CVE-2026-33186

Critical

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,636; of 17,803 indexed, latest versions
Container images: 1,989; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go has an authorization bypass via missing leading slash in :path

Carried by container images the latest versions of 1,636 of 17,803 indexed charts deploy, on 1,989 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+107 more	1.79.3	1,989

OSV records: GHSA-p77j-4mvh-x3m3
Also known as: GO-2026-4762

Charts affected

1,636 by stars

Chart

Latest

Affected images

Radar Score

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	google.golang.org/grpc@v1.27.1	1.79.3
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	google.golang.org/grpc@v1.35.0	1.79.3

Open the chart page →

86,937

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	google.golang.org/grpc@v1.23.1	1.79.3

Open the chart page →

1,595

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

2,444

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	google.golang.org/grpc@v1.26.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3

Open the chart page →

18,542

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	google.golang.org/grpc@v1.26.0	1.79.3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.79.3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.79.3

Open the chart page →

12,448

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	google.golang.org/grpc@v1.10.0	1.79.3

Open the chart page →

2,831

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	google.golang.org/grpc@v1.71.0	1.79.3

Open the chart page →

1,201

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/grpc@v1.22.0	1.79.3
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/grpc@v1.34.0	1.79.3
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/grpc@v1.22.0	1.79.3

Open the chart page →

26,080

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

4,337

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	google.golang.org/grpc@v1.26.0	1.79.3

Open the chart page →

2,792

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/grpc@v1.68.0	1.79.3

Open the chart page →

4,614

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	google.golang.org/grpc@v1.53.0	1.79.3

Open the chart page →

5,068

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	google.golang.org/grpc@v1.67.1	1.79.3
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	google.golang.org/grpc@v1.65.0	1.79.3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/grpc@v1.73.0	1.79.3

Open the chart page →

20,515

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

3,481

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	google.golang.org/grpc@v1.69.0	1.79.3

Open the chart page →

59,153

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

1,320

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	google.golang.org/grpc@v1.66.0	1.79.3

Open the chart page →

1,518

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	google.golang.org/grpc@v1.23.0	1.79.3

Open the chart page →

16,686

metadockvalitetsit

0.0.7

1 of 2 See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-web :main	f57e7553f5bd	google.golang.org/grpc@v1.37.0	1.79.3

Open the chart page →

4,033

openidkvalitetsit

1.7.2

1 of 2 See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

592

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

8,545

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

26,513

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	google.golang.org/grpc@v1.69.4	1.79.3

Open the chart page →

2,279

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	google.golang.org/grpc@v1.69.2	1.79.3

Open the chart page →

1,347

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	google.golang.org/grpc@v1.62.1	1.79.3

Open the chart page →

1,385

pinglbenicio-community

0.1.1

1 of 1 See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.79.3

Open the chart page →

600

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

33,731

prometheuslectures-k8sinfra

15.8.5

1 of 6 See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	google.golang.org/grpc@v1.47.0	1.79.3

Open the chart page →

9,111

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	google.golang.org/grpc@v1.27.1	1.79.3

Open the chart page →

3,199

prometheusleechistest

11.6.0

1 of 6 See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/grpc@v1.29.1	1.79.3

Open the chart page →

8,492

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	google.golang.org/grpc@v1.49.0	1.79.3

Open the chart page →

4,281

kltlifecycle-toolkit

0.2.6

3 of 4 See more

klt lifecycle-toolkit 0.2.6

3 of the 4 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	google.golang.org/grpc@v1.57.0	1.79.3
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	google.golang.org/grpc@v1.52.3	1.79.3
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	google.golang.org/grpc@v1.57.0	1.79.3

Open the chart page →

4,696

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	google.golang.org/grpc@v1.61.0	1.79.3

Open the chart page →

1,135

linkerd-preview-vizlinkerd-buoyant

25.4.3

4 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	google.golang.org/grpc@v1.71.1	1.79.3
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	google.golang.org/grpc@v1.66.0	1.79.3
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	google.golang.org/grpc@v1.71.1	1.79.3
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	google.golang.org/grpc@v1.71.1	1.79.3

Open the chart page →

3,464

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	google.golang.org/grpc@v1.71.0	1.79.3

Open the chart page →

1,060

linode-blockstorage-csi-driverlinode-blockstorage-csi-driver

1.1.4

4 of 5 See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	google.golang.org/grpc@v1.72.2	1.79.3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	google.golang.org/grpc@v1.78.0	1.79.3
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	google.golang.org/grpc@v1.79.1	1.79.3
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	google.golang.org/grpc@v1.78.0	1.79.3

Open the chart page →

2,998

liqo-upgrade-operatorliqo-upgrade-operator

0.1.0

1 of 1 See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
kazem26/liqo-upgrade-operator :v0.1	268b7c6a59dd	google.golang.org/grpc@v1.72.1	1.79.3

