CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,058; of 17,790 indexed, latest versions
Container images: 4,694; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,058 of 17,790 indexed charts deploy, on 4,694 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,539
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,589

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,058 by stars

Chart

Latest

Affected images

Radar Score

lumenvoxlumenvox

7.1.0

10 of 11 See more

lumenvox lumenvox 7.1.0

10 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :7.1	12310cf52f79	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/archive :7.1	5114f08ab8ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/cloud-init-tools :7.1	de940e2ec601	stdlib@go1.26.2	1.25.10
lumenvox/configuration :7.1	82bf01d9ebec	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/deployment :7.1	dadac2a74be6	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/file-store :7.1	38aa8711c9ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/license :7.1	35d0b1ac053e	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/management-api :7.1	6420a6e7d6c2	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/resource :7.1	93fd6ff1d62c	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/storage :7.1	c961fe78e2ca	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

4,352

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.10
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.53.0 1.25.10
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.25.10
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.53.0 1.25.10
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.25.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

71,268

dnsbl-exporterluzilla

0.5.0

1 of 2 See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/luzilla/dnsbl_exporter :v0.12.0	ecba7360ff12	stdlib@go1.25.0	1.25.10

Open the chart page →

1,147

lynqlynq

1.1.22

1 of 1 See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-lynq/lynq :1.1.22	229b05e3c717	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

627

magentomagento

3.2.3

5 of 12 See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.25.10
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.25.10
longhornio/longhorn-manager :v1.10.0	5b0bc1b88f0c	golang.org/x/net@v0.44.0 stdlib@go1.24.6	0.53.0 1.25.10
longhornio/longhorn-share-manager :v1.10.0	9f6e5e3be8ab	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
longhornio/longhorn-ui :v1.10.0	e60f36161511	stdlib@go1.24.6	1.25.10

Open the chart page →

13,643

mcp-orchestratormagertron

3.8.28

1 of 6 See more

mcp-orchestrator magertron 3.8.28

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	18cfe3ef5e68	stdlib@go1.24.6	1.25.10

Open the chart page →

1,714

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.53.0 1.25.10

Open the chart page →

1,979

plane-enterprisemakeplane

3.7.2

3 of 13 See more

plane-enterprise makeplane 3.7.2

3 of the 13 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.25.10
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

4,973

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.53.0 1.25.10

Open the chart page →

3,630

Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacion

1.0.1

1 of 6 See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8	b3b90af2a655	stdlib@go1.24.6	1.25.10

Open the chart page →

19,195

mcpmcp-charts

0.0.23

2 of 7 See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/net@v0.43.0 stdlib@go1.25.4	0.53.0 1.25.10
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/net@v0.44.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

7,025

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.53.0 1.25.10
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.53.0 1.25.10

Open the chart page →

5,308

metadata-injectormetadata-injector-operator

0.0.1

1 of 1 See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.53.0 1.25.10

Open the chart page →

568

metrics-server-exportermetrics-server-exporter

2.4.0

1 of 1 See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

1,273

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.53.0 1.25.10

Open the chart page →

3,254

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

4,197

librenmsmidokura-community

0.3.2

1 of 6 See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.25.10

Open the chart page →

8,968

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.53.0 1.25.10

Open the chart page →

3,176

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.53.0 1.25.10

Open the chart page →

6,922

mimir-syncmimir-sync

3.1.0

1 of 1 See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

1,300

minecraft-exporterminecraft-exporter

0.16.0

1 of 1 See more

minecraft-exporter minecraft-exporter 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/net@v0.51.0	0.53.0

Open the chart page →

362

miniapiminiapi

1.3.2

1 of 1 See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/miniapi :1.3.2	8a7042db82ce	stdlib@go1.23.2	1.25.10

Open the chart page →

854

mlflow-servermlflowserver

0.1.9

1 of 3 See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

5,804

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

11,109

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

2,710

model-manager-servermodel-manager-server

1.27.0

1 of 1 See more

model-manager-server model-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

740

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.53.0 1.25.10

Open the chart page →

13,812

redminemt190502

7.3.4

2 of 3 See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	stdlib@go1.24.6	1.25.10
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.25.10

Open the chart page →

7,583

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

2,059

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

1,419

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.25.10

Open the chart page →

899

simple-gowikimy-helm-charts

0.2.0

1 of 1 See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.25.10

Open the chart page →

399

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.25.10

Open the chart page →

3,732

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.25.10

Open the chart page →

2,634

surveyornats

0.20.9

1 of 1 See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
natsio/nats-surveyor :0.9.9	104a3e938b23	stdlib@go1.26.1	1.25.10

Open the chart page →

909

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

745

spring-helmnaveenalla-springboot

1.0.0

1 of 2 See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,649

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.53.0 1.25.10
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.25.10
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0 stdlib@go1.20.13	0.53.0 1.25.10
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.53.0 1.25.10
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.53.0 1.25.10
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.25.10

