StackRadar

CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,162
of 17,821 indexed, latest versions
Container images
4,792
deployed by those charts
Fix available
2 of 2
affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,162 of 17,821 indexed charts deploy, on 4,792 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+182 more1.25.104,634
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more0.53.03,652
OSV records
GO-2026-4918
Also known as
BIT-golang-2026-33814

Charts affected

4,162 by stars
ChartLatestAffected imagesRadar Score
chainrss30.1.285 of 8See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
stdlib@go1.21.3
1.25.10
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
golang.org/x/net@v0.18.0
stdlib@go1.21.7
0.53.0
1.25.10
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.53.0
1.25.10
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
stdlib@go1.21.3
1.25.10
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
stdlib@go1.21.3
1.25.10

Open the chart page →

8,683
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.25.10

Open the chart page →

4,806
op-batcherrss30.1.01 of 2See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.25.10

Open the chart page →

1,252
op-proposerrss30.1.01 of 2See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.25.10

Open the chart page →

1,252
proxydrss30.1.01 of 1See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
stdlib@go1.21.3
1.25.10

Open the chart page →

2,111
vsl-chainrss30.1.04 of 7See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.25.10
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
golang.org/x/net@v0.18.0
stdlib@go1.21.7
0.53.0
1.25.10
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.53.0
1.25.10
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.25.10

Open the chart page →

6,199
vsl-rpcrss30.3.42 of 4See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
golang.org/x/net@v0.18.0
stdlib@go1.21.7
0.53.0
1.25.10
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.53.0
1.25.10

Open the chart page →

4,765
vsl-sequencerrss30.3.42 of 4See more

vsl-sequencer rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
golang.org/x/net@v0.18.0
stdlib@go1.21.7
0.53.0
1.25.10
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.53.0
1.25.10

Open the chart page →

4,765
donetickrtomik-helm-chartsVerified publisher1.1.01 of 1See more

donetick rtomik-helm-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
donetick/donetick:v0.1.79a1cc21dd5a37
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.53.0
1.25.10

Open the chart page →

793
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
stdlib@go1.23.10
1.25.10

Open the chart page →

5,365
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
stdlib@go1.24.4
1.25.10

Open the chart page →

10,857
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
golang.org/x/net@v0.27.0
stdlib@go1.22.0
0.53.0
1.25.10

Open the chart page →

2,222
glancerubxkubeVerified publisher0.1.11 of 1See more

glance rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.532ab73d80f2b
golang.org/x/net@v0.40.0
0.53.0

Open the chart page →

765
gotifyrubxkubeVerified publisher1.3.41 of 1See more

gotify rubxkube 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/gotify/server:3.1.144fc5bbd1c06
stdlib@go1.26.0
1.25.10

Open the chart page →

320
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
stdlib@go1.17.8
1.25.10

Open the chart page →

34,743
memorubxkubeVerified publisher1.2.11 of 1See more

memo rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
neosmemo/memos:0.293e1253477066
stdlib@go1.26.2
1.25.10

Open the chart page →

707
plex-exporterrubxkubeVerified publisher0.1.11 of 1See more

plex-exporter rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/jsclayton/prometheus-plex-exporter:latest18ef1b2197ef
stdlib@go1.23.0
1.25.10

Open the chart page →

434
rmfakecloudrubxkubeVerified publisher0.1.11 of 1See more

rmfakecloud rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ddvk/rmfakecloud:latest2f5c45cbf0c5
golang.org/x/net@v0.38.0
0.53.0

Open the chart page →

498
smokepingrubxkubeVerified publisher1.2.11 of 1See more

smokeping rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
linuxserver/smokeping:2.9.00c8b547eda88
golang.org/x/net@v0.6.0
stdlib@go1.24.12
0.53.0
1.25.10

Open the chart page →

587
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/docker:29.8.1-dind76cd6bbc3ab6
golang.org/x/net@v0.50.0
0.53.0

Open the chart page →

1,175
tranquil-pdsrubxkubeVerified publisher0.2.01 of 2See more

tranquil-pds rubxkube 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
stdlib@go1.24.6
1.25.10

Open the chart page →

635
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
golang.org/x/net@v0.23.0
stdlib@go1.23.9
0.53.0
1.25.10

Open the chart page →

2,960
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
stdlib@go1.20.5
1.25.10

Open the chart page →

30,919
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
golang.org/x/net@v0.40.0
stdlib@go1.23.8
0.53.0
1.25.10

