CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,202; of 17,828 indexed, latest versions
Container images: 4,829; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,202 of 17,828 indexed charts deploy, on 4,829 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+182 more	1.25.10	4,668
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.53.0	3,685

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,202 by stars

Chart

Latest

Affected images

Radar Score

thingsboardthingsboard

0.1.3

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.10

Open the chart page →

25,588

pagesthiru-pages

1.0.0

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,350

mc-routerthl-charts

0.1.0

1 of 1 See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.4	0.53.0 1.25.10

Open the chart page →

1,856

monitoringthl-charts

0.1.1

8 of 10 See more

monitoring thl-charts 0.1.1

8 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.53.0 1.25.10
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.53.0 1.25.10
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.53.0 1.25.10
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.10
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.53.0 1.25.10
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.53.0 1.25.10

Open the chart page →

18,955

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,350

tile38tile38

0.6.1

1 of 2 See more

tile38 tile38 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tile38/tile38 :1.38.0	5b61c6f3b32e	golang.org/x/net@v0.48.0	0.53.0

Open the chart page →

420

pock-helm-charttinote-chart

0.1.0

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.11	0.53.0 1.25.10

Open the chart page →

6,895

tiny-api-charttiny-api

1.0.0

1 of 1 See more

tiny-api-chart tiny-api 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
stubin87/tiny-api :v1.1.0	2e5c42e92ec8	stdlib@go1.19.1	1.25.10

Open the chart page →

1,127

grafanatnh

5.3.0

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.53.0 1.25.10

Open the chart page →

3,200

jenkinstnh

2.7.1

1 of 2 See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

4,493

prometheustnh

11.6.0

4 of 6 See more

prometheus tnh 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.53.0 1.25.10
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.53.0 1.25.10
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.25.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.53.0 1.25.10

Open the chart page →

8,495

todolist-charttodolist-chart

0.1.7

4 of 10 See more

todolist-chart todolist-chart 0.1.7

4 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/net@v0.10.0 stdlib@go1.23.12	0.53.0 1.25.10
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10
quay.io/prometheus/blackbox-exporter :latest	e753ff9f3fc4	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

7,085

token-servertoken-server

1.0.9

1 of 1 See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/token-server :1.0.9	728013f2fac1	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.53.0 1.25.10

Open the chart page →

1,248

netbirdtotmicro

1.8.2

3 of 4 See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
netbirdio/management :0.60.2	52682e5f48f9	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.53.0 1.25.10
netbirdio/relay :0.60.2	a10762533793	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.53.0 1.25.10
netbirdio/signal :0.60.2	67176bcbf6ab	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

6,097

hub-managertraefik

1.0.0

1 of 1 See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/traefik/hub-manager :v0.45.1	d1cff2560c67	stdlib@go1.26.0	1.25.10

Open the chart page →

649

traefik-jwt-decodetraefik-jwt-decode

0.1.0

1 of 1 See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
simonschneider/traefik-jwt-decode :latest	d674ac370f80	stdlib@go1.17.13	1.25.10

Open the chart page →

1,311

traefik-secrets-exportertraefik-secrets-exporter

0.0.2

1 of 1 See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

1,671

traktortraktor

0.0.17

1 of 1 See more

traktor traktor 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gdxbsv/traktor :0.0.17	675693335054	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

382

nfs-servertranhailong

0.1.2

1 of 1 See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.53.0 1.25.10

Open the chart page →

2,331

apptreenity

0.1.53

1 of 2 See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :17	f4c66b820c6f	stdlib@go1.24.6	1.25.10

Open the chart page →

1,268

treenitytreenity

0.1.3

2 of 4 See more

treenity treenity 0.1.3

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.25.10
library/postgres :14	816cf7d06ec3	stdlib@go1.24.6	1.25.10

