StackRadar

CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,637
of 17,792 indexed, latest versions
Container images
1,988
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,637 of 17,792 indexed charts deploy, on 1,988 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more1.79.31,988
OSV records
GHSA-p77j-4mvh-x3m3
Also known as
GO-2026-4762

Charts affected

1,637 by stars
ChartLatestAffected imagesRadar Score
podinfoflagger6.1.41 of 1See more

podinfo flagger 6.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
google.golang.org/grpc@v1.43.0
1.79.3

Open the chart page →

2,815
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
google.golang.org/grpc@v1.55.0
1.79.3

Open the chart page →

6,175
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
google.golang.org/grpc@v1.71.1
1.79.3

Open the chart page →

5,382
mission-controlflanksourceVerified publisher0.1.3381 of 8See more

mission-control flanksource 0.1.338

1 of the 8 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
google.golang.org/grpc@v1.74.2
1.79.3

Open the chart page →

8,956
mission-control-tenantflanksourceVerified publisher1.0.923 of 3See more

mission-control-tenant flanksource 1.0.92

3 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
google.golang.org/grpc@v1.40.0
1.79.3
rancher/k3s:v1.28.2-k3s18c2599ecfca8
google.golang.org/grpc@v1.57.0
1.79.3
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
google.golang.org/grpc@v1.55.0
1.79.3

Open the chart page →

5,709
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
google.golang.org/grpc@v1.72.2
1.79.3

Open the chart page →

3,483
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
google.golang.org/grpc@v1.72.1
1.79.3

Open the chart page →

2,424
flyte-devboxflyte0.1.07 of 13See more

flyte-devbox flyte 0.1.0

7 of the 13 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.79.3
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.79.3

Open the chart page →

4,671
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
google.golang.org/grpc@v1.51.0
1.79.3

Open the chart page →

4,658
free5gc-chffree5gc-chfVerified publisher0.1.31 of 1See more

free5gc-chf free5gc-chf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
free5gc/chf:v3.4.3e2a4dd98a4ed
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

1,004
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

1,256
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
google.golang.org/grpc@v1.68.0
1.79.3

Open the chart page →

1,237
smarter-device-managergabe565Verified publisher0.5.21 of 1See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/grpc@v1.49.0
1.79.3

Open the chart page →

1,226
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
google.golang.org/grpc@v1.71.0
1.79.3

Open the chart page →

801
galoygaloymoney0.34.73 of 24See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.79.3
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.79.3
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.79.3

Open the chart page →

8,700
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.79.3
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.79.3
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.79.3

Open the chart page →

11,982
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

2,161
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.79.3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.79.3

Open the chart page →

5,316
galoygaloymoney20.34.73 of 24See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.79.3
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.79.3
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.79.3

Open the chart page →

8,700
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.79.3
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.79.3
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.79.3

Open the chart page →

11,982
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

2,161
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.79.3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.79.3

Open the chart page →

5,316
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
google.golang.org/grpc@v1.72.2
1.79.3

Open the chart page →

376
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
google.golang.org/grpc@v1.38.0
1.79.3

Open the chart page →

3,243
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
google.golang.org/grpc@v1.27.1
1.79.3

Open the chart page →

7,477
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
google.golang.org/grpc@v1.56.3
1.79.3

Open the chart page →

1,369
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.79.3

Open the chart page →

4,558
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
google.golang.org/grpc@v1.39.0
1.79.3
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
google.golang.org/grpc@v1.39.0
1.79.3

Open the chart page →

16,870
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
litestream/litestream:0.3c5a1e1b01916
google.golang.org/grpc@v1.57.0
1.79.3

Open the chart page →

9,097
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
google.golang.org/grpc@v1.46.0
1.79.3

Open the chart page →

1,332
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
google.golang.org/grpc@v1.54.0
1.79.3

Open the chart page →

2,616
glassflow-etlglassflowVerified publisher0.5.213 of 16See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
google.golang.org/grpc@v1.65.0
1.79.3
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
google.golang.org/grpc@v1.75.0
1.79.3
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
google.golang.org/grpc@v1.74.2
1.79.3

Open the chart page →

12,125
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
google.golang.org/grpc@v1.75.0
1.79.3

Open the chart page →

770
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
google.golang.org/grpc@v1.73.0
1.79.3

Open the chart page →

2,648
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
google.golang.org/grpc@v1.74.2
1.79.3
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
google.golang.org/grpc@v1.78.0
1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
google.golang.org/grpc@v1.68.1
1.79.3

Open the chart page →

7,689
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
google.golang.org/grpc@v1.65.0
1.79.3

Open the chart page →

2,222
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
google.golang.org/grpc@v1.50.1
1.79.3
zhenghaoz/gorse-server:0.4.1239c565685b01
google.golang.org/grpc@v1.50.1
1.79.3
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
google.golang.org/grpc@v1.50.1
1.79.3

Open the chart page →

4,401
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
google.golang.org/grpc@v1.40.0
1.79.3

Open the chart page →

22,665
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
google.golang.org/grpc@v1.40.0
1.79.3

Open the chart page →

24,462
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
google.golang.org/grpc@v1.69.4
1.79.3
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
google.golang.org/grpc@v1.69.4
1.79.3
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
google.golang.org/grpc@v1.69.4
1.79.3
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
google.golang.org/grpc@v1.78.0
1.79.3

