CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,056; of 17,787 indexed, latest versions
Container images: 4,691; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,056 of 17,787 indexed charts deploy, on 4,691 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,537
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,584

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,056 by stars

Chart

Latest

Affected images

Radar Score

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.53.0 1.25.10
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,224

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.53.0 1.25.10

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

1,160

boundaryboundary

0.1.0

1 of 1 See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.21.0	37bf86488b74	golang.org/x/net@v0.47.0 stdlib@go1.25.1	0.53.0 1.25.10

Open the chart page →

1,438

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.25.10

Open the chart page →

8,007

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10

Open the chart page →

1,884

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10

Open the chart page →

7,775

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.53.0 1.25.10

Open the chart page →

1,196

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.25.10

Open the chart page →

1,817

cloudflare-exportercloudflare-exporter

0.2.3

1 of 1 See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

791

ghostcloudpirates-ghost

0.20.22

3 of 3 See more

ghost cloudpirates-ghost 0.20.22

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/ghost :6.63.0	e05bc1169fb2	stdlib@go1.24.6	1.25.10
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.25.10
library/mariadb :12.3.3	ab1c3dd38194	stdlib@go1.24.6	1.25.10

Open the chart page →

7,182

dumpscriptcloudscript

1.8.3

1 of 1 See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

2,126

clowardenclowarden

0.2.3

2 of 4 See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.10
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.25.10

Open the chart page →

5,620

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.53.0 1.25.10

Open the chart page →

746

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0 stdlib@go1.18	0.53.0 1.25.10

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

13 of 21 See more

coder-observability coder-observability 0.7.3

13 of the 21 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.53.0 1.25.10
grafana/grafana :10.4.19	a9043254ba16	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.53.0 1.25.10
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.53.0 1.25.10
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.53.0 1.25.10
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.10
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.53.0 1.25.10
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.53.0 1.25.10

Open the chart page →

24,698

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.53.0 1.25.10
timescale/timescaledb :latest-pg16	289d55704b1b	stdlib@go1.24.6	1.25.10

Open the chart page →

17,475

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.53.0 1.25.10

Open the chart page →

3,081

cosmocosmo-platform

0.20.0

6 of 10 See more

cosmo cosmo-platform 0.20.0

6 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.53.0 1.25.10
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.25.10
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.53.0 1.25.10
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/net@v0.26.0 stdlib@go1.23.6	0.53.0 1.25.10
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.25.10

Open the chart page →

27,984

crossviewcrossview

4.6.0

1 of 2 See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,803

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.53.0 1.25.10

Open the chart page →

1,301

defensia-agentdefensia-agent

0.6.0

1 of 1 See more

defensia-agent defensia-agent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/defensia/agent :1.4.57	e9d40ae44711	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.53.0 1.25.10

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.53.0 1.25.10

Open the chart page →

1,623

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.53.0 1.25.10

Open the chart page →

2,537

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.10

Open the chart page →

1,276

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.25.10

Open the chart page →

4,194

bscdysnix

0.6.59

1 of 4 See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.53.0 1.25.10

Open the chart page →

2,012

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.53.0 1.25.10

Open the chart page →

2,271

postgres-pgdump-backupeugen

0.7.6

1 of 1 See more

postgres-pgdump-backup eugen 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.25.10

Open the chart page →

353

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.53.0 1.25.10

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.53.0 1.25.10

Open the chart page →

14,545

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.53.0 1.25.10

Open the chart page →

13,874

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.10

Open the chart page →

5,302

flyte-binaryflyte

2.0.48

1 of 4 See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.10

Open the chart page →

4,563

flyte-coreflyte

2.0.48

1 of 3 See more

flyte-core flyte 2.0.48

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.10

Open the chart page →

1,179

frp-operatorfrp

1.0.4

1 of 1 See more

frp-operator frp 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

368

frp-operatorfrp-operator

1.9.0

1 of 1 See more

frp-operator frp-operator 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/zufardhiyaulhaq/frp-operator :v0.11.0	cd25ee354df2	golang.org/x/net@v0.23.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

528

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	stdlib@go1.24.0	1.25.10

Open the chart page →

986

domain-watchgabe565

1.1.0

1 of 1 See more

domain-watch gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

789

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.53.0 1.25.10

Open the chart page →

3,030

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.25.10

Open the chart page →

1,110

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.53.0 1.25.10

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.25.10
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.53.0 1.25.10

Open the chart page →

4,908

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.25.10

Open the chart page →

14,001

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.25.10

Open the chart page →

9,666

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.53.0 1.25.10

Open the chart page →

10,202

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.53.0 1.25.10

Open the chart page →

2,330

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.53.0 1.25.10

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.53.0 1.25.10

Open the chart page →

2,610

Container images carrying it

4,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.53.0 1.25.10	1
alpine/git :2.36.3	66b210a97bc0	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.7	0.53.0 1.25.10	1
alpine/git :v2.49.1	c0280cf95723	golang.org/x/net@v0.45.0 stdlib@go1.24.8	0.53.0 1.25.10	1
alpine/helm	105741fa6621	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.53.0 1.25.10	1
alpine/helm :4.1.0	905a068da431	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.53.0 1.25.10	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.17.6	0.53.0 1.25.10	1
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.4	0.53.0 1.25.10	1
alpine/k8s :1.36.2	44ef4942e171	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.53.0 1.25.10	1
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.22.7	0.53.0 1.25.10	1
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.43.0 stdlib@go1.23.12	0.53.0 1.25.10	1
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.34.0 stdlib@go1.20.4	0.53.0 1.25.10	1
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.31.0 stdlib@go1.23.2	0.53.0 1.25.10	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.53.0 1.25.10	1
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.53.0 1.25.10	1
alpine/k8s :1.35.6	b7a12c5ddf26	golang.org/x/net@v0.38.0 stdlib@go1.25.7	0.53.0 1.25.10	1
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.23.0 stdlib@go1.21.1	0.53.0 1.25.10	1
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.22.3	0.53.0 1.25.10	1
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10	1
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.22.5	0.53.0 1.25.10	1
alpine/k8s :1.32.3	eec354133193	golang.org/x/net@v0.37.0 stdlib@go1.23.6	0.53.0 1.25.10	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0 stdlib@go1.20.8	0.53.0 1.25.10	1
alpine/kubectl :1.36.0	1ee9df6316d4	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.53.0 1.25.10	1
alpine/kubectl :1.33.3	2c59a3f0726c	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
alpine/kubectl :1.35.0	862d86046bbc	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10	1
alpine/kubectl :1.35.3	c4a11ae9a1cb	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.25.4	1d6f18dbd599	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.53.0 1.25.10	1
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10	1
altinity/metrics-exporter :0.25.4	6ecf67edfb71	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.53.0 1.25.10	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.53.0 1.25.10	1
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10	1
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.53.0 1.25.10	1
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.53.0 1.25.10	1
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.53.0 1.25.10	1
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.53.0 1.25.10	1
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.53.0 1.25.10	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.15.15	0.53.0 1.25.10	1
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/aes-eg-ext :v4.0.0-preview.1	b7eb1be3345d	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/ambassador-agent :1.0.22	7a1ea0d934fb	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1
amd64/mysql :5.7	e20a653e0f51	stdlib@go1.18.2	1.25.10	1
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.25.10	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.16.3	0.53.0 1.25.10	1
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10	1