Open the chart page →

37,504

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.53.0 1.25.10

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

1,229

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.25.10

Open the chart page →

14,363

nri-resource-policy-balloonsnri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-balloons nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons :v0.14.0	a8c8297c7274	stdlib@go1.26.0	1.25.10

Open the chart page →

286

nri-resource-policy-topology-awarenri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-topology-aware nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware :v0.14.0	e2443833726a	stdlib@go1.26.0	1.25.10

Open the chart page →

286

nutanix-csi-snapshotnutanix-helm-releases

8.3.0

1 of 1 See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

423

octopuso7studios-octopus-helm-charts

1.2.3

4 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.11.9-alpine	777787bbb4c7	stdlib@go1.24.7	1.25.10
natsio/nats-box :0.18.0	abdc9f9f0120	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10
natsio/nats-server-config-reloader :0.19.1	81edf32a3680	stdlib@go1.24.5	1.25.10
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

6,120

oadaoada

5.0.5

1 of 11 See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

13,329

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.53.0 1.25.10

Open the chart page →

1,178

oci-native-ingress-controlleroci-native-ingress-controller

1.0.0

1 of 1 See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

434

growthbookone-acre-fund

0.3.0

1 of 3 See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

502

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.25.10

Open the chart page →

5,299

Container images carrying it

4,694 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.7	0.53.0 1.25.10	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.53.0 1.25.10	1
dgraph/ratel :v25.0.3	4cae1ff95027	stdlib@go1.23.10	1.25.10	1
digitalocean/do-operator :v0.1.6	5e5deb4db76e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.10	0.53.0 1.25.10	1
dipugodocker/pdf-editor :1.0-backend-rotate	316e203b8bf5	stdlib@go1.18.7	1.25.10	1
dipugodocker/pdf-editor :1.0-backend-merge	70b07544a604	stdlib@go1.18.7	1.25.10	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.8	0.53.0 1.25.10	1
directus/directus :12.0.2	9c8470ea465c	stdlib@go1.23.12	1.25.10	1
directus/directus :11.1.0	e3c8bb975350	stdlib@go1.20.7	1.25.10	1
distribution/distribution :3.1.1	bca24727f400	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.53.0 1.25.10	1
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.25.10	1
djjudas21/nova-exporter :0.0.10	e9094580885c	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.53.0 1.25.10	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.53.0 1.25.10	1
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.16.2	0.53.0 1.25.10	1
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.25.10	1
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0 stdlib@go1.21.0	0.53.0 1.25.10	1
documenso/documenso :v1.8.1	7f16a9449f18	stdlib@go1.20.12	1.25.10	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/net@v0.0.0-20201002202402-0a1ea396d57c stdlib@go1.17.2	0.53.0 1.25.10	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.1	0.53.0 1.25.10	1
donetick/donetick :v0.1.79	a1cc21dd5a37	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.53.0 1.25.10	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.53.0 1.25.10	1
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.53.0 1.25.10	1
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.53.0 1.25.10	1
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.53.0 1.25.10	1
dongjiang1989/lxcfs-webhook :latest	c1f19557bdcb	stdlib@go1.26.0	1.25.10	1
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0 stdlib@go1.18.5	0.53.0 1.25.10	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/net@v0.29.0 stdlib@go1.22.9	0.53.0 1.25.10	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/net@v0.29.0 stdlib@go1.22.9	0.53.0 1.25.10	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.53.0 1.25.10	1
dossif/redminebot :0.2.2	96dcd2c0e9f2	stdlib@go1.17.13	1.25.10	1
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.5	0.53.0 1.25.10	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.53.0 1.25.10	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.53.0 1.25.10	1
dragonflyoss/scheduler :v2.5.2-rc.0	6d710dc2bae0	golang.org/x/net@v0.48.0 stdlib@go1.26.2	0.53.0 1.25.10	1
drone/drone :2.28.2	55897c8fb22d	golang.org/x/net@v0.42.0 stdlib@go1.24.13	0.53.0 1.25.10	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.15	0.53.0 1.25.10	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332 stdlib@go1.13.15	0.53.0 1.25.10	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/net@v0.19.0 stdlib@go1.22.0	0.53.0 1.25.10	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.53.0 1.25.10	1
drumsergio/genieacs :1.2.16.0	28244054e1bf	stdlib@go1.19.8	1.25.10	1
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10	1
dserio83/velero-ui :0.3.1	b4e1ec6664d3	stdlib@go1.23.7	1.25.10	1
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/net@v0.5.0 stdlib@go1.19.6	0.53.0 1.25.10	1
duplicati/duplicati :2.0.5.111_canary_2020-09-26	8660f0eda7c9	stdlib@go1.14.4	1.25.10	1
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.53.0 1.25.10	1
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.53.0 1.25.10	1
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.14.9	0.53.0 1.25.10	1
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.53.0	1
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.7	0.53.0 1.25.10	1