StackRadar

CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,043
of 17,797 indexed, latest versions
Container images
4,670
deployed by those charts
Fix available
2 of 2
affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,043 of 17,797 indexed charts deploy, on 4,670 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+179 more1.25.104,519
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more0.53.03,570
OSV records
GO-2026-4918
Also known as
BIT-golang-2026-33814

Charts affected

4,043 by stars
ChartLatestAffected imagesRadar Score
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
stdlib@go1.18.2
1.25.10

Open the chart page →

15,852
webhook-broker-chartimytech0.2.41 of 1See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
golang.org/x/net@v0.33.0
stdlib@go1.23.0
0.53.0
1.25.10

Open the chart page →

1,253
inbucketinbucketVerified publisher2.5.01 of 1See more

inbucket inbucket 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
inbucket/inbucket:3.0.01f10a0efea69
golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d
stdlib@go1.17.1
0.53.0
1.25.10

Open the chart page →

2,167
telegraf-operatorinfluxdata1.4.01 of 1See more

telegraf-operator influxdata 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
quay.io/influxdb/telegraf-operator:v1.3.11eec10ef37cc3
golang.org/x/net@v0.17.0
stdlib@go1.18.10
0.53.0
1.25.10

Open the chart page →

925
valkey-clusterinnagoVerified publisher1.1.01 of 2See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.66.0d98e6db8094f
stdlib@go1.23.2
1.25.10

Open the chart page →

2,653
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.53.0
1.25.10

Open the chart page →

7,130
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.53.0
1.25.10

Open the chart page →

2,474
irsa-managerirsa-managerVerified publisher0.3.21 of 1See more

irsa-manager irsa-manager 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
golang.org/x/net@v0.27.0
stdlib@go1.22.7
0.53.0
1.25.10

Open the chart page →

820
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

10,438
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

10,512
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

10,458
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

10,458
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

10,739
istio-ratelimitistio-ratelimitVerified publisher0.0.51 of 2See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:4d2efd61ede09a75a84c
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.14.15
0.53.0
1.25.10

Open the chart page →

1,819
kubernetes-event-exporteritakurahVerified publisher0.2.31 of 1See more

kubernetes-event-exporter itakurah 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.53.0
1.25.10

Open the chart page →

1,142
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
stdlib@go1.24.6
1.25.10

Open the chart page →

3,425
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2
stdlib@go1.17.13
0.53.0
1.25.10

Open the chart page →

9,341
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
golang.org/x/net@v0.17.0
stdlib@go1.21.8
0.53.0
1.25.10

Open the chart page →

7,411
job-manager-dispatcherjob-manager-dispatcher1.27.01 of 1See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.53.0
1.25.10

Open the chart page →

479
job-manager-serverjob-manager-server1.27.01 of 1See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.53.0
1.25.10

Open the chart page →

757
hncjouveVerified publisher0.8.31 of 1See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
golang.org/x/net@v0.3.0
stdlib@go1.20.5
0.53.0
1.25.10

Open the chart page →

1,078
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
golang.org/x/net@v0.24.0
stdlib@go1.22.2
0.53.0
1.25.10

Open the chart page →

1,280
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
golang.org/x/net@v0.11.0
stdlib@go1.18.7
0.53.0
1.25.10

Open the chart page →

3,379
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3213 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

13 of the 17 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.53.0
1.25.10
grafana/grafana:12.3.12175aaa91c96
golang.org/x/net@v0.46.0
stdlib@go1.25.5
0.53.0
1.25.10
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.53.0
1.25.10
grafana/loki-canary:3.6.70dac7d5cb383
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.53.0
1.25.10
grafana/tempo:2.9.065a578975943
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.53.0
1.25.10
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/net@v0.29.0
stdlib@go1.23.4
0.53.0
1.25.10
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/net@v0.29.0
stdlib@go1.23.4
0.53.0
1.25.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.53.0
1.25.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
golang.org/x/net@v0.49.0
stdlib@go1.25.6
0.53.0
1.25.10
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.53.0
1.25.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.53.0
1.25.10
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/net@v0.49.0
stdlib@go1.26.0
0.53.0
1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.53.0
1.25.10

Open the chart page →

15,539
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/net@v0.38.0
stdlib@go1.24.7
0.53.0
1.25.10

