CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,162; of 17,821 indexed, latest versions
Container images: 4,792; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,162 of 17,821 indexed charts deploy, on 4,792 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+182 more	1.25.10	4,634
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,652

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,162 by stars

Chart

Latest

Affected images

Radar Score

scrutinykubernetes-homelab-helm-charts

0.2.2

2 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	af89d51080c9	golang.org/x/net@v0.41.0 stdlib@go1.24.9	0.53.0 1.25.10
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

5,394

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

1,476

umamikubernetes-homelab-helm-charts

0.1.0

1 of 3 See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	18cfe3ef5e68	stdlib@go1.24.6	1.25.10

Open the chart page →

2,597

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.53.0 1.25.10

Open the chart page →

6,432

kubernetes-nmstatekubernetes-nmstate

0.87.0

1 of 1 See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/nmstate/kubernetes-nmstate-operator :v0.87.0	4dce694f01ea	stdlib@go1.26.0	1.25.10

Open the chart page →

388

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

3,632

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.53.0 1.25.10

Open the chart page →

1,205

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

4,611

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.53.0 1.25.10

Open the chart page →

855

servicegatewaykubernetes-replicator

2.3.3

1 of 1 See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mittwald/servicegateway :v2.3.3	fa948df30d44	stdlib@go1.21.5	1.25.10

Open the chart page →

739

kubernetesweeklykubernetesweekly

2.1.0

1 of 1 See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.53.0 1.25.10

Open the chart page →

1,490

kube-secrets-exporterkube-secrets-exporter

0.1.0

1 of 1 See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

544

api-serverkubeshop

0.11.16

2 of 2 See more

api-server kubeshop 0.11.16

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.53.0 1.25.10
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

3,551

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.53.0 1.25.10

Open the chart page →

1,624

kusk-gateway-apikubeshop

0.1.28

2 of 2 See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway-api :v1.5.4	126c713cf7d8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.53.0 1.25.10
kubeshop/kusk-gateway-api-websocket :v1.5.4	3b4f8345ca5c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

2,311

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	golang.org/x/net@v0.40.0 stdlib@go1.23.10	0.53.0 1.25.10

Open the chart page →

1,671

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/net@v0.34.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

1,431

testkube-operatorkubeshop

2.1.154

2 of 3 See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/kube-webhook-certgen :0.0.7	866827c379ae	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.53.0 1.25.10
kubeshop/testkube-operator :2.1.154	def0d0f0d4ab	golang.org/x/net@v0.34.0 stdlib@go1.23.9	0.53.0 1.25.10

Open the chart page →

1,019

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10

Open the chart page →

1,570

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

910

apisix-dashboardkubesphere

0.3.0

1 of 1 See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
apache/apisix-dashboard :2.9.0	c010ea7d1694	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.15	0.53.0 1.25.10

Open the chart page →

2,528

apisix-ingress-controllerkubesphere

0.8.0

1 of 2 See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.13.8	0.53.0 1.25.10

Open the chart page →

2,411

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.53.0 1.25.10

Open the chart page →

2,903

gitlabkubesphere

4.2.3

6 of 17 See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.8	0.53.0 1.25.10
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.53.0 1.25.10
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.53.0 1.25.10
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.53.0 1.25.10
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.53.0 1.25.10
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.25.10

Open the chart page →

37,690

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.7	0.53.0 1.25.10
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.53.0 1.25.10
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.53.0 1.25.10
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.53.0 1.25.10
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.53.0 1.25.10
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.53.0 1.25.10
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.18.3	0.53.0 1.25.10

Open the chart page →

17,858

pvc-autoresizerkubesphere

0.1.0

1 of 1 See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubesphere/pvc-autoresizer :v0.1	9a18a16c7b87	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.10	0.53.0 1.25.10

Open the chart page →

1,564

storageclass-accessorkubesphere

0.1.0

1 of 1 See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubesphere/storageclass-accessor :v0.1.1	eac8f273a9b6	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.53.0 1.25.10