Open the chart page →

382

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	google.golang.org/grpc@v1.60.1	1.79.3

Open the chart page →

10,821

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	google.golang.org/grpc@v1.42.0	1.79.3

Open the chart page →

2,136

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

1,560

llmarinerllmariner

1.53.1

12 of 21 See more

llmariner llmariner 1.53.1

12 of the 21 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	google.golang.org/grpc@v1.68.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	google.golang.org/grpc@v1.73.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	google.golang.org/grpc@v1.67.0	1.79.3
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	google.golang.org/grpc@v1.67.1	1.79.3
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	google.golang.org/grpc@v1.67.0	1.79.3

Open the chart page →

12,177

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	google.golang.org/grpc@v1.71.1	1.79.3

Open the chart page →

2,563

otlp-gatewayloafoe

0.0.2

1 of 2 See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	google.golang.org/grpc@v1.63.2	1.79.3

Open the chart page →

2,170

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

4,912

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	google.golang.org/grpc@v1.56.2	1.79.3

Open the chart page →

2,116

tempo-distributedloafoe

1.20.1

1 of 2 See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
grafana/tempo :2.6.0	f55a8a1937ff	google.golang.org/grpc@v1.65.0	1.79.3

Open the chart page →

2,037

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	google.golang.org/grpc@v1.27.0	1.79.3

Open the chart page →

7,520

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	google.golang.org/grpc@v1.62.1	1.79.3

Open the chart page →

7,570

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	google.golang.org/grpc@v1.72.2	1.79.3

Open the chart page →

33,731

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-33186.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	google.golang.org/grpc@v1.64.0	1.79.3

Open the chart page →

931

Container images carrying it

1,989 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	google.golang.org/grpc@v1.56.3	1.79.3	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	google.golang.org/grpc@v1.47.0	1.79.3	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	google.golang.org/grpc@v1.59.0	1.79.3	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	google.golang.org/grpc@v1.59.0	1.79.3	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	google.golang.org/grpc@v1.63.2	1.79.3	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	google.golang.org/grpc@v1.64.1	1.79.3	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	google.golang.org/grpc@v1.77.0	1.79.3	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	google.golang.org/grpc@v1.53.0	1.79.3	1
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	google.golang.org/grpc@v1.51.0	1.79.3	1
registry.k8s.io/sig-storage/csi-attacher :v4.5.1	9dcd469f02bb	google.golang.org/grpc@v1.60.1	1.79.3	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	google.golang.org/grpc@v1.72.1	1.79.3	1
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	google.golang.org/grpc@v1.40.0	1.79.3	1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	google.golang.org/grpc@v1.48.0	1.79.3	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.1	2cddcc716c19	google.golang.org/grpc@v1.59.0	1.79.3	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	google.golang.org/grpc@v1.51.0	1.79.3	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	google.golang.org/grpc@v1.50.1	1.79.3	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	google.golang.org/grpc@v1.58.0	1.79.3	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	google.golang.org/grpc@v1.27.0	1.79.3	1
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	google.golang.org/grpc@v1.64.0	1.79.3	1
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	google.golang.org/grpc@v1.51.0	1.79.3	1
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	google.golang.org/grpc@v1.49.0	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.13.1	2a0b297cc7c4	google.golang.org/grpc@v1.69.2	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	google.golang.org/grpc@v1.51.0	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	google.golang.org/grpc@v1.47.0	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	google.golang.org/grpc@v1.72.1	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.10.1	4ecda2818f6d	google.golang.org/grpc@v1.60.1	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	google.golang.org/grpc@v1.38.0	1.79.3	1
registry.k8s.io/sig-storage/csi-resizer :v1.12.0	ab774734705a	google.golang.org/grpc@v1.65.0	1.79.3	1
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	google.golang.org/grpc@v1.47.0	1.79.3	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.0.2	5f051159c95f	google.golang.org/grpc@v1.65.0	1.79.3	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	google.golang.org/grpc@v1.69.0	1.79.3	1
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	google.golang.org/grpc@v1.38.0	1.79.3	1
registry.k8s.io/sig-storage/csi-snapshotter :v5.0.1	89e900a160a9	google.golang.org/grpc@v1.40.0	1.79.3	1
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	google.golang.org/grpc@v1.34.0	1.79.3	1
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	google.golang.org/grpc@v1.49.0	1.79.3	1
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	google.golang.org/grpc@v1.60.1	1.79.3	1
registry.k8s.io/sig-storage/livenessprobe :v2.11.0	82adbebdf5d5	google.golang.org/grpc@v1.58.0	1.79.3	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	google.golang.org/grpc@v1.71.0	1.79.3	1
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	google.golang.org/grpc@v1.74.2	1.79.3	1