CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,630; of 17,803 indexed, latest versions
Container images: 1,981; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,630 of 17,803 indexed charts deploy, on 1,981 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+106 more	1.79.3	1,981

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,630 by stars

Chart

Latest

Affected images

Radar Score

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	google.golang.org/grpc@v1.26.0	1.79.3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3

Open the chart page →

12,446

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	google.golang.org/grpc@v1.10.0	1.79.3

Open the chart page →

2,831

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	google.golang.org/grpc@v1.71.0	1.79.3

Open the chart page →

1,084

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/grpc@v1.22.0	1.79.3

Open the chart page →

26,079

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,791

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/grpc@v1.68.0	1.79.3

Open the chart page →

4,458

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	google.golang.org/grpc@v1.53.0	1.79.3

Open the chart page →

4,778

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	google.golang.org/grpc@v1.67.1	1.79.3
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	google.golang.org/grpc@v1.65.0	1.79.3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

20,435

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

3,477

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

6,969

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,320

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	google.golang.org/grpc@v1.66.0	1.79.3

Open the chart page →

1,249

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	google.golang.org/grpc@v1.23.0	1.79.3

Open the chart page →

16,561

metadockvalitetsit

0.0.7

1 of 2 See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-web :main	f57e7553f5bd	google.golang.org/grpc@v1.37.0	1.79.3

Open the chart page →

4,033

openidkvalitetsit

1.7.2

1 of 2 See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

592

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,544

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

26,400

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

2,125

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,337

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	google.golang.org/grpc@v1.62.1	1.79.3

Open the chart page →

1,385

pinglbenicio-community

0.1.1

1 of 1 See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

600

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

33,613

prometheuslectures-k8sinfra

15.8.5

1 of 6 See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	google.golang.org/grpc@v1.47.0	1.79.3

Open the chart page →

9,100

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

3,198

prometheusleechistest

11.6.0

1 of 6 See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

8,492

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

4,280

kltlifecycle-toolkit

0.2.6

3 of 4 See more

klt lifecycle-toolkit 0.2.6

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	google.golang.org/grpc@v1.57.0	1.79.3
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	google.golang.org/grpc@v1.52.3	1.79.3
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

4,680

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	google.golang.org/grpc@v1.61.0	1.79.3

Open the chart page →

1,127

linkerd-preview-vizlinkerd-buoyant

25.4.3

4 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	google.golang.org/grpc@v1.71.1	1.79.3
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	google.golang.org/grpc@v1.66.0	1.79.3
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	google.golang.org/grpc@v1.71.1	1.79.3
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	google.golang.org/grpc@v1.71.1	1.79.3

Open the chart page →

3,454

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	google.golang.org/grpc@v1.71.0	1.79.3

Open the chart page →

1,050

linode-blockstorage-csi-driverlinode-blockstorage-csi-driver

1.1.4

4 of 5 See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	google.golang.org/grpc@v1.72.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	google.golang.org/grpc@v1.79.1	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

2,967

liqo-upgrade-operatorliqo-upgrade-operator

0.1.0

1 of 1 See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kazem26/liqo-upgrade-operator :v0.1	268b7c6a59dd	google.golang.org/grpc@v1.72.1	1.79.3

Open the chart page →

375

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	google.golang.org/grpc@v1.60.1	1.79.3

Open the chart page →

10,814

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

2,136

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,560

llmarinerllmariner

1.53.1

12 of 21 See more

llmariner llmariner 1.53.1

12 of the 21 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	google.golang.org/grpc@v1.68.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

12,158

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	google.golang.org/grpc@v1.71.1	1.79.3

Open the chart page →

2,540

otlp-gatewayloafoe

0.0.2

1 of 2 See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	google.golang.org/grpc@v1.63.2	1.79.3

Open the chart page →

2,162

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

4,911

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	google.golang.org/grpc@v1.56.2	1.79.3

Open the chart page →

2,108

tempo-distributedloafoe

1.20.1

1 of 2 See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/tempo :2.6.0	f55a8a1937ff	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

2,027

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,519

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	google.golang.org/grpc@v1.62.1	1.79.3

Open the chart page →

7,544

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

33,613

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	google.golang.org/grpc@v1.64.0	1.79.3

Open the chart page →

924

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	google.golang.org/grpc@v1.50.1	1.79.3

Open the chart page →

3,234

devspace-cloudloft

0.3.3

1 of 8 See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

9,890

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

3,094

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

2,453

Container images carrying it

1,981 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	google.golang.org/grpc@v1.31.0	1.79.3	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	google.golang.org/grpc@v1.63.2	1.79.3	1
ghcr.io/sigstore/policy-controller/policy-controller	0bcd60beb93f	google.golang.org/grpc@v1.71.1	1.79.3	1
ghcr.io/sigstore/scaffolding/server	ae8eb69c7b70	google.golang.org/grpc@v1.76.0	1.79.3	1
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	google.golang.org/grpc@v1.67.1	1.79.3	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	google.golang.org/grpc@v1.64.1	1.79.3	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	google.golang.org/grpc@v1.69.2	1.79.3	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	google.golang.org/grpc@v1.50.1	1.79.3	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	google.golang.org/grpc@v1.43.0	1.79.3	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	google.golang.org/grpc@v1.61.0	1.79.3	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	google.golang.org/grpc@v1.48.0	1.79.3	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	google.golang.org/grpc@v1.48.0	1.79.3	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	google.golang.org/grpc@v1.48.0	1.79.3	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	google.golang.org/grpc@v1.48.0	1.79.3	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	google.golang.org/grpc@v1.72.0	1.79.3	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/strrl/supabase-operator :2026.7.25	87d083ab8980	google.golang.org/grpc@v1.75.0	1.79.3	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	google.golang.org/grpc@v1.75.1	1.79.3	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	google.golang.org/grpc@v1.31.0	1.79.3	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	google.golang.org/grpc@v1.31.0	1.79.3	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	google.golang.org/grpc@v1.62.1	1.79.3	1
ghcr.io/supabase-community/supabase-operator :v0.1.3	253a6dcbf4f0	google.golang.org/grpc@v1.72.2	1.79.3	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/synapsecns/sanguine/cctp-relayer :b5a1dd5288f1a18eb05994e130d626fed45a56fc	2f1408c94168	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	google.golang.org/grpc@v1.55.0	1.79.3	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	google.golang.org/grpc@v1.53.0	1.79.3	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	google.golang.org/grpc@v1.59.0	1.79.3	1
ghcr.io/syself/hetzner-cloud-controller-manager :v2.0.7	7d4a5e29c387	google.golang.org/grpc@v1.68.1	1.79.3	1
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	google.golang.org/grpc@v1.73.0	1.79.3	1
ghcr.io/terminus-io/enforcer :v1.1.0	f21b905610d6	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	google.golang.org/grpc@v1.70.0	1.79.3	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	google.golang.org/grpc@v1.78.0	1.79.3	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	google.golang.org/grpc@v1.64.0	1.79.3	1
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	google.golang.org/grpc@v1.58.3	1.79.3	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	google.golang.org/grpc@v1.65.0	1.79.3	1
ghcr.io/twigex/cospace :latest	e5ecfd607e42	google.golang.org/grpc@v1.62.0	1.79.3	1
ghcr.io/upbothq/upbot-operator :v0.0.20	e5da24947c91	google.golang.org/grpc@v1.68.1	1.79.3	1