Open the chart page →

1,511

ccm-qingcloudkubesphere-stable

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.10

Open the chart page →

1,540

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.53.0 1.25.10
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.53.0 1.25.10
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.53.0 1.25.10

Open the chart page →

8,586

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.53.0 1.25.10

Open the chart page →

2,445

cranekubesphere-stable

0.5.2

3 of 3 See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.2	0.53.0 1.25.10
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.2	0.53.0 1.25.10
gocrane/craned :v0.5.1	a1400909118c	stdlib@go1.17.2	1.25.10

Open the chart page →

8,907

csi-qingcloudkubesphere-stable

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.53.0 1.25.10
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

12,450

curvefs-csikubesphere-stable

0.1.0

1 of 3 See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.53.0 1.25.10

Open the chart page →

2,832

deepflowkubesphere-stable

6.2.606

5 of 8 See more

deepflow kubesphere-stable 6.2.606

5 of the 8 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.25.10
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.53.0 1.25.10
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/net@v0.8.0 stdlib@go1.19.1	0.53.0 1.25.10
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.25.10
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

18,503

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.53.0 1.25.10

Open the chart page →

1,329

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.53.0 1.25.10
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.11	0.53.0 1.25.10

Open the chart page →

4,136

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.53.0 1.25.10
inaccel/mkrt :latest	187fd448b6f2	stdlib@go1.21.5	1.25.10
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.53.0 1.25.10

Open the chart page →

5,785

iomeshkubesphere-stable

1.1.0

23 of 25 See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.53.0 1.25.10
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.53.0 1.25.10
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.7	0.53.0 1.25.10
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.53.0 1.25.10
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.53.0 1.25.10
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0 stdlib@go1.19	0.53.0 1.25.10
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.53.0 1.25.10
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/net@v0.19.0 stdlib@go1.21.10	0.53.0 1.25.10
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.1	0.53.0 1.25.10
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.53.0 1.25.10
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.53.0 1.25.10
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0 stdlib@go1.19	0.53.0 1.25.10
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10

Open the chart page →

49,073

IOMeshkubesphere-stable

1.2.0

23 of 25 See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.53.0 1.25.10
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.53.0 1.25.10
iomesh/csi-driver :v2.8.0	1a151f602451	golang.org/x/net@v0.8.0 stdlib@go1.21.11	0.53.0 1.25.10
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.53.0 1.25.10
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.53.0 1.25.10
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0 stdlib@go1.19	0.53.0 1.25.10
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/net@v0.19.0 stdlib@go1.22.6	0.53.0 1.25.10
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/net@v0.19.0 stdlib@go1.22.6	0.53.0 1.25.10
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.1	0.53.0 1.25.10
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.53.0 1.25.10
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.53.0 1.25.10
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.53.0 1.25.10
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0 stdlib@go1.19	0.53.0 1.25.10
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10

Open the chart page →

46,763

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.13.10	0.53.0 1.25.10
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.53.0 1.25.10

Open the chart page →

91,532

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.53.0 1.25.10

Open the chart page →

1,595

ccm-qingcloudkubesphere-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.10

Open the chart page →

1,540

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.53.0 1.25.10

Open the chart page →

2,445

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.53.0 1.25.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

18,554

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.53.0 1.25.10
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

12,450

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.53.0 1.25.10

Open the chart page →

2,832

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.25.10

Open the chart page →

9,652

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.10	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.53.0 1.25.10
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.53.0 1.25.10

Open the chart page →

25,927

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.53.0 1.25.10
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.53.0 1.25.10

