc@v1.61.1	1.79.3
calico/node :v3.28.1	d8c644a8a3ee	google.golang.org/grpc@v1.61.1	1.79.3

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

9 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.79.3
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.79.3
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

12,082

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

21,034

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	google.golang.org/grpc@v1.29.0	1.79.3

Open the chart page →

6,930

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

18,374

cloud-provider-kubevirtcloud-provider-kubevirt

0.2.0

1 of 1 See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	google.golang.org/grpc@v1.33.1	1.79.3

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

5,603

galaxy-cvmfs-csicloudve

2.5.1

2 of 3 See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	google.golang.org/grpc@v1.60.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

1,515

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	google.golang.org/grpc@v1.45.0	1.79.3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

3 of 7 See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	google.golang.org/grpc@v1.43.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

16,134

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

2,068

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

6,204

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,042

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

723

monitoringcluster-deploy

0.3.0

5 of 11 See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	google.golang.org/grpc@v1.78.0	1.79.3
grafana/loki :3.6.7	3c8fd3570dd9	google.golang.org/grpc@v1.75.1	1.79.3
grafana/loki-canary :3.6.7	0dac7d5cb383	google.golang.org/grpc@v1.75.1	1.79.3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

8,219

cluster-monitor-agentcluster-monitor-agent

0.10.2

1 of 1 See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

475

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,403

storage-piraeuscnap

1.0.1

1 of 1 See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.10.5	dd68a66332de	google.golang.org/grpc@v1.79.2	1.79.3

Open the chart page →

334

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	google.golang.org/grpc@v1.39.0	1.79.3	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	google.golang.org/grpc@v1.39.0	1.79.3	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	google.golang.org/grpc@v1.65.0	1.79.3	1
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	google.golang.org/grpc@v1.40.0	1.79.3	1
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	google.golang.org/grpc@v1.72.1	1.79.3	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	google.golang.org/grpc@v1.76.0	1.79.3	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter	d675f211a40f	google.golang.org/grpc@v1.67.1	1.79.3	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress	ec4b544499ba	google.golang.org/grpc@v1.67.1	1.79.3	1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker	395f4ff1bd34	google.golang.org/grpc@v1.67.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	google.golang.org/grpc@v1.28.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller	e70bc675f977	google.golang.org/grpc@v1.67.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	google.golang.org/grpc@v1.42.0	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook	7d76a6d42d13	google.golang.org/grpc@v1.67.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	google.golang.org/grpc@v1.42.0	1.79.3	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	15a601147ef4	google.golang.org/grpc@v1.71.1	1.79.3	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	197fbb71d1f1	google.golang.org/grpc@v1.42.0	1.79.3	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook	6c5c90cdf707	google.golang.org/grpc@v1.47.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	08315309da4b	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	google.golang.org/grpc@v1.33.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	google.golang.org/grpc@v1.28.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	105bdd14ecaa	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	google.golang.org/grpc@v1.28.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	google.golang.org/grpc@v1.33.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	google.golang.org/grpc@v1.28.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	google.golang.org/grpc@v1.33.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook	15f1ce7f35b4	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	1282a399cbb9	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	google.golang.org/grpc@v1.48.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	google.golang.org/grpc@v1.60.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	google.golang.org/grpc@v1.44.0	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	google.golang.org/grpc@v1.33.1	1.79.3	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	google.golang.org/grpc@v1.28.1	1.79.3	1