StackRadar

CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,127
of 17,805 indexed, latest versions
Container images
4,734
deployed by those charts
Fix available
2 of 2
affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,127 of 17,805 indexed charts deploy, on 4,734 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+180 more1.25.104,576
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more0.53.03,613
OSV records
GO-2026-4918
Also known as
BIT-golang-2026-33814

Charts affected

4,127 by stars
ChartLatestAffected imagesRadar Score
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
stdlib@go1.18.2
1.25.10

Open the chart page →

5,558
prometheus-druid-exporterprometheus-communityVerified publisher1.2.01 of 1See more

prometheus-druid-exporter prometheus-community 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
quay.io/opstree/druid-exporter:v0.119f01c9c5c2e3
stdlib@go1.15.15
1.25.10

Open the chart page →

1,179
prometheus-pingmesh-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-pingmesh-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
dongjiang1989/pingmesh-agent:v1.2.2c82de0272da0
golang.org/x/net@v0.29.0
stdlib@go1.22.9
0.53.0
1.25.10

Open the chart page →

856
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.53.0
1.25.10

Open the chart page →

1,352
prometheusprometheus-worawutchan13.0.05 of 6See more

prometheus prometheus-worawutchan 13.0.0

5 of the 6 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.25.10
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.25.10
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.53.0
1.25.10
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.53.0
1.25.10
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15.3
0.53.0
1.25.10

Open the chart page →

9,951
operatorpunchplatform8.1.131 of 1See more

operator punchplatform 8.1.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
golang.org/x/net@v0.20.0
stdlib@go1.22.0
0.53.0
1.25.10

Open the chart page →

719
kubernetes-dashboardpyalive-cdmswebappVerified publisher5.8.01 of 1See more

kubernetes-dashboard pyalive-cdmswebapp 5.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.6.1290bebc3cd96
golang.org/x/net@v0.0.0-20220526153639-5463443f8c37
stdlib@go1.19
0.53.0
1.25.10

Open the chart page →

1,663
go-kube-downscalerpy-kube-downscalerVerified publisher1.3.41 of 1See more

go-kube-downscaler py-kube-downscaler 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
golang.org/x/net@v0.49.0
0.53.0

Open the chart page →

234
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.2
0.53.0
1.25.10

Open the chart page →

56,538
qt-vaultqt-vaultVerified publisher0.1.21 of 1See more

qt-vault qt-vault 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/mcman2017/qt-vault:v0.1.2852edf54c850
golang.org/x/net@v0.38.0
stdlib@go1.24.11
0.53.0
1.25.10

Open the chart page →

305
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.19.4
0.53.0
1.25.10

Open the chart page →

6,929
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
stdlib@go1.22.2
1.25.10

Open the chart page →

2,854
jobs-managerraczylo-comVerified publisher0.1.151 of 1See more

jobs-manager raczylo-com 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
golang.org/x/net@v0.49.0
stdlib@go1.25.0
0.53.0
1.25.10

Open the chart page →

501
kube-images-syncraczylo-comVerified publisher0.5.571 of 1See more

kube-images-sync raczylo-com 0.5.57

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.53.0
1.25.10

Open the chart page →

415
velero-s3-deploymentradar-baseVerified publisher0.4.23 of 4See more

velero-s3-deployment radar-base 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
velero/velero:v1.9.0277fbfaf8dcf
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.18
0.53.0
1.25.10
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17.11
0.53.0
1.25.10
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/net@v0.29.0
stdlib@go1.23.4
0.53.0
1.25.10

Open the chart page →

4,821
ravendb-operatorravendb-operatorOfficialVerified publisher2.1.01 of 1See more

ravendb-operator ravendb-operator 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ravendb/ravendb-operator:2.1.0511050205ac5
golang.org/x/net@v0.48.0
0.53.0

Open the chart page →

355
rbac-serverrbac-server1.19.11 of 1See more

rbac-server rbac-server 1.19.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.53.0
1.25.10

Open the chart page →

705
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
golang.org/x/net@v0.27.0
stdlib@go1.23.3
0.53.0
1.25.10

Open the chart page →

1,680
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
golang.org/x/net@v0.26.0
stdlib@go1.22.6
0.53.0
1.25.10

Open the chart page →

2,706
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
stdlib@go1.24.6
1.25.10

