CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,039; of 17,792 indexed, latest versions
Container images: 4,657; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,039 of 17,792 indexed charts deploy, on 4,657 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,508
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,567

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,039 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

1 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

655

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0 stdlib@go1.25.6	0.53.0 1.25.10
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

3,003

ingress-nginxingress-nginx

4.15.1

2 of 2 See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10

Open the chart page →

1,548

jenkinsjenkinsci

5.9.62

1 of 2 See more

jenkins jenkinsci 5.9.62

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

2,538

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0	0.53.0

Open the chart page →

3,218

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	stdlib@go1.25.9	1.25.10
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	golang.org/x/net@v0.39.0 stdlib@go1.25.8	0.53.0 1.25.10
quay.io/metallb/speaker :v0.16.1	16561e96531e	stdlib@go1.25.9	1.25.10

Open the chart page →

2,149

argo-workflowsargo

2.0.6

1 of 3 See more

argo-workflows argo 2.0.6

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.3	94a031823f2a	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

259

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

1,487

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.10
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.10

Open the chart page →

8,874

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	stdlib@go1.26.2	1.25.10
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	stdlib@go1.26.2	1.25.10
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	stdlib@go1.26.2	1.25.10

Open the chart page →

892

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.53.0 1.25.10

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.10
artifacthub/scanner :v1.23.0	2d8365601f0e	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
artifacthub/tracker :v1.23.0	5368d21a6e5c	golang.org/x/net@v0.44.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

10,840

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	stdlib@go1.25.9	1.25.10

Open the chart page →

1,151

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.53.0 1.25.10

Open the chart page →

576

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0 stdlib@go1.25.6	0.53.0 1.25.10
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

3,003

jupyterhubjupyterhub

4.4.2

2 of 7 See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-image-awaiter :4.4.2	c4df1176d152	stdlib@go1.23.12	1.25.10
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0 stdlib@go1.23.10	0.53.0 1.25.10

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

4,548

natsnats

2.14.6

1 of 3 See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.25.10

Open the chart page →

2,315

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.53.0 1.25.10

Open the chart page →

1,773

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.10

Open the chart page →

30,217

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.25.10

Open the chart page →

11,394

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	golang.org/x/net@v0.49.0	0.53.0
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
falcosecurity/falcoctl :0.13.0	0eeb79adc580	stdlib@go1.26.2	1.25.10

Open the chart page →

5,398

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

2,315

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

1,369

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.25.10

Open the chart page →

1,454

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.53.0 1.25.10

Open the chart page →

976

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

432

victoria-metrics-k8s-stackvictoriametrics

0.92.1

2 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.49.0	0.53.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10

Open the chart page →

1,910

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.53.0 1.25.10

Open the chart page →

1,445

openebsopenebs

4.6.1

20 of 35 See more

openebs openebs 4.6.1

20 of the 35 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.53.0 1.25.10
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.53.0 1.25.10
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.10
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.10
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.10
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.53.0 1.25.10
openebs/lvm-driver :1.10.1	41f73aba7f31	golang.org/x/net@v0.48.0 stdlib@go1.24.7	0.53.0 1.25.10
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.10
openebs/zfs-driver :2.11.1	16f1a74bb249	stdlib@go1.26.2	1.25.10
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.53.0 1.25.10

Open the chart page →

24,128

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.53.0 1.25.10

Open the chart page →

937

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.10

Open the chart page →

1,288

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.53.0 1.25.10
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.53.0 1.25.10

Open the chart page →

2,890

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.10

Open the chart page →

252

vpafairwinds-stable

5.1.0

1 See more

vpa fairwinds-stable 5.1.0

1 container image this version deploys carries CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.53.0 1.25.10

Open the chart page →

—

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.18.8	0.53.0 1.25.10

Open the chart page →

2,059

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.53.0 1.25.10

Open the chart page →

3,118

trinotrino

1.42.2

1 of 1 See more

1,309

dagsterdagster

1.13.23

1 See more

—

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.53.0 1.25.10
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.25.10

