CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,641; of 17,790 indexed, latest versions
Container images: 1,992; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,641 of 17,790 indexed charts deploy, on 1,992 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,992

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,641 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.31

5 of 18 See more

catalyst-agents catalyst-agents 0.1.31

5 of the 18 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	google.golang.org/grpc@v1.70.0	1.79.3
grafana/loki :3.0.0	757b5fadf816	google.golang.org/grpc@v1.62.1	1.79.3
grafana/loki-canary :3.0.0	28d7c00588aa	google.golang.org/grpc@v1.62.1	1.79.3
grafana/tempo :2.5.0	f0200a9bff6d	google.golang.org/grpc@v1.63.2	1.79.3
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

17,099

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

1 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,783

clechaosnative

0.2.7

2 of 6 See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	google.golang.org/grpc@v1.32.0	1.79.3
chaosnative/cle-server :2.7.0	e7bcff4a20c0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	google.golang.org/grpc@v1.75.0	1.79.3

Open the chart page →

7,501

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,828

kubevirt-cloud-controller-managerchristianhuth

0.0.2

1 of 1 See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

kubevirt-managerchristianhuth

0.7.0

1 of 1 See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.5.4	1b98f1b5977a	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,993

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	google.golang.org/grpc@v1.64.1	1.79.3

Open the chart page →

7,034

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	google.golang.org/grpc@v1.55.0	1.79.3

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	google.golang.org/grpc@v1.22.1	1.79.3

Open the chart page →

3,602

clairclair-helm

0.12.0

1 of 3 See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/projectquay/clair :4.9.0	23329c3368e4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

1,625

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	google.golang.org/grpc@v1.61.1	1.79.3
calico/kube-controllers :v3.28.1	eadb3a25109a	google.golang.org/grpc@v1.61.1	1.79.3
calico/node :v3.28.1	d8c644a8a3ee	google.golang.org/grpc@v1.61.1	1.79.3

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

9 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.79.3
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.79.3
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.79.3
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	google.golang.org/grpc@v1.49.0	1.79.3
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	google.golang.org/grpc@v1.41.0	1.79.3

Open the chart page →

12,082

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

21,034

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	google.golang.org/grpc@v1.29.0	1.79.3

Open the chart page →

6,930

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	google.golang.org/grpc@v1.46.2	1.79.3
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	google.golang.org/grpc@v1.74.2	1.79.3

Open the chart page →

18,374

cloud-provider-kubevirtcloud-provider-kubevirt

0.2.0

1 of 1 See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager :v0.6.0	37ad4c475941	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

663

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	google.golang.org/grpc@v1.33.1	1.79.3

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

5,603

galaxy-cvmfs-csicloudve

2.5.1

2 of 3 See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	google.golang.org/grpc@v1.60.1	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	google.golang.org/grpc@v1.60.0	1.79.3

Open the chart page →

1,515

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	google.golang.org/grpc@v1.45.0	1.79.3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	google.golang.org/grpc@v1.69.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

3 of 7 See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	google.golang.org/grpc@v1.43.0	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.79.3

Open the chart page →

16,134

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	google.golang.org/grpc@v1.40.0	1.79.3

Open the chart page →

2,068

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

6,204

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

1,042

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	google.golang.org/grpc@v1.76.0	1.79.3

Open the chart page →

723

monitoringcluster-deploy

0.3.0

5 of 11 See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	google.golang.org/grpc@v1.78.0	1.79.3
grafana/loki :3.6.7	3c8fd3570dd9	google.golang.org/grpc@v1.75.1	1.79.3
grafana/loki-canary :3.6.7	0dac7d5cb383	google.golang.org/grpc@v1.75.1	1.79.3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	google.golang.org/grpc@v1.75.1	1.79.3

Open the chart page →

8,219

cluster-monitor-agentcluster-monitor-agent

0.10.2

1 of 1 See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

475

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,403

storage-piraeuscnap

1.0.1

1 of 1 See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.10.5	dd68a66332de	google.golang.org/grpc@v1.79.2	1.79.3

Open the chart page →

334

Container images carrying it

1,992 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubedb/kubedb-schema-manager :v0.16.0	9518de37eed5	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/kubedb/kubedb-webhook-server :v0.16.2	e24894e32cbc	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/kubedb/provider-aws :v0.27.0	49b1c312e342	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/kubedb/provider-azure :v0.27.0	aa0c8526ae5e	google.golang.org/grpc@v1.47.0	1.79.3	1
ghcr.io/kubedb/provider-gcp :v0.27.0	a1d4cf8b8fe1	google.golang.org/grpc@v1.47.0	1.79.3	1
ghcr.io/kubeform/provider-aws :v0.0.1	e3d1f1302e49	google.golang.org/grpc@v1.47.0	1.79.3	1
ghcr.io/kubeform/provider-azure :v0.0.1	ac8459f70f85	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/kubeform/provider-gcp :v0.0.1	af77073c184f	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/kuberecord/kuberecord :v0.4.0	2a19792ad2ec	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	google.golang.org/grpc@v1.51.0	1.79.3	1
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	google.golang.org/grpc@v1.72.0	1.79.3	1
ghcr.io/kubevault/vault-operator :v0.24.0	0087cb49616f	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	google.golang.org/grpc@v1.72.1	1.79.3	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	google.golang.org/grpc@v1.25.1	1.79.3	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	google.golang.org/grpc@v1.33.2	1.79.3	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	google.golang.org/grpc@v1.46.0	1.79.3	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	google.golang.org/grpc@v1.46.0	1.79.3	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/kyverno/policy-reporter :2.14.1	e74c6bf33d1b	google.golang.org/grpc@v1.54.0	1.79.3	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	google.golang.org/grpc@v1.63.2	1.79.3	1
ghcr.io/loafoe/go-hello-world :v2.13.0	d3fb171f20e1	google.golang.org/grpc@v1.75.0	1.79.3	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	google.golang.org/grpc@v1.56.2	1.79.3	1
ghcr.io/lockdep/stackradar-scanner :0.3.0	dd8a35d50c2d	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	google.golang.org/grpc@v1.49.0	1.79.3	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	google.golang.org/grpc@v1.55.0	1.79.3	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	google.golang.org/grpc@v1.67.1	1.79.3	1
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	google.golang.org/grpc@v1.56.3	1.79.3	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	google.golang.org/grpc@v1.29.1	1.79.3	1
ghcr.io/lukaszraczylo/jobs-manager-operator :0.1.15	e6239e2838d7	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator :0.5.57	a424948c8143	google.golang.org/grpc@v1.77.0	1.79.3	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	google.golang.org/grpc@v1.59.0	1.79.3	1