Open the chart page →

4,339

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.53.0 1.25.10

Open the chart page →

2,793

Container images carrying it

4,792 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/rabbitmq :4.3.4-management	eb5295d08332	stdlib@go1.22.2	1.25.10	1
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.25.10	1
library/redis :7.0.15	352c1fdadc91	stdlib@go1.18.2	1.25.10	1
library/redis :7-bullseye	6a5130174e14	stdlib@go1.18.2	1.25.10	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.25.10	1
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.25.10	1
library/redis	83edc2b8e9ff	stdlib@go1.18.2	1.25.10	1
library/redis :7.0.10	92b8b307ee28	stdlib@go1.18.2	1.25.10	1
library/redis :7.4.1	bb142a9c18ac	stdlib@go1.18.2	1.25.10	1
library/redis :7.4.1-alpine	c1e88455c852	stdlib@go1.18.2	1.25.10	1
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.25.10	1
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.25.10	1
library/registry :latest	fd374bae807c	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.53.0 1.25.10	1
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.53.0 1.25.10	1
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.53.0 1.25.10	1
library/telegraf :1.19.0-alpine	794079a7f241	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.53.0 1.25.10	1
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.6	0.53.0 1.25.10	1
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/net@v0.20.0 stdlib@go1.22.0	0.53.0 1.25.10	1
library/traefik :3.3.5	104204dadedf	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10	1
library/traefik :v2.10.1	1489caffaedb	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.53.0 1.25.10	1
library/traefik :2.10.6	1957e3314f43	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10	1
library/traefik :2.5.6	2f603f8d3abe	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.5	0.53.0 1.25.10	1
library/traefik :v3.6.13	34d5089d0b41	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.53.0 1.25.10	1
library/traefik :v1.7.34	5d47b7bb2546	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.12	0.53.0 1.25.10	1
library/traefik :2.5.4	7d0228d19042	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.3	0.53.0 1.25.10	1
library/traefik :2.7.0-rc2	b70710baceeb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.53.0 1.25.10	1
library/traefik :2.4.8	eda951fd29a8	golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d stdlib@go1.16.2	0.53.0 1.25.10	1
library/vault :1.13.3	f98ac9dd97b0	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.53.0 1.25.10	1
library/zookeeper :3.9.4	dfa9ba46d14b	stdlib@go1.18.1	1.25.10	1
library/zookeeper :3.9.5	f258365d4882	stdlib@go1.18.1	1.25.10	1
librenms/librenms :24.11.0	0920bc9117a8	stdlib@go1.21.5	1.25.10	1
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.25.10	1
librenms/librenms :26.8.2	8194a4a9ff49	stdlib@go1.24.6	1.25.10	1
lifailon/openrouter-bot :latest	ea37e4b6b952	stdlib@go1.25.0	1.25.10	1
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.53.0 1.25.10	1
linuxchina/alibaba-rsocket-broker :1.1.3-k8s	f758e2e567ee	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17.7	0.53.0 1.25.10	1
linuxserver/calibre-web :0.6.24	241009026e6f	stdlib@go1.17.8	1.25.10	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.25.10	1
linuxserver/smokeping :2.9.0	0c8b547eda88	golang.org/x/net@v0.6.0 stdlib@go1.24.12	0.53.0 1.25.10	1
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.22.5	0.53.0 1.25.10	1
lishimeng/hufu :v1.2.1	3d5752dac834	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.53.0 1.25.10	1
lishimeng/owl-console :v0.11.2	c79a67657baf	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10	1
lishimeng/owl-messager :v0.11.2	3d00485e64dc	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10	1
lishimeng/passport :v0.2.16	3e7d05ded625	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.53.0 1.25.10	1
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.53.0 1.25.10	1
lishimeng/tabby :v1.0.4	8145c3dc83c8	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.53.0 1.25.10	1
lishimeng/tree :v0.2.8	9b2f8be6c7d3	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.53.0 1.25.10	1
lishimeng/zoo :v0.4.0	e0b8d2d8ca28	golang.org/x/net@v0.14.0 stdlib@go1.20.8	0.53.0 1.25.10	1
listmonk/listmonk :v6.0.0	bf3903d54a46	golang.org/x/net@v0.47.0 stdlib@go1.24.1	0.53.0 1.25.10	1
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/net@v0.14.0 stdlib@go1.21.3	0.53.0 1.25.10	1