Open the chart page →

13,880

keycloakcloudpirates-keycloak

0.21.37

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.10
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

4,428

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

2,701

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.53.0 1.25.10
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

2,584

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

1,984

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

2,497

openfaasopenfaas

15.0.13

3 of 6 See more

openfaas openfaas 15.0.13

3 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.10
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.10
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.10

Open the chart page →

3,558

flux2fluxcd-community

2.19.0

1 of 7 See more

flux2 fluxcd-community 2.19.0

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

3,006

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

566

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.25.10

Open the chart page →

5,560

Container images carrying it

4,657 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.53.0 1.25.10	1
phntom/codimd :2.4.3	1b9aafbb62e6	stdlib@go1.16	1.25.10	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.53.0 1.25.10	1
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.53.0 1.25.10	1
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.53.0 1.25.10	1
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.53.0 1.25.10	1
photoprism/photoprism :231128-ce	284de9cc4f9c	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.53.0 1.25.10	1
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.53.0 1.25.10	1
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10	1
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.53.0 1.25.10	1
piblokto/backlokto-operator :v0.0.20	963cda71e393	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10	1
pinclr/v2ray-proxy :latest	f37f250b7091	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.53.0 1.25.10	1
platform9community/admin-server :latest	de3fa9b70df1	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.53.0 1.25.10	1
platform9community/api-gateway :latest	40a4970de568	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.53.0 1.25.10	1
platform9community/customers-service :latest	2089811e5cc6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.53.0 1.25.10	1
platform9community/vets-service :latest	d1165c94dfb3	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.11	0.53.0 1.25.10	1
platform9community/visits-service :latest	8d11b50368c6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.53.0 1.25.10	1
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.53.0 1.25.10	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	stdlib@go1.21.2	1.25.10	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.12	0.53.0 1.25.10	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.25.10	1
pnnlmiscscripts/pixiecore :1.0.1-1	c6f17741a0d7	golang.org/x/net@v0.7.0 stdlib@go1.24.1	0.53.0 1.25.10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	golang.org/x/net@v0.48.0 stdlib@go1.19.13	0.53.0 1.25.10	1
polyaxon/training-operator :2.1.0	b5b29deaec9a	golang.org/x/net@v0.17.0 stdlib@go1.20.13	0.53.0 1.25.10	1
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/net@v0.9.0 stdlib@go1.20.3	0.53.0 1.25.10	1
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.53.0 1.25.10	1
postgis/postgis :17-3.4-alpine	5a1dbedac34e	stdlib@go1.18.2	1.25.10	1
postgis/postgis :18-3.6	7e00e8c3539f	stdlib@go1.24.6	1.25.10	1
postgis/postgis :11-2.5	f479f6c3435e	stdlib@go1.16.7	1.25.10	1
pozetroninc/liftbridge :v1.1.0	79fd6b9d93e6	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.12	0.53.0 1.25.10	1
pozetroninc/rethinkdb-cluster :v2.4.1	6b06a098f994	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.9	0.53.0 1.25.10	1
prathamkrishna/dicedb :v1	a7298180cd24	stdlib@go1.23.2	1.25.10	1
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10	1
pritunl/pritunl-zero :1.0.3648.46	0f2943e0d41b	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.53.0 1.25.10	1
prodrigestivill/postgres-backup-local :12-alpine-8d72d2d	6ed2afadc326	stdlib@go1.16	1.25.10	1
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	stdlib@go1.22.6	1.25.10	1
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.19.3	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462 stdlib@go1.18.5	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.53.0 1.25.10	1
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.53.0 1.25.10	1
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.25.10	1
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.53.0 1.25.10	1
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.53.0 1.25.10	1
prom/influxdb-exporter :v0.11.4	27e33e18634a	stdlib@go1.19.9	1.25.10	1
prom/influxdb-exporter :v0.9.0	f63fd77c05ee	stdlib@go1.17.8	1.25.10	1
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.2	0.53.0 1.25.10	1
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.53.0 1.25.10	1
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10	1