CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,641; of 17,790 indexed, latest versions
Container images: 1,992; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,992

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,641 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.31

5 of 18 See more

catalyst-agents catalyst-agents 0.1.31

5 of the 18 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	google.golang.org/grpc@v1.70.0	1.79.3
grafana/loki :3.0.0	757b5fadf816	google.golang.org/grpc@v1.62.1	1.79.3
grafana/loki-canary :3.0.0	28d7c00588aa	google.golang.org/grpc@v1.62.1	1.79.3
grafana/tempo :2.5.0	f0200a9bff6d	google.golang.org/grpc@v1.63.2	1.79.3
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

17,099

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

1 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,783

clechaosnative

0.2.7

2 of 6 See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	google.golang.org/grpc@v1.32.0	1.79.3
chaosnative/cle-server :2.7.0	e7bcff4a20c0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	google.golang.org/grpc@v1.75.0	1.79.3

Open the chart page →

7,501

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,828

kubevirt-cloud-controller-managerchristianhuth

0.0.2

1 of 1 See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

kubevirt-managerchristianhuth

0.7.0

1 of 1 See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.5.4	1b98f1b5977a	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,993

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

7,034

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	google.golang.org/grpc@v1.22.1	1.79.3

Open the chart page →

3,602

clairclair-helm

0.12.0

1 of 3 See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/projectquay/clair :4.9.0	23329c3368e4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

1,625

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	google.golang.org/grpc@v1.61.1	1.79.3
calico/kube-controllers :v3.28.1	eadb3a25109a	google.golang.org/grpc@v1.61.1	1.79.3
calico/node :v3.28.1	d8c644a8a3ee	google.golang.org/grpc@v1.61.1	1.79.3

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

9 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.79.3
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.79.3
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

12,082

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

21,034

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	google.golang.org/grpc@v1.29.0	1.79.3

Open the chart page →

6,930

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

18,374

cloud-provider-kubevirtcloud-provider-kubevirt

0.2.0

1 of 1 See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	google.golang.org/grpc@v1.33.1	1.79.3

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

5,603

galaxy-cvmfs-csicloudve

2.5.1

2 of 3 See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	google.golang.org/grpc@v1.60.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

1,515

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	google.golang.org/grpc@v1.45.0	1.79.3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

3 of 7 See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	google.golang.org/grpc@v1.43.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

16,134

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

2,068

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

6,204

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,042

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

723

monitoringcluster-deploy

0.3.0

5 of 11 See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	google.golang.org/grpc@v1.78.0	1.79.3
grafana/loki :3.6.7	3c8fd3570dd9	google.golang.org/grpc@v1.75.1	1.79.3
grafana/loki-canary :3.6.7	0dac7d5cb383	google.golang.org/grpc@v1.75.1	1.79.3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

8,219

cluster-monitor-agentcluster-monitor-agent

0.10.2

1 of 1 See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

475

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,403

storage-piraeuscnap

1.0.1

1 of 1 See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.10.5	dd68a66332de	google.golang.org/grpc@v1.79.2	1.79.3

Open the chart page →

334

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/appscode/pgoutbox :v0.0.4	a96e06ec5e9f	google.golang.org/grpc@v1.66.2	1.79.3	1
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/appscode/supervisor :v0.0.12	23affde10a92	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/aquasecurity/trivy-operator :0.16.0	a608b798fda5	google.golang.org/grpc@v1.55.0	1.79.3	1
ghcr.io/argelbargel/vault-raft-snapshot-agent :v0.12.5	345174727a2b	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/argonix-io/argonix-api :1.0.0	cb5f24732197	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	google.golang.org/grpc@v1.63.0	1.79.3	1
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	google.golang.org/grpc@v1.79.2	1.79.3	1
ghcr.io/astradns/astradns-operator :v0.2.9	09e58b62416a	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/axonops/axonops-operator :0.1.0	e0cdb993f0b1	google.golang.org/grpc@v1.79.2	1.79.3	1
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	google.golang.org/grpc@v1.57.0	1.79.3	1
ghcr.io/blind-oracle/cortex-tenant :v2.0.0	9f8896ffc15b	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	google.golang.org/grpc@v1.69.4	1.79.3	1
ghcr.io/bodgit/nri-plugin-runtime :v0.0.3	130c0b1b6fa3	google.golang.org/grpc@v1.57.1	1.79.3	1
ghcr.io/bojanzelic/cloudflare-zero-trust-operator :0.7.1	f4b2dbc19a78	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/cableship/argocd-source-tracker :0.0.6	ff7dd45aa774	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/cableship/chart-sentinel :0.1.0	a037f1042b28	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/caninehq/canine :latest	a058034ca006	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	google.golang.org/grpc@v1.68.0	1.79.3	1
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/cerbos/cerbos :0.51.0	8d35a64e4a99	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.0	091b906a0b13	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.28.0	34198e85b6e6	google.golang.org/grpc@v1.77.0	1.79.3	1
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/cloudtty/cloudshell :v0.8.9	00984ba0f0eb	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	google.golang.org/grpc@v1.54.1	1.79.3	1