Open the chart page →

5,478
gha-runner-scale-set-controllerrunner-scale-set-controller0.14.21 of 1See more

gha-runner-scale-set-controller runner-scale-set-controller 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/actions/gha-runner-scale-set-controller:0.14.21b4c7f62e971
golang.org/x/net@v0.52.0
0.53.0

Open the chart page →

369
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.53.0
1.25.10

Open the chart page →

3,845
rybbitrybbit-helm1.3.23 of 7See more

rybbit rybbit-helm 1.3.2

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.53.0
1.25.10
library/postgres:15-alpinea46e076249ce
stdlib@go1.24.6
1.25.10
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
stdlib@go1.20.7
1.25.10

Open the chart page →

6,145
janitorrryuunosukeds30.1.31 of 1See more

janitorr ryuunosukeds3 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
stdlib@go1.24.6
1.25.10

Open the chart page →

1,012
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
golang.org/x/net@v0.37.0
stdlib@go1.23.9
0.53.0
1.25.10

Open the chart page →

2,707
sagawisesagawiseVerified publisher0.1.02 of 3See more

sagawise sagawise 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
stdlib@go1.22.9
1.25.10
venturenox/sagawise:latestc11d32f18718
stdlib@go1.22.2
1.25.10

Open the chart page →

4,396
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17
0.53.0
1.25.10

Open the chart page →

2,979
tusdsagikazarmarkVerified publisher0.1.21 of 1See more

tusd sagikazarmark 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
tusproject/tusd:v1.10.01e457b59fd5b
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.19.2
0.53.0
1.25.10

Open the chart page →

1,553
fmtok8s-agenda-servicesalaboy0.1.21 of 2See more

fmtok8s-agenda-service salaboy 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
stdlib@go1.18.10
1.25.10

Open the chart page →

2,615
fmtok8s-c4p-servicesalaboy0.1.11 of 2See more

fmtok8s-c4p-service salaboy 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
stdlib@go1.19.7
1.25.10

Open the chart page →

2,615
fmtok8s-conference-chartsalaboy0.1.43 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

3 of the 6 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
stdlib@go1.18.10
1.25.10
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
stdlib@go1.19.7
1.25.10
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
stdlib@go1.17.11
1.25.10

Open the chart page →

16,313
fmtok8s-email-servicesalaboy0.2.01 of 1See more

fmtok8s-email-service salaboy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
stdlib@go1.17.11
1.25.10

Open the chart page →

2,917
knative-helm-operatorsalaboy1.9.02 of 2See more

knative-helm-operator salaboy 1.9.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/operator/cmd/webhookdigest-pinned6c5c90cdf707
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.5
0.53.0
1.25.10
gcr.io/knative-releases/knative.dev/serving/cmd/default-domaindigest-pinned5e0429b70299
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.5
0.53.0
1.25.10

Open the chart page →

2,347
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.10

Open the chart page →

20,287
hellowsamarthya2.0.01 of 1See more

hellow samarthya 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
samarthya/spinnaker:v1.0ef06d81036af
golang.org/x/net@v0.0.0-20210913180222-943fd674d43e
stdlib@go1.17.6
0.53.0
1.25.10

Open the chart page →

2,122
saml-exportersaml-exporter0.5.02 of 2See more

saml-exporter saml-exporter 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.25.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10

Open the chart page →

1,522
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mongo:noble6ede2806c78e
stdlib@go1.24.6
1.25.10

Open the chart page →

2,382
sample-applicationsample-application1.0.61 of 1See more

sample-application sample-application 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.25.10

Open the chart page →

532
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/net@v0.51.0
stdlib@go1.25.7
0.53.0
1.25.10
library/influxdb:2.7b8d940ca9376
golang.org/x/net@v0.38.0
stdlib@go1.18.2
0.53.0
1.25.10

Open the chart page →

12,937
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
golang.org/x/net@v0.9.0
stdlib@go1.19.6
0.53.0
1.25.10

Open the chart page →

4,797
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.10

Open the chart page →

20,287
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
stdlib@go1.19.8
1.25.10

Open the chart page →

10,322
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
golang.org/x/net@v0.45.0
stdlib@go1.25.3
0.53.0
1.25.10

Open the chart page →

1,832
harborsb-helm-charts0.3.02 of 2See more

harbor sb-helm-charts 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
golang.org/x/net@v0.24.0
stdlib@go1.22.6
0.53.0
1.25.10
goharbor/registry-photon:v2.11.15645d459af2b
stdlib@go1.22.6
1.25.10

Open the chart page →

1,695
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.10

Open the chart page →

2,627
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
golang.org/x/net@v0.45.0
stdlib@go1.24.10
0.53.0
1.25.10