Open the chart page →

3,406
jaegergpg-dev3.3.33 of 5See more

jaeger gpg-dev 3.3.3

3 of the 5 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/grpc@v1.60.0
1.79.3
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/grpc@v1.60.0
1.79.3
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/grpc@v1.60.0
1.79.3

Open the chart page →

19,351
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.79.3

Open the chart page →

4,302
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
google.golang.org/grpc@v1.59.0
1.79.3

Open the chart page →

1,078
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
google.golang.org/grpc@v1.66.0
1.79.3
jaegertracing/all-in-one:1.53.060e65bfffe1f
google.golang.org/grpc@v1.60.0
1.79.3
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
google.golang.org/grpc@v1.67.1
1.79.3
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
google.golang.org/grpc@v1.65.0
1.79.3
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
google.golang.org/grpc@v1.64.0
1.79.3
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
google.golang.org/grpc@v1.64.0
1.79.3
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
google.golang.org/grpc@v1.60.1
1.79.3
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
google.golang.org/grpc@v1.67.1
1.79.3

Open the chart page →

49,501
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.79.3

Open the chart page →

3,281
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
google.golang.org/grpc@v1.77.0
1.79.3

Open the chart page →

1,569
grafana-cloud-onboardinggrafana0.4.72 of 5See more

grafana-cloud-onboarding grafana 0.4.7

2 of the 5 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
google.golang.org/grpc@v1.77.0
1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.79.3

Open the chart page →

4,681
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
google.golang.org/grpc@v1.75.0
1.79.3

Open the chart page →

3,381
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
google.golang.org/grpc@v1.41.1
1.79.3
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
google.golang.org/grpc@v1.26.0
1.79.3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
google.golang.org/grpc@v1.26.0
1.79.3

Open the chart page →

17,780
pyroscope-monitoringgrafana0.1.13 of 6See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2026-33186.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
google.golang.org/grpc@v1.75.0
1.79.3
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
google.golang.org/grpc@v1.73.0
1.79.3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
google.golang.org/grpc@v1.68.1
1.79.3

Open the chart page →

8,281

Container images carrying it

1,988 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
google.golang.org/grpc@v1.52.3
1.79.3
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
google.golang.org/grpc@v1.65.0
1.79.3
1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
google.golang.org/grpc@v1.59.0
1.79.3
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
google.golang.org/grpc@v1.44.0
1.79.3
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
google.golang.org/grpc@v1.56.3
1.79.3
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
google.golang.org/grpc@v1.56.3
1.79.3
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
google.golang.org/grpc@v1.74.2
1.79.3
1
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
google.golang.org/grpc@v1.47.0
1.79.3
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.79.3
1
public.ecr.aws/neuron/neuron-device-plugin:2.23.30.075a6d5ce3bd3
google.golang.org/grpc@v1.60.1
1.79.3
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
google.golang.org/grpc@v1.65.0
1.79.3
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
google.golang.org/grpc@v1.62.1
1.79.3
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
google.golang.org/grpc@v1.58.3
1.79.3
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
google.golang.org/grpc@v1.44.0
1.79.3
1
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent:v1.5.1-eksbuild.1988c8e1a273a
google.golang.org/grpc@v1.77.0
1.79.3
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
google.golang.org/grpc@v1.69.2
1.79.3
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
google.golang.org/grpc@v1.60.1
1.79.3
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
google.golang.org/grpc@v1.45.0
1.79.3
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
google.golang.org/grpc@v1.71.0
1.79.3
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
google.golang.org/grpc@v1.68.1
1.79.3
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
google.golang.org/grpc@v1.58.3
1.79.3
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
google.golang.org/grpc@v1.72.2
1.79.3
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
google.golang.org/grpc@v1.72.2
1.79.3
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.79.3
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
google.golang.org/grpc@v1.78.0
1.79.3
1
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
google.golang.org/grpc@v1.71.0
1.79.3
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
google.golang.org/grpc@v1.72.2
1.79.3
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.79.3
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
google.golang.org/grpc@v1.72.2
1.79.3
1
quay.io/backube/volsync:0.16.00d03a6aad575
google.golang.org/grpc@v1.74.2
1.79.3
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
google.golang.org/grpc@v1.45.0
1.79.3
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
google.golang.org/grpc@v1.47.0
1.79.3
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
google.golang.org/grpc@v1.58.3
1.79.3
1
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
google.golang.org/grpc@v1.64.0
1.79.3
1
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
google.golang.org/grpc@v1.72.1
1.79.3
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
google.golang.org/grpc@v1.42.0
1.79.3
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
google.golang.org/grpc@v1.72.2
1.79.3
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.79.3
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
google.golang.org/grpc@v1.74.2
1.79.3
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
google.golang.org/grpc@v1.79.2
1.79.3
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
google.golang.org/grpc@v1.79.2
1.79.3
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
google.golang.org/grpc@v1.75.0
1.79.3
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
google.golang.org/grpc@v1.74.2
1.79.3
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
google.golang.org/grpc@v1.74.2
1.79.3
1
quay.io/cilium/operator-generic:v1.17.14773886ec9337
google.golang.org/grpc@v1.72.1
1.79.3
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.79.3
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
google.golang.org/grpc@v1.74.2
1.79.3
1
quay.io/cilium/tetragon:v1.1.096fac2482898
google.golang.org/grpc@v1.63.2
1.79.3
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/grpc@v1.48.0
1.79.3
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
google.golang.org/grpc@v1.29.0
1.79.3
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.