Open the chart page →

5,541
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.53.0
1.25.10

Open the chart page →

5,821
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
stdlib@go1.20.7
1.25.10

Open the chart page →

5,251
keycloakkeycloak1.13.71See more

keycloak keycloak 1.13.7

1 container image this version deploys carries CVE-2026-33814.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
golang.org/x/net@v0.46.0
stdlib@go1.25.7
0.53.0
1.25.10

Open the chart page →

—
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.53.0
1.25.10

Open the chart page →

514
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
stdlib@go1.16.7
1.25.10

Open the chart page →

5,311
giteakeyporttech0.2.102 of 4See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.14.8
0.53.0
1.25.10
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.25.10

Open the chart page →

5,408
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.25.10

Open the chart page →

2,813
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
stdlib@go1.24.6
1.25.10

Open the chart page →

4,966
kokukokuVerified publisher1.0.03 of 7See more

koku koku 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
golang.org/x/net@v0.42.0
stdlib@go1.24.6
0.53.0
1.25.10
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.53.0
1.25.10
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
stdlib@go1.23.0
1.25.10

Open the chart page →

12,086
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
golang.org/x/net@v0.41.0
stdlib@go1.24.4
0.53.0
1.25.10

Open the chart page →

398
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
golang.org/x/net@v0.23.0
stdlib@go1.21.10
0.53.0
1.25.10

Open the chart page →

544
kubeadaptkubeadaptVerified publisher1.0.71See more

kubeadapt kubeadapt 1.0.7

1 container image this version deploys carries CVE-2026-33814.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.53.0
1.25.10

Open the chart page →

—
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.53.0
1.25.10
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.53.0
1.25.10
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.53.0
1.25.10
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.53.0
1.25.10

Open the chart page →

2,914
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
golang.org/x/net@v0.20.0
stdlib@go1.20.6
0.53.0
1.25.10

Open the chart page →

20,500
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/net@v0.17.0
stdlib@go1.20.12
0.53.0
1.25.10
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/net@v0.23.0
stdlib@go1.18.10
0.53.0
1.25.10

Open the chart page →

4,739
kubebrowsekubebrowse1.7.03 of 5See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/net@v0.39.0
stdlib@go1.24.6
0.53.0
1.25.10
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.53.0
1.25.10
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
golang.org/x/net@v0.42.0
stdlib@go1.25.0
0.53.0
1.25.10

Open the chart page →

4,165
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.16.6
0.53.0
1.25.10

Open the chart page →

2,426
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/net@v0.19.0
stdlib@go1.24.10
0.53.0
1.25.10

Open the chart page →

3,390
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
stdlib@go1.20
0.53.0
1.25.10
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/net@v0.19.0
stdlib@go1.24.10
0.53.0
1.25.10

Open the chart page →

6,099
monitoringkubegems44.3.41 of 1See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kubegems/alertproxy:v0.4.2eaee03055329
stdlib@go1.18.10
1.25.10

Open the chart page →

742
kube-monkeykubemonkey1.6.01 of 1See more

kube-monkey kubemonkey 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.40a5bb6fc3f3f
golang.org/x/net@v0.49.0
0.53.0

Open the chart page →

120
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.25.10

Open the chart page →

503
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
stdlib@go1.24.6
1.25.10
owncloud/server:10.16.274c53d341076
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.53.0
1.25.10

Open the chart page →

10,025
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.96.5dbeff02d2337
golang.org/x/net@v0.48.0
stdlib@go1.26.1
0.53.0
1.25.10

Open the chart page →

1,038
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
golang.org/x/net@v0.7.0
stdlib@go1.19.4
0.53.0
1.25.10

