Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	google.golang.org/grpc@v1.26.0	1.79.3
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

4,999

cadencewenerme

0.23.0

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

10,147

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

10,879

harborwenerme

1.19.2

2 of 8 See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.79.3
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.79.3

Open the chart page →

1,686

juicefs-csi-driverwenerme

0.33.0

3 of 5 See more

juicefs-csi-driver wenerme 0.33.0

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	google.golang.org/grpc@v1.58.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	google.golang.org/grpc@v1.60.1	1.79.3

Open the chart page →

8,944

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

15,310

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

6,922

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

6,145

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	google.golang.org/grpc@v1.47.0	1.79.3
openebs/provisioner-localpv :3.5.0	aea39e49bb97	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

10,602

temporalwenerme

0.15.1

4 of 13 See more

temporal wenerme 0.15.1

4 of the 13 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	google.golang.org/grpc@v1.23.1	1.79.3
prom/prometheus :v2.16.0	e4ca62c0d62f	google.golang.org/grpc@v1.22.1	1.79.3
temporalio/admin-tools :1.15.1	35034611d981	google.golang.org/grpc@v1.44.0	1.79.3
temporalio/server :1.15.1	e26758f5a1bf	google.golang.org/grpc@v1.44.0	1.79.3

Open the chart page →

22,707

traefikwenerme

9.1.1

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

3,378

wexa-studiowexa-studio

1.2.0

5 of 15 See more

wexa-studio wexa-studio 1.2.0

5 of the 15 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.15.4	0b01ed3924e6	google.golang.org/grpc@v1.58.3	1.79.3
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	google.golang.org/grpc@v1.60.1	1.79.3
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	google.golang.org/grpc@v1.56.3	1.79.3
temporalio/server :1.29.1	c1e3326b2ce1	google.golang.org/grpc@v1.72.2	1.79.3
temporalio/ui :2.44.0	0b36e00aad30	google.golang.org/grpc@v1.66.1	1.79.3

Open the chart page →

15,056

ceph-csi-cephfswikimedia

0.1.8

5 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

5 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner :v3.2.1	4ad5fcdbe7e9	google.golang.org/grpc@v1.45.0	1.79.3
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	google.golang.org/grpc@v1.48.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	google.golang.org/grpc@v1.40.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	google.golang.org/grpc@v1.40.0	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

10,321

ceph-csi-rbdwikimedia

0.1.13

6 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

6 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner :v3.2.1	4ad5fcdbe7e9	google.golang.org/grpc@v1.45.0	1.79.3
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	google.golang.org/grpc@v1.48.0	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	google.golang.org/grpc@v1.40.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	google.golang.org/grpc@v1.40.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	google.golang.org/grpc@v1.40.0	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

11,827

jaegerwikimedia

3.1.2

3 of 4 See more

jaeger wikimedia 3.1.2

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	google.golang.org/grpc@v1.60.0	1.79.3
jaegertracing/jaeger-collector :1.53.0	7f1269222903	google.golang.org/grpc@v1.60.0	1.79.3
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

9,340

opentelemetry-collectorwikimedia

0.62.7

1 of 1 See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	google.golang.org/grpc@v1.56.1	1.79.3

Open the chart page →

2,032

wireguardwireguard-bananas

1.5.0

1 of 1 See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	google.golang.org/grpc@v1.30.0	1.79.3

Open the chart page →

2,752

csi-driver-host-pathwiremind

0.1.1

8 of 8 See more

csi-driver-host-path wiremind 0.1.1

8 of the 8 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	google.golang.org/grpc@v1.47.0	1.79.3
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	google.golang.org/grpc@v1.48.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	google.golang.org/grpc@v1.50.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	google.golang.org/grpc@v1.49.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	google.golang.org/grpc@v1.47.0	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	google.golang.org/grpc@v1.47.0	1.79.3
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	google.golang.org/grpc@v1.34.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	google.golang.org/grpc@v1.48.0	1.79.3

Open the chart page →

12,663

registrywiremind

0.1.1

1 of 1 See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	google.golang.org/grpc@v1.68.0	1.79.3

Open the chart page →

1,195

kafka-connect-uiwitcom-gmbh

0.5.0

1 of 2 See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

2,512

mrtg-backendwitcom-gmbh

0.7.0

1 of 2 See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.2.1	febeebebe762	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

2,623

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

13,813

xonodepoolsxonodepools

1.0.7

1 of 1 See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
xosphere/xonodepools :1.0.7	1458097b6f85	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

394

ygdrassil-monitoringygdrassil

0.4.0

2 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

2 of the 10 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	google.golang.org/grpc@v1.69.2	1.79.3
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

9,401

matrixdb-operatorymatrix

0.13.0

1 of 2 See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

1,965

rawfile-csiymatrix

0.2.1

4 of 4 See more

rawfile-csi ymatrix 0.2.1

4 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	google.golang.org/grpc@v1.40.0	1.79.3
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	google.golang.org/grpc@v1.45.0	1.79.3
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	google.golang.org/grpc@v1.36.0	1.79.3
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	google.golang.org/grpc@v1.36.0	1.79.3

Open the chart page →

8,000

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	google.golang.org/grpc@v1.49.0	1.79.3
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

5,047

Container images carrying it

1,981 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/instemmingservice-php :latest	4ffe222b3e3a	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/cosanet/cosanet :1.0.0	98cb5d9fa215	google.golang.org/grpc@v1.75.0	1.79.3	1
ghcr.io/crashappsec/chalk-operator :v0.1.1	28eee62e9bfa	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	google.golang.org/grpc@v1.29.1	1.79.3	1
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/devangradadiya/k8s-s3-bucket-operator :0.2.2	58288de9f9fa	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	google.golang.org/grpc@v1.49.0	1.79.3	1
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	google.golang.org/grpc@v1.56.1	1.79.3	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	google.golang.org/grpc@v1.68.0	1.79.3	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	google.golang.org/grpc@v1.46.0	1.79.3	1