CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,054; of 17,792 indexed, latest versions
Container images: 4,683; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,054 of 17,792 indexed charts deploy, on 4,683 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,529
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,580

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,054 by stars

Chart

Latest

Affected images

Radar Score

netboxnetbox

8.3.79

1 of 5 See more

netbox netbox 8.3.79

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.36.2	06c7a7a97727	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

1,017

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,667

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.53.0 1.25.10

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10

Open the chart page →

1,374

rocketchatrocketchat-server

7.0.2

5 of 12 See more

rocketchat rocketchat-server 7.0.2

5 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.53.0 1.25.10
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.53.0 1.25.10
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.53.0 1.25.10
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.10
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.25.10

Open the chart page →

12,289

zammadzammad

18.2.1

1 of 5 See more

zammad zammad 18.2.1

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.10

Open the chart page →

6,476

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10

Open the chart page →

2,109

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.53.0 1.25.10
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10

Open the chart page →

2,944

ceph-csi-cephfsceph-csi

3.17.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.10
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

4,103

ceph-csi-rbdceph-csi

3.17.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	stdlib@go1.26.2	1.25.10
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

4,103

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.25.5	0.53.0 1.25.10
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/net@v0.52.0	0.53.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/net@v0.52.0	0.53.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/net@v0.52.0	0.53.0

Open the chart page →

6,442

csi-driver-nfscsi-driver-nfs

4.13.4

1 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

3,371

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.53.0 1.25.10

Open the chart page →

1,892

rabbitmqcloudpirates-rabbitmq

0.21.27

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.27

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	57bddb6fbc34	stdlib@go1.22.2	1.25.10

Open the chart page →

865

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.53.0 1.25.10

Open the chart page →

2,462

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.2	0.53.0 1.25.10
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0 stdlib@go1.18.3	0.53.0 1.25.10
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60 stdlib@go1.16.15	0.53.0 1.25.10
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.53.0 1.25.10

Open the chart page →

32,523

cockroachdbcockroachdb

22.0.3

1 of 3 See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

763

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.53.0 1.25.10
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.10

Open the chart page →

3,537

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.53.0 1.25.10

Open the chart page →

10,700

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

2,230

signozsignoz

0.142.0

5 of 5 See more

signoz signoz 0.142.0

5 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10
signoz/signoz :v0.142.0	041de69ac78a	stdlib@go1.25.7	1.25.10
signoz/signoz-otel-collector :v0.144.10	34ecb436b687	stdlib@go1.25.0	1.25.10
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.25.10

Open the chart page →

7,566

weblateweblate

0.5.36

1 of 3 See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.25.10

Open the chart page →

6,826

postgresgroundhog2k

1.6.8

1 of 1 See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,667

community-operatormongodb-helm-charts

0.13.0

1 of 1 See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,126

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	stdlib@go1.26.2	1.25.10

Open the chart page →

238

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/net@v0.46.0 stdlib@go1.24.8	0.53.0 1.25.10

Open the chart page →

1,715

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.25.10

Open the chart page →

4,823

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

1,487

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.25.10
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.25.10

Open the chart page →

4,987

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

643

mariadbcloudpirates-mariadb

0.16.14

1 of 1 See more

mariadb cloudpirates-mariadb 0.16.14

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.3	ab1c3dd38194	stdlib@go1.24.6	1.25.10

Open the chart page →

1,677

difydouban

0.10.0

4 of 6 See more

dify douban 0.10.0

4 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.25.10
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/net@v0.42.0 stdlib@go1.25.5	0.53.0 1.25.10
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/net@v0.40.0 stdlib@go1.23.3	0.53.0 1.25.10
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.25.10

Open the chart page →

19,654

dragonflydragonfly

1.8.5

1 of 3 See more

dragonfly dragonfly 1.8.5

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dragonflyoss/scheduler :v2.5.2	d5dea9e662cd	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

4,083

secrets-store-csi-driversecret-store-csi-driver

1.6.1

2 of 4 See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,810

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.53.0 1.25.10

Open the chart page →

2,139

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	stdlib@go1.24.6	1.25.10

Open the chart page →

975

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.53.0 1.25.10

Open the chart page →

610

pulsarapache

4.7.0

6 of 10 See more

pulsar apache 4.7.0

6 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.53.0 1.25.10
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

9,885

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

968

vertical-pod-autoscalercowboysysop

11.1.1

4 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0 stdlib@go1.21.8	0.53.0 1.25.10
registry.k8s.io/autoscaling/vpa-admission-controller :1.5.1	9928d59477fb	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
registry.k8s.io/autoscaling/vpa-recommender :1.5.1	e629c61b75eb	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

