CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,127; of 17,805 indexed, latest versions
Container images: 4,734; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,127 of 17,805 indexed charts deploy, on 4,734 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+180 more	1.25.10	4,576
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,613

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,127 by stars

Chart

Latest

Affected images

Radar Score

teamcityscalified-teamcity

2026.2.0

1 of 3 See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,688

schemaheroschemahero

1.4.0

1 of 1 See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

2,208

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.53.0 1.25.10
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.53.0 1.25.10

Open the chart page →

6,599

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

4,063

secrethorsecrethor

1.1.2

1 of 1 See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

529

securosecuro

0.16.0

1 of 4 See more

securo securo 0.16.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
pgvector/pgvector :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.10

Open the chart page →

3,572

selenosis-deployselenosis

2.1.3

4 of 4 See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.0	93b7cdbab14b	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.53.0 1.25.10
alcounit/browser-service :v0.0.9	4bd10defc324	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.53.0 1.25.10
alcounit/browser-ui :v0.0.9	6a977c92ef27	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.53.0 1.25.10
alcounit/selenosis :v2.1.1	d01a9dbbd943	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.53.0 1.25.10

Open the chart page →

1,580

karakeepself-hosters-by-night

2.5.1

1 of 1 See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	stdlib@go1.23.10	1.25.10

Open the chart page →

5,238

sentry-k8ssentry-k8s

1.4.1

3 of 11 See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.25.10
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.25.10

Open the chart page →

16,955

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	golang.org/x/net@v0.30.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

463

vuiseriohub

1.0.6

2 of 3 See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10
dserio83/velero-ui :0.3.1	b4e1ec6664d3	stdlib@go1.23.7	1.25.10

Open the chart page →

11,645

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.53.0 1.25.10

Open the chart page →

486

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

802

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.53.0 1.25.10

Open the chart page →

1,206

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.53.0 1.25.10
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.25.10

Open the chart page →

4,703

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.53.0 1.25.10
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.53.0 1.25.10

Open the chart page →

5,133

scaffoldsigstore

0.6.115

9 of 15 See more

scaffold sigstore 0.6.115

9 of the 15 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.25.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.25.10
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	stdlib@go1.26.0	1.25.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	stdlib@go1.26.0	1.25.10

Open the chart page →

7,853

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0	0.53.0

Open the chart page →

429

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.53.0 1.25.10

Open the chart page →

4,641

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

4,974

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10

Open the chart page →

6,424

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.53.0 1.25.10

Open the chart page →

2,201

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.53.0 1.25.10

Open the chart page →

2,302

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	golang.org/x/net@v0.44.0	0.53.0

Open the chart page →

736

wireguardslybase-wireguard

2.0.6

1 of 1 See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls122	dca67384e3e9	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

478

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.53.0 1.25.10
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.53.0 1.25.10
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.53.0 1.25.10

Open the chart page →

7,728

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

1,151

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.25.10

Open the chart page →

1,462

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.53.0 1.25.10
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.25.10
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.53.0 1.25.10
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.10
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.53.0 1.25.10
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.53.0 1.25.10

Open the chart page →

14,608

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.53.0 1.25.10

Open the chart page →

2,644

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.53.0 1.25.10
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.10

Open the chart page →

5,107

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.53.0 1.25.10

Open the chart page →

2,592

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.10

Open the chart page →

2,359

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

7,352

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.25.10

Open the chart page →

4,681

rabbitmqsolidcharts

0.7.6

1 of 2 See more

rabbitmq solidcharts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	534e4fefc5f0	stdlib@go1.22.2	1.25.10

Open the chart page →

824

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.53.0 1.25.10
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.53.0 1.25.10
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.53.0 1.25.10
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.53.0 1.25.10

Open the chart page →

9,260

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.53.0 1.25.10

Open the chart page →

2,035

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10

Open the chart page →

1,595

stackradar-scannerstackradar

0.4.0

1 of 1 See more

stackradar-scanner stackradar 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.4.0	73cbeb990cf4	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,222

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.25.10

Open the chart page →

1,503

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.53.0 1.25.10

Open the chart page →

11,462

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,289

graph-nodestakewise

3.1.0

2 of 3 See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :v0.37.0	f4452cdedd68	stdlib@go1.24.1	1.25.10
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0 stdlib@go1.19.8	0.53.0 1.25.10

