CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,641; of 17,790 indexed, latest versions
Container images: 1,992; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,992

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,641 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.31

5 of 18 See more

catalyst-agents catalyst-agents 0.1.31

5 of the 18 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	google.golang.org/grpc@v1.70.0	1.79.3
grafana/loki :3.0.0	757b5fadf816	google.golang.org/grpc@v1.62.1	1.79.3
grafana/loki-canary :3.0.0	28d7c00588aa	google.golang.org/grpc@v1.62.1	1.79.3
grafana/tempo :2.5.0	f0200a9bff6d	google.golang.org/grpc@v1.63.2	1.79.3
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

17,099

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

1 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,783

clechaosnative

0.2.7

2 of 6 See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	google.golang.org/grpc@v1.32.0	1.79.3
chaosnative/cle-server :2.7.0	e7bcff4a20c0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	google.golang.org/grpc@v1.75.0	1.79.3

Open the chart page →

7,501

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,828

kubevirt-cloud-controller-managerchristianhuth

0.0.2

1 of 1 See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

kubevirt-managerchristianhuth

0.7.0

1 of 1 See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.5.4	1b98f1b5977a	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,993

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

7,034

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	google.golang.org/grpc@v1.22.1	1.79.3

Open the chart page →

3,602

clairclair-helm

0.12.0

1 of 3 See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/projectquay/clair :4.9.0	23329c3368e4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

1,625

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	google.golang.org/grpc@v1.61.1	1.79.3
calico/kube-controllers :v3.28.1	eadb3a25109a	google.golang.org/grpc@v1.61.1	1.79.3
calico/node :v3.28.1	d8c644a8a3ee	google.golang.org/grpc@v1.61.1	1.79.3

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

9 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.79.3
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.79.3
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

12,082

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

21,034

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	google.golang.org/grpc@v1.29.0	1.79.3

Open the chart page →

6,930

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

18,374

cloud-provider-kubevirtcloud-provider-kubevirt

0.2.0

1 of 1 See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	google.golang.org/grpc@v1.33.1	1.79.3

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

5,603

galaxy-cvmfs-csicloudve

2.5.1

2 of 3 See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	google.golang.org/grpc@v1.60.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

1,515

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	google.golang.org/grpc@v1.45.0	1.79.3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

3 of 7 See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	google.golang.org/grpc@v1.43.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

16,134

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

2,068

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

6,204

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,042

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

723

monitoringcluster-deploy

0.3.0

5 of 11 See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	google.golang.org/grpc@v1.78.0	1.79.3
grafana/loki :3.6.7	3c8fd3570dd9	google.golang.org/grpc@v1.75.1	1.79.3
grafana/loki-canary :3.6.7	0dac7d5cb383	google.golang.org/grpc@v1.75.1	1.79.3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

8,219

cluster-monitor-agentcluster-monitor-agent

0.10.2

1 of 1 See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

475

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,403

storage-piraeuscnap

1.0.1

1 of 1 See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.10.5	dd68a66332de	google.golang.org/grpc@v1.79.2	1.79.3

Open the chart page →

334

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/devangradadiya/k8s-s3-bucket-operator :0.2.2	58288de9f9fa	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	google.golang.org/grpc@v1.49.0	1.79.3	1
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	google.golang.org/grpc@v1.56.1	1.79.3	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	google.golang.org/grpc@v1.68.0	1.79.3	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	google.golang.org/grpc@v1.46.0	1.79.3	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	google.golang.org/grpc@v1.45.0	1.79.3	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	google.golang.org/grpc@v1.69.0	1.79.3	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	google.golang.org/grpc@v1.36.0	1.79.3	1
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	google.golang.org/grpc@v1.67.3	1.79.3	1
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/erpc/erpc :0.0.49	f5654f745d4c	google.golang.org/grpc@v1.67.1	1.79.3	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/evilgn0me/ingressmonitorcontroller :v0.0.5	0bbfa4db14b9	google.golang.org/grpc@v1.67.1	1.79.3	1
ghcr.io/exalsius/exalsius-operator :0.12.0	d24a579a3c75	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	google.golang.org/grpc@v1.27.0	1.79.3	1
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3	1
ghcr.io/ferretdb/ferretdb :2.7.0	5706414241eb	google.golang.org/grpc@v1.75.0	1.79.3	1
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	google.golang.org/grpc@v1.67.1	1.79.3	1
ghcr.io/fluxcd/helm-controller :v1.2.0	62eaa9c9a929	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/fluxcd/source-controller :v1.5.0	00cd9316a379	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	google.golang.org/grpc@v1.51.0	1.79.3	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3	1
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	google.golang.org/grpc@v1.70.0	1.79.3	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	google.golang.org/grpc@v1.68.0	1.79.3	1
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	google.golang.org/grpc@v1.71.0	1.79.3	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	google.golang.org/grpc@v1.56.3	1.79.3	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	google.golang.org/grpc@v1.70.0	1.79.3	1
ghcr.io/glassflow/glassflow-etl-migration :v3.2.0	7db1a1bf3dae	google.golang.org/grpc@v1.74.2	1.79.3	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/gochain/rpc-proxy/rpc-proxy :latest	ca01f5ab95f7	google.golang.org/grpc@v1.69.2	1.79.3	1
ghcr.io/gomenhashai/gomenhashai :v1.3.3	6f031172a5ec	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/grafana/alloy-operator :1.7.0	2ce23f948e02	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	google.golang.org/grpc@v1.55.0	1.79.3	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	google.golang.org/grpc@v1.47.0	1.79.3	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	google.golang.org/grpc@v1.36.0	1.79.3	1