CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,056; of 17,787 indexed, latest versions
Container images: 4,691; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,056 of 17,787 indexed charts deploy, on 4,691 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,537
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,584

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,056 by stars

Chart

Latest

Affected images

Radar Score

lumenvoxlumenvox

7.1.0

10 of 11 See more

lumenvox lumenvox 7.1.0

10 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :7.1	12310cf52f79	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/archive :7.1	5114f08ab8ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/cloud-init-tools :7.1	de940e2ec601	stdlib@go1.26.2	1.25.10
lumenvox/configuration :7.1	82bf01d9ebec	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/deployment :7.1	dadac2a74be6	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/file-store :7.1	38aa8711c9ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/license :7.1	35d0b1ac053e	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/management-api :7.1	6420a6e7d6c2	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/resource :7.1	93fd6ff1d62c	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10
lumenvox/storage :7.1	c961fe78e2ca	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

4,284

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.10
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.53.0 1.25.10
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.25.10
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.53.0 1.25.10
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.25.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

71,216

dnsbl-exporterluzilla

0.5.0

1 of 2 See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/luzilla/dnsbl_exporter :v0.12.0	ecba7360ff12	stdlib@go1.25.0	1.25.10

Open the chart page →

1,147

lynqlynq

1.1.22

1 of 1 See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-lynq/lynq :1.1.22	229b05e3c717	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

621

magentomagento

3.2.3

5 of 12 See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.25.10
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.25.10
longhornio/longhorn-manager :v1.10.0	5b0bc1b88f0c	golang.org/x/net@v0.44.0 stdlib@go1.24.6	0.53.0 1.25.10
longhornio/longhorn-share-manager :v1.10.0	9f6e5e3be8ab	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
longhornio/longhorn-ui :v1.10.0	e60f36161511	stdlib@go1.24.6	1.25.10

Open the chart page →

13,582

mcp-orchestratormagertron

3.8.23

1 of 6 See more

mcp-orchestrator magertron 3.8.23

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	18cfe3ef5e68	stdlib@go1.24.6	1.25.10

Open the chart page →

1,704

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.53.0 1.25.10

Open the chart page →

1,972

plane-enterprisemakeplane

3.7.2

3 of 13 See more

plane-enterprise makeplane 3.7.2

3 of the 13 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.25.10
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

4,942

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.53.0 1.25.10

Open the chart page →

3,606

Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacion

1.0.1

1 of 6 See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8	b3b90af2a655	stdlib@go1.24.6	1.25.10

Open the chart page →

19,192

mcpmcp-charts

0.0.23

2 of 7 See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/net@v0.43.0 stdlib@go1.25.4	0.53.0 1.25.10
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/net@v0.44.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

6,994

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.53.0 1.25.10
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.53.0 1.25.10

Open the chart page →

5,308

metadata-injectormetadata-injector-operator

0.0.1

1 of 1 See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.53.0 1.25.10

Open the chart page →

561

metrics-server-exportermetrics-server-exporter

2.4.0

1 of 1 See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

1,273

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.53.0 1.25.10

Open the chart page →

3,254

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

4,184

librenmsmidokura-community

0.3.2

1 of 6 See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.25.10

Open the chart page →

8,967

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.53.0 1.25.10

Open the chart page →

3,168

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.53.0 1.25.10

Open the chart page →

6,915

mimir-syncmimir-sync

3.1.0

1 of 1 See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

1,293

minecraft-exporterminecraft-exporter

0.16.0

1 of 1 See more

minecraft-exporter minecraft-exporter 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/net@v0.51.0	0.53.0

Open the chart page →

362

miniapiminiapi

1.3.2

1 of 1 See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/miniapi :1.3.2	8a7042db82ce	stdlib@go1.23.2	1.25.10