Open the chart page →

828

Container images carrying it

4,792 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
webdevops/pagerduty-exporter:25.12.183b95faf10a0
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.53.0
1.25.10
1
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.13.5
0.53.0
1.25.10
1
wernight/ngrok:latestd211f29ebcfe
golang.org/x/net@v0.17.0
stdlib@go1.21.6
0.53.0
1.25.10
1
willnorris/imageproxy:latest21d0c90f4c31
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.8
0.53.0
1.25.10
1
wistefan/vcbackend:0.0.13bd436164b51
stdlib@go1.18.3
1.25.10
1
wolveix/satisfactory-server:v1.9.1199be1064b18
stdlib@go1.18.1
1.25.10
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
stdlib@go1.18.1
1.25.10
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
stdlib@go1.20.12
1.25.10
1
wuhan005/forklift:daemon4e6da210e449
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.53.0
1.25.10
1
wuhan005/forklift:controllerbfbe82d59850
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.53.0
1.25.10
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.13
0.53.0
1.25.10
1
xosphere/xonodepools:1.0.71458097b6f85
golang.org/x/net@v0.49.0
stdlib@go1.26.2
0.53.0
1.25.10
1
xperimental/nextcloud-exporter:0.9.13e90a3897651
stdlib@go1.26.1
1.25.10
1
yandex/clickhouse-server:latest1cbf75aabe1e
stdlib@go1.16.7
1.25.10
1
yetiplatform/bloomcheck:dev85683ddfccbb
stdlib@go1.24.2
1.25.10
1
ygqygq2/mysql-exec-sql:latest54f30def1558
stdlib@go1.18.2
1.25.10
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
stdlib@go1.20.12
1.25.10
1
ymuski/geo-checker:5.0.05ba7fd8c7bdc
stdlib@go1.25.3
1.25.10
1
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.25.10
1
youssef11gaber10/deployment-auth-go:latest6597b26959d2
golang.org/x/net@v0.10.0
stdlib@go1.26.1
0.53.0
1.25.10
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
golang.org/x/net@v0.41.0
stdlib@go1.24.10
0.53.0
1.25.10
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.18.1
0.53.0
1.25.10
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.25.10
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
stdlib@go1.18.1
1.25.10
1
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
golang.org/x/net@v0.50.0
stdlib@go1.26.1
0.53.0
1.25.10
1
zahoriaut/zahori-scheduler:1.0.047d0979b1184
stdlib@go1.20.5
1.25.10
1
zeetdev/tailscale-relay:v1.24.21967aa2840b6
golang.org/x/net@v0.0.0-20220407224826-aac1ed45d8e3
stdlib@go1.18.1-ts710a0d8610
0.53.0
1.25.10
1
zer0tonin/mikochi:1.11.009872bae1554
golang.org/x/net@v0.40.0
0.53.0
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
golang.org/x/net@v0.49.0
0.53.0
1
zufardhiyaulhaq/community-operator-v2:v1.0.07f1bbbe114eb
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.17.12
0.53.0
1.25.10
1
zufardhiyaulhaq/devopsweekly:v2.1.046625567fb60
golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2
stdlib@go1.17.13
0.53.0
1.25.10
1
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2
stdlib@go1.17.12
0.53.0
1.25.10
1
zufardhiyaulhaq/istio-ratelimit-operator:v2.15.0692cfc9d6614
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.53.0
1.25.10
1
zufardhiyaulhaq/javascriptweekly:v2.1.086424bd0b2a4
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.17.13
0.53.0
1.25.10
1
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f
stdlib@go1.16.15
0.53.0
1.25.10
1
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.15
0.53.0
1.25.10
1
zufardhiyaulhaq/nodejsweekly:v1.1.0306859a3f167
golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f
stdlib@go1.16.15
0.53.0
1.25.10
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.13.15
0.53.0
1.25.10
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
golang.org/x/net@v0.8.0
stdlib@go1.19.9
0.53.0
1.25.10
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
golang.org/x/net@v0.33.0
stdlib@go1.24.1
0.53.0
1.25.10
1
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.13.5
0.53.0
1.25.10
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.13.14
0.53.0
1.25.10
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
golang.org/x/net@v0.33.0
stdlib@go1.22.8
0.53.0
1.25.10
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
stdlib@go1.25.8
1.25.10
1
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.19.3
0.53.0
1.25.10
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.53.0
1.25.10
1
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.15.6
0.53.0
1.25.10
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.15.10
0.53.0
1.25.10
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.15.6
0.53.0
1.25.10
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
golang.org/x/net@v0.0.0-20190628185345-da137c7871d7
stdlib@go1.15.10
0.53.0
1.25.10
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.