Open the chart page →

4,737

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.53.0 1.25.10

Open the chart page →

4,370

multusstartechnica

0.1.2

1 of 1 See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :stable	ec4e5dfe12b6	golang.org/x/net@v0.48.0	0.53.0

Open the chart page →

527

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.53.0 1.25.10

Open the chart page →

3,379

stornxstornx

1.1.1

9 of 9 See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.53.0 1.25.10
alazidis/stornx :1.1.1	602d4f7f090c	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.53.0 1.25.10
quay.io/kiali/kiali :v2.23.0	7652b1285f50	golang.org/x/net@v0.49.0 stdlib@go1.25.0	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.53.0 1.25.10
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

11,848

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	golang.org/x/net@v0.36.0 stdlib@go1.23.8	0.53.0 1.25.10
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	golang.org/x/net@v0.36.0 stdlib@go1.23.8	0.53.0 1.25.10

Open the chart page →

1,298

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.53.0 1.25.10
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.53.0 1.25.10
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

12,032

Container images carrying it

4,734 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/formancehq/console-v3 :v1.16.0	c99e8ef2c545	stdlib@go1.23.8	1.25.10	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.53.0 1.25.10	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.53.0 1.25.10	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/formancehq/portal :v1.16.0	6efef5d19d56	stdlib@go1.23.8	1.25.10	1
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.53.0 1.25.10	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.25.10	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.53.0 1.25.10	1
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	stdlib@go1.24.0	1.25.10	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10	1
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.53.0 1.25.10	1
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.25.10	1
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.25.10	1
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.53.0 1.25.10	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.53.0 1.25.10	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.25.10	1
ghcr.io/gijsvandulmen/k8qu :1.4	e897b18db13d	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.53.0 1.25.10	1
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/net@v0.43.0 stdlib@go1.25.4	0.53.0 1.25.10	1
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/net@v0.44.0 stdlib@go1.25.4	0.53.0 1.25.10	1
ghcr.io/glassflow/glassflow-etl-be :v3.2.0	20f066d0f631	golang.org/x/net@v0.52.0 stdlib@go1.25.0	0.53.0 1.25.10	1
ghcr.io/glassflow/glassflow-etl-migration :v3.2.0	7db1a1bf3dae	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10	1
ghcr.io/glassflow/kafka-kerberos-gateway :latest	2ae01c524a6e	stdlib@go1.21.13	1.25.10	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0 stdlib@go1.25.0	0.53.0 1.25.10	1
ghcr.io/gnana997/periscope :1.1.6	21b284fb00f2	stdlib@go1.26.2	1.25.10	1
ghcr.io/goauthentik/server :2026.2.1	46a71d75dfd3	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/goauthentik/server :2026.5.6	ed120caf710c	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10	1
ghcr.io/gochain/rpc-proxy/rpc-proxy :latest	ca01f5ab95f7	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.53.0 1.25.10	1
ghcr.io/gomenhashai/gomenhashai :v1.3.3	6f031172a5ec	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.53.0 1.25.10	1
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.53.0 1.25.10	1
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.53.0 1.25.10	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.53.0 1.25.10	1
ghcr.io/grafana/alloy-operator :1.7.0	2ce23f948e02	golang.org/x/net@v0.46.0 stdlib@go1.24.10	0.53.0 1.25.10	1
ghcr.io/grafana/alloy-operator :1.8.1	ae85d68749c7	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10	1
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.53.0 1.25.10	1
ghcr.io/grafana/grafana-operator :v5.22.2	d45fc24e8f43	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.53.0 1.25.10	1
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.2	c7adcc4db378	golang.org/x/net@v0.30.0 stdlib@go1.24.9	0.53.0 1.25.10	1
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.53.0 1.25.10	1
ghcr.io/grycap/oscar :latest	0c58ff972451	golang.org/x/net@v0.51.0	0.53.0	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	golang.org/x/net@v0.42.0 stdlib@go1.25.8	0.53.0 1.25.10	1
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.53.0 1.25.10	1
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0 stdlib@go1.24.13	0.53.0 1.25.10	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.6	0.53.0 1.25.10	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.53.0 1.25.10	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.53.0 1.25.10	1
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/net@v0.43.0 stdlib@go1.24.2	0.53.0 1.25.10	1