Open the chart page →

854

mlflow-servermlflowserver

0.1.9

1 of 3 See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

5,804

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

11,108

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

2,678

model-manager-servermodel-manager-server

1.27.0

1 of 1 See more

model-manager-server model-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

733

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.53.0 1.25.10

Open the chart page →

13,763

redminemt190502

7.3.4

2 of 3 See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	stdlib@go1.24.6	1.25.10
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.25.10

Open the chart page →

7,552

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

2,059

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

1,412

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.25.10

Open the chart page →

899

simple-gowikimy-helm-charts

0.2.0

1 of 1 See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.25.10

Open the chart page →

399

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.25.10

Open the chart page →

3,729

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.25.10

Open the chart page →

2,634

surveyornats

0.20.9

1 of 1 See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
natsio/nats-surveyor :0.9.9	104a3e938b23	stdlib@go1.26.1	1.25.10

Open the chart page →

909

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

745

spring-helmnaveenalla-springboot

1.0.0

1 of 2 See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,638

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.53.0 1.25.10
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.25.10
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0 stdlib@go1.20.13	0.53.0 1.25.10
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.53.0 1.25.10
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.53.0 1.25.10
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.25.10

Open the chart page →

37,441

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.53.0 1.25.10

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

1,229

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.25.10

Open the chart page →

14,324

nri-resource-policy-balloonsnri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-balloons nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons :v0.14.0	a8c8297c7274	stdlib@go1.26.0	1.25.10

Open the chart page →

279

nri-resource-policy-topology-awarenri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-topology-aware nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware :v0.14.0	e2443833726a	stdlib@go1.26.0	1.25.10

Open the chart page →

279

nutanix-csi-snapshotnutanix-helm-releases

8.3.0

1 of 1 See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

423

octopuso7studios-octopus-helm-charts

1.2.3

4 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.11.9-alpine	777787bbb4c7	stdlib@go1.24.7	1.25.10
natsio/nats-box :0.18.0	abdc9f9f0120	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10
natsio/nats-server-config-reloader :0.19.1	81edf32a3680	stdlib@go1.24.5	1.25.10
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

6,110

oadaoada

5.0.5

1 of 11 See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

13,319

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.53.0 1.25.10

Open the chart page →

1,171

oci-native-ingress-controlleroci-native-ingress-controller

1.0.0

1 of 1 See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

434

growthbookone-acre-fund

0.3.0

1 of 3 See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

502

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.25.10

Open the chart page →

5,300

Container images carrying it

4,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.53.0 1.25.10	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.53.0 1.25.10	2
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.25.10	2
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.53.0 1.25.10	2
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/net@v0.23.0 stdlib@go1.23.9	0.53.0 1.25.10	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	2
alpine/kubectl :1.35.4	9ccd82364762	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.53.0 1.25.10	2
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10	2
apecloud/apecloud-mcp :0.1.0	94041b080510	stdlib@go1.23.7	1.25.10	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.53.0 1.25.10	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.53.0 1.25.10	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.53.0 1.25.10	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10	2
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.53.0 1.25.10	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.53.0 1.25.10	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.53.0 1.25.10	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	stdlib@go1.23.7	1.25.10	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.25.10	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.10	2
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.25.10	2
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.25.10	2
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.10	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.25.10	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.53.0 1.25.10	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.53.0 1.25.10	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.53.0 1.25.10	2
bloomberg/goldpinger :3.11.3	a8ea8c61ff4c	golang.org/x/net@v0.49.0	0.53.0	2
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	stdlib@go1.24.4	1.25.10	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.53.0 1.25.10	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0 stdlib@go1.20.14	0.53.0 1.25.10	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.5	0.53.0 1.25.10	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.25.10	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.10	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0 stdlib@go1.25.2	0.53.0 1.25.10	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.53.0 1.25.10	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.53.0 1.25.10	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.53.0 1.25.10	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.53.0 1.25.10	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.25.10	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.53.0 1.25.10	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.53.0 1.25.10	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.53.0 1.25.10	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.2	0.53.0 1.25.10	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.15	0.53.0 1.25.10	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.53.0 1.25.10	2