Open the chart page →

4,330
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.53.0
1.25.10

Open the chart page →

924
docker-registry-mirrorregistry-mirror1.0.11 of 1See more

docker-registry-mirror registry-mirror 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.25.10

Open the chart page →

550
reportportalreportportal-ioOfficialVerified publisher26.8.127 of 15See more

reportportal reportportal-io 26.8.12

7 of the 15 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.10
library/rabbitmq:4.3.4-managementeb5295d08332
stdlib@go1.22.2
1.25.10
rancher/kubectl:v1.36.206c7a7a97727
golang.org/x/net@v0.49.0
0.53.0
reportportal/k8s-wait-for:latest06cdf299b397
golang.org/x/net@v0.49.0
0.53.0
reportportal/migrations:5.15.4464468240d7b
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.53.0
1.25.10
reportportal/service-index:5.15.1b1860ed33071
stdlib@go1.26.2
1.25.10

Open the chart page →

12,304
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:9.6caddd35b05cd
stdlib@go1.16.7
1.25.10

Open the chart page →

6,647
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
golang.org/x/net@v0.21.0
stdlib@go1.22.2
0.53.0
1.25.10
resurfaceio/resurface:3.7.84d5cda2f64109
stdlib@go1.23.0
1.25.10

Open the chart page →

7,534
right-sizerright-sizer0.6.21 of 1See more

right-sizer right-sizer 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
aavishay/right-sizer:0.6.23d7c4d79595c
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.53.0
1.25.10

Open the chart page →

291
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd
stdlib@go1.17.13
0.53.0
1.25.10

Open the chart page →

2,057
rke2-canalrke2-charts3.13.32 of 2See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.53.0
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.53.0

Open the chart page →

7,005
rke2-ingress-nginxrke2-charts4.15.1102 of 2See more

rke2-ingress-nginx rke2-charts 4.15.110

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.53.0
1.25.10
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
golang.org/x/net@v0.52.0
stdlib@go1.24.13
0.53.0
1.25.10

Open the chart page →

734
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.53.0
1.25.10

Open the chart page →

1,723
hcloud-fip-controllerrlex0.2.51 of 1See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa
stdlib@go1.15.3
0.53.0
1.25.10

Open the chart page →

2,963
prometheus-webhook-dingtalkrlex0.0.31 of 1See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
stdlib@go1.13.5
1.25.10

Open the chart page →

1,853
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
stdlib@go1.22.6
1.25.10

Open the chart page →

9,960
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
stdlib@go1.19.7
1.25.10

Open the chart page →

4,745
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f
stdlib@go1.17.6
0.53.0
1.25.10

Open the chart page →

2,843
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.53.0
1.25.10

Open the chart page →

1,861
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.53.0
1.25.10

Open the chart page →

1,804
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
golang.org/x/net@v0.40.0
stdlib@go1.24.5
0.53.0
1.25.10

Open the chart page →

2,721
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.25.10

Open the chart page →

7,608
node-exporterromanow-helm-chartsVerified publisher1.7.11 of 1See more

node-exporter romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.53.0
1.25.10

Open the chart page →

845
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
stdlib@go1.24.6
1.25.10

Open the chart page →

1,688
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/net@v0.24.0
stdlib@go1.22.3
0.53.0
1.25.10

Open the chart page →

1,160
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.25.10
timescale/timescaledb-ha:pg16d7db8f1085a3
golang.org/x/net@v0.26.0
stdlib@go1.23.0
0.53.0
1.25.10

Open the chart page →

13,086
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
stdlib@go1.24.4
1.25.10

Open the chart page →

4,015
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.53.0
1.25.10

Open the chart page →

30,782
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17
0.53.0
1.25.10

Open the chart page →

2,002
conference-appsalaboy1.0.04 of 7See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
stdlib@go1.20.1
1.25.10
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
stdlib@go1.20.1
1.25.10
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned1ff7c90845e4
stdlib@go1.20.1
1.25.10
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
stdlib@go1.20.1
1.25.10

Open the chart page →

11,094
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
golang.org/x/net@v0.11.0
stdlib@go1.20.5
0.53.0
1.25.10

Open the chart page →

1,773
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.53.0
1.25.10

Open the chart page →

38,733
scaleway-csiscaleway-charts0.2.18 of 8See more

scaleway-csi scaleway-charts 0.2.1

8 of the 8 container images this version deploys carry CVE-2026-33814.