Open the chart page →

3,284

Container images carrying it

4,670 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/net@v0.19.0
stdlib@go1.21.10
0.53.0
1.25.10
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/net@v0.0.0-20220805013720-a33c5aa5df48
stdlib@go1.18.2
0.53.0
1.25.10
1
nocodb/nocodb:0.301.5d9516f0bf546
stdlib@go1.23.12
1.25.10
1
nocodb/nocodb:0.84.15f9b799933aa8
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.8
0.53.0
1.25.10
1
noooste/garage-ui:v0.12.10b68a9237da6
stdlib@go1.26.0
1.25.10
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
stdlib@go1.24.4
1.25.10
1
novosga/novosga:latest34b9acbe6e51
stdlib@go1.26.2
1.25.10
1
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.25.10
1
ntakashi/cole:1.2.3f7b68bee2a68
golang.org/x/net@v0.10.0
stdlib@go1.20.11
0.53.0
1.25.10
1
ntakashi/gitana:1.4.04171ec641120
golang.org/x/net@v0.0.0-20210929161516-d455829e376d
stdlib@go1.17.7
0.53.0
1.25.10
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.2
0.53.0
1.25.10
1
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.10
0.53.0
1.25.10
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.53.0
1.25.10
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/net@v0.21.0
stdlib@go1.22.5
0.53.0
1.25.10
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/net@v0.0.0-20220513224357-95641704303c
stdlib@go1.18.2
0.53.0
1.25.10
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.53.0
1.25.10
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
golang.org/x/net@v0.21.0
stdlib@go1.21.10
0.53.0
1.25.10
1
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.25.10
1
okteto/civo-webhook:0.5.357cd51176538
golang.org/x/net@v0.15.0
stdlib@go1.21.3
0.53.0
1.25.10
1
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.25.10
1
oliver006/redis_exporter:v1.67.0120f7ec77293
stdlib@go1.23.4
1.25.10
1
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.25.10
1
oliver006/redis_exporter:v1.66.0d98e6db8094f
stdlib@go1.23.2
1.25.10
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
stdlib@go1.26.1
1.25.10
1
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.16.3
0.53.0
1.25.10
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.17.2
0.53.0
1.25.10
1
ondrejsika/counter:latestd95eaeee2172
golang.org/x/net@v0.46.0
stdlib@go1.26.2
0.53.0
1.25.10
1
opea/codegen-ui:1.02bee4eb66f3e
stdlib@go1.20.7
1.25.10
1
opea/codetrans-ui:1.03ef121f34610
stdlib@go1.20.12
1.25.10
1
opea/docsum-ui:1.07f854e9bffaf
stdlib@go1.20.12
1.25.10
1
opea/gmcmanager:1.0514af17c495c
golang.org/x/net@v0.25.0
stdlib@go1.21.13
0.53.0
1.25.10
1
openbas/caldera-server:5.1.0a277796d9724
golang.org/x/net@v0.14.0
stdlib@go1.19.8
0.53.0
1.25.10
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.5
0.53.0
1.25.10
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
stdlib@go1.19.8
1.25.10
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
stdlib@go1.24.4
1.25.10
1
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
golang.org/x/net@v0.28.0
stdlib@go1.23.3
0.53.0
1.25.10
1
opencsghq/csghub-server:v2.5.0-ee587046575c2c
stdlib@go1.26.0
1.25.10
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
golang.org/x/net@v0.39.0
stdlib@go1.24.10
0.53.0
1.25.10
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
golang.org/x/net@v0.29.0
stdlib@go1.22.7
0.53.0
1.25.10
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
golang.org/x/net@v0.48.0
0.53.0
1
opencsghq/lws:v0.6.1de15437db41b
golang.org/x/net@v0.37.0
stdlib@go1.24.0
0.53.0
1.25.10
1
opendatacube/explorer:latest120457ffcd69
stdlib@go1.22.2
1.25.10
1
openebs/lvm-driver:1.10.141f73aba7f31
golang.org/x/net@v0.48.0
stdlib@go1.24.7
0.53.0
1.25.10
1
openebs/provisioner-nfs:0.11.04f41dd782761
golang.org/x/net@v0.10.0
stdlib@go1.19.13
0.53.0
1.25.10
1
openebs/zfs-driver:2.11.116f1a74bb249
stdlib@go1.26.2
1.25.10
1
openenergyprojects/modbus_exporter:20230617_a14455158990f24fb25
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.53.0
1.25.10
1
openfga/openfga:v1.9.25e94966c11df
golang.org/x/net@v0.40.0
stdlib@go1.24.5
0.53.0
1.25.10
1
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
golang.org/x/net@v0.47.0
0.53.0
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
golang.org/x/net@v0.43.0
stdlib@go1.23.4
0.53.0
1.25.10
1
openkruise/kruise-manager:v1.8.30482722b4e56
golang.org/x/net@v0.33.0
stdlib@go1.22.11
0.53.0
1.25.10
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.