6,978

difydify-helm

0.38.0

2 of 11 See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	stdlib@go1.19.9	1.25.10
langgenius/dify-sandbox :0.2.15	750e1111426e	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

22,306

pyroscopegrafana

2.3.1

2 of 3 See more

pyroscope grafana 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

3,225

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.53.0 1.25.10

Open the chart page →

1,104

operatorminio-operator

7.1.1

1 of 1 See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/minio/operator :v7.1.1	cd587f60c43d	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

874

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18-alpine	d3e1620b530c	stdlib@go1.24.6	1.25.10

Open the chart page →

2,061

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.53.0 1.25.10

Open the chart page →

4,093

rabbitmqgroundhog2k

2.3.8

1 of 2 See more

rabbitmq groundhog2k 2.3.8

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5	1773ab33af6a	stdlib@go1.22.2	1.25.10

Open the chart page →

1,056

oktetookteto

0.0.0-2026-08-17

3 of 10 See more

okteto okteto 0.0.0-2026-08-17

3 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/backend :0.0.0-2026-08-17	629bdce31b4d	golang.org/x/net@v0.47.0	0.53.0
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0 stdlib@go1.25.7	0.53.0 1.25.10
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

5,527

hydraory

0.64.0

1 of 2 See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
oryd/hydra :v26.2.0	ff67c7fb5f95	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10

Open the chart page →

1,163

Container images carrying it

4,683 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
pritunl/pritunl-zero :1.0.3648.46	0f2943e0d41b	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.53.0 1.25.10	1
prodrigestivill/postgres-backup-local :12-alpine-8d72d2d	6ed2afadc326	stdlib@go1.16	1.25.10	1
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	stdlib@go1.22.6	1.25.10	1
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.19.3	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462 stdlib@go1.18.5	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.53.0 1.25.10	1
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.53.0 1.25.10	1
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.53.0 1.25.10	1
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.25.10	1
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.53.0 1.25.10	1
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.53.0 1.25.10	1
prom/influxdb-exporter :v0.11.4	27e33e18634a	stdlib@go1.19.9	1.25.10	1
prom/influxdb-exporter :v0.9.0	f63fd77c05ee	stdlib@go1.17.8	1.25.10	1
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.2	0.53.0 1.25.10	1
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.53.0 1.25.10	1
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10	1
prom/node-exporter :v1.10.2	3ac34ce007ac	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.53.0 1.25.10	1
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10	1
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.53.0 1.25.10	1
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.53.0 1.25.10	1
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10	1
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.53.0 1.25.10	1
prom/prometheus :v3.8.0	d936808bdea5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.53.0 1.25.10	1
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.8	0.53.0 1.25.10	1
prom/prometheus :v2.22.2	f7ffebdd428b	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.5	0.53.0 1.25.10	1
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.53.0 1.25.10	1
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.53.0 1.25.10	1
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.15.8	0.53.0 1.25.10	1
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.53.0 1.25.10	1
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10	1
prom/statsd-exporter :v0.22.4	8be660470961	stdlib@go1.17.3	1.25.10	1
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.53.0 1.25.10	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	stdlib@go1.21.5	1.25.10	1
pschiffe/pdns-mysql :alpine	d196c796cafb	stdlib@go1.21.5	1.25.10	1
pschiffe/pdns-pgsql :5.0	a227d41bc665	stdlib@go1.21.5	1.25.10	1
pubeldev/prusa_exporter :2.0.0	1091665a020a	stdlib@go1.25.5	1.25.10	1
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.53.0 1.25.10	1
pysga1996/redis :latest	3af6d0c7db19	stdlib@go1.18.2	1.25.10	1
qichenxu4pd/mysqlweb :1.2	d758d41d9c6b	stdlib@go1.18.2	1.25.10	1
qmcgaw/gluetun :v3.41.1	1a5bf4b4820a	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	1
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/net@v0.31.0 stdlib@go1.23.4	0.53.0 1.25.10	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10	1
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.5	0.53.0 1.25.10	1
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.53.0 1.25.10	1
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.53.0 1.25.10	1
qumine/minecraft-server :v0.1.15	c0b650d51132	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.4	0.53.0 1.25.10	1
rabbitmqoperator/cluster-operator :1.8.3	231e7ce0e905	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.17	0.53.0 1.25.10	1
rabbitmqoperator/cluster-operator :2.19.2	840be4bad78e	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.53.0 1.25.10	1
rabbitmqoperator/cluster-operator :2.6.0	8651dd3cec51	golang.org/x/net@v0.18.0 stdlib@go1.20.11	0.53.0 1.25.10	1
rahulbhiwagade122/desishowbiz :latest	08490b70998c	stdlib@go1.23.7	1.25.10	1