Container imageDigestPackageFixed in
scaleway/scaleway-csi:v0.3.411135998e31c
golang.org/x/net@v0.42.0
stdlib@go1.24.12
0.53.0
1.25.10
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.53.0
1.25.10
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10

Open the chart page →

3,860

Container images carrying it

4,734 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
golang.org/x/net@v0.30.0
stdlib@go1.22.10
0.53.0
1.25.10
1
ghcr.io/bbdsoftware/litellm-operator:1.1.2167a51113d90
golang.org/x/net@v0.49.0
stdlib@go1.26.2
0.53.0
1.25.10
1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.17.12
0.53.0
1.25.10
1
ghcr.io/behappy-project/behappy-tencentcloud-exporter:0.1.3a0ba56e1501b
stdlib@go1.21.13
1.25.10
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
golang.org/x/net@v0.10.0
stdlib@go1.20.8
0.53.0
1.25.10
1
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.17.2
0.53.0
1.25.10
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
golang.org/x/net@v0.43.0
stdlib@go1.23.6
0.53.0
1.25.10
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.53.0
1.25.10
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
golang.org/x/net@v0.8.0
stdlib@go1.17.1
0.53.0
1.25.10
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
golang.org/x/net@v0.8.0
stdlib@go1.20.3
0.53.0
1.25.10
1
ghcr.io/blind-oracle/cortex-tenant:v2.0.09f8896ffc15b
golang.org/x/net@v0.38.0
stdlib@go1.25.1
0.53.0
1.25.10
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
stdlib@go1.25.7
1.25.10
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
stdlib@go1.25.6
1.25.10
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
golang.org/x/net@v0.38.0
stdlib@go1.24.9
0.53.0
1.25.10
1
ghcr.io/bojanzelic/cloudflare-zero-trust-operator:0.7.1f4b2dbc19a78
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.53.0
1.25.10
1
ghcr.io/borchero/switchboard:0.7.454a193b757da
golang.org/x/net@v0.51.0
stdlib@go1.26.1
0.53.0
1.25.10
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
stdlib@go1.23.5
1.25.10
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
stdlib@go1.21.6
1.25.10
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
golang.org/x/net@v0.7.0
stdlib@go1.18.10
0.53.0
1.25.10
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.53.0
1.25.10
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
golang.org/x/net@v0.42.0
stdlib@go1.25.0
0.53.0
1.25.10
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
stdlib@go1.19.8
1.25.10
1
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
golang.org/x/net@v0.35.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.19.2
0.53.0
1.25.10
1
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
golang.org/x/net@v0.49.0
0.53.0
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.53.0
1.25.10
1
ghcr.io/camilorivera/cert-manager-acm-sync:0.7.489a83796a550
golang.org/x/net@v0.49.0
0.53.0
1
ghcr.io/camptocamp/prometheus-puppetdb-sd:0.14.0414c0c99fd06
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.53.0
1.25.10
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.53.0
1.25.10
1
ghcr.io/caninehq/canine:latesta058034ca006
golang.org/x/net@v0.26.0
stdlib@go1.22.7
0.53.0
1.25.10
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.53.0
1.25.10
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
golang.org/x/net@v0.44.0
stdlib@go1.24.6
0.53.0
1.25.10
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
golang.org/x/net@v0.27.0
stdlib@go1.23.0
0.53.0
1.25.10
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
golang.org/x/net@v0.49.0
stdlib@go1.25.6
0.53.0
1.25.10
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
stdlib@go1.22.10
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
golang.org/x/net@v0.52.0
0.53.0
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
golang.org/x/net@v0.52.0
0.53.0
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
golang.org/x/net@v0.17.0
stdlib@go1.16.2
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.18
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
golang.org/x/net@v0.44.0
stdlib@go1.24.4
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
golang.org/x/net@v0.17.0
stdlib@go1.20.8
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.18
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
golang.org/x/net@v0.52.0
0.53.0
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
golang.org/x/net@v0.44.0
stdlib@go1.24.4
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
golang.org/x/net@v0.44.0
stdlib@go1.24.4
0.53.0
1.25.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.18
0.53.0
1.25.10
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.