Open the chart page →

2,782

trident-protecttrident-protect

100.2606.0

1 of 2 See more

trident-protect trident-protect 100.2606.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	golang.org/x/net@v0.40.0 stdlib@go1.24.12	0.53.0 1.25.10

Open the chart page →

1,379

trident-protect-bxp-previewtrident-protect

100.2511.0-bxp-preview

3 of 3 See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
netapp/controller :25.11.0-bxp-preview	06f6c9a0653f	golang.org/x/net@v0.39.0 stdlib@go1.24.9	0.53.0 1.25.10
netapp/trident-protect-connector :25.11.0-bxp-preview	ec22fc6e5c5a	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.53.0 1.25.10
netapp/trident-protect-utils :v1.0.0	58b9fac358bd	golang.org/x/net@v0.38.0 stdlib@go1.24.8	0.53.0 1.25.10

Open the chart page →

2,201

trident-protect-consoletrident-protect

100.2609.0-console

1 of 3 See more

trident-protect-console trident-protect 100.2609.0-console

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
netapp/trident-protect-utils :v3.0.0	cad26cd945d1	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

5,913

saleor-appstrieb-work

0.6.0

3 of 5 See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	stdlib@go1.23.7	1.25.10
ghcr.io/trieb-work/saleor-apps/saleor-app-search :1.24.3	28edefb6c92d	stdlib@go1.23.7	1.25.10
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	stdlib@go1.23.7	1.25.10

Open the chart page →

7,495

harbor-scanner-trivytrivy-operator

0.31.2

1 of 1 See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

2,490

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.53.0 1.25.10
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

4,817

traceetrivy-operator

0.24.1

1 of 1 See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/tracee :0.24.1	cfbbfee972e6	golang.org/x/net@v0.42.0 stdlib@go1.24.9	0.53.0 1.25.10

Open the chart page →

1,228

trivy-webhook-aws-security-hubtrivy-webhook-aws-security-hub

0.1.20

1 of 1 See more

trivy-webhook-aws-security-hub trivy-webhook-aws-security-hub 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/csepulveda/trivy-webhook-aws-security-hub :v0.1.20	6836b779b060	golang.org/x/net@v0.50.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

618

trivy-webhook-elasticsearchtrivy-webhook-elasticsearch

0.1.4

1 of 1 See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.25.10

Open the chart page →

756

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.53.0 1.25.10

Open the chart page →

7,518

monitorortrozz

0.0.1

1 of 1 See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.53.0 1.25.10

Open the chart page →

3,111

clickhouse-operatortruefoundry

0.1.1

2 of 3 See more

clickhouse-operator truefoundry 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

1,433

tfy-agenttruefoundry

0.2.104

1 of 5 See more

tfy-agent truefoundry 0.2.104

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.4.1	9440a40b3947	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

688

tfy-cloudflaredtruefoundry

0.6.0

1 of 2 See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.53.0 1.25.10

Open the chart page →

2,035

tfy-distributortruefoundry

0.0.1

3 of 4 See more

tfy-distributor truefoundry 0.0.1

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.25.10
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.25.10
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	stdlib@go1.21.3	1.25.10

Open the chart page →

17,408

tfy-inferentia-operatortruefoundry

0.2.8

3 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0 stdlib@go1.22.12	0.53.0 1.25.10
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.53.0 1.25.10
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

2,925

tfy-karpentertruefoundry

0.5.11

2 of 3 See more

tfy-karpenter truefoundry 0.5.11

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/karpenter/controller :1.9.0	30a506c64fbb	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent :v1.5.1-eksbuild.1	988c8e1a273a	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.53.0 1.25.10

Open the chart page →

654

tfy-kservetruefoundry

0.1.1

1 of 2 See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kserve/kserve-controller :v0.10.0	22ff858b57c1	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

1,178

tfy-llm-gateway-infratruefoundry

0.2.10

2 of 3 See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10

Open the chart page →

1,210

tfy-lokitruefoundry

0.1.6

2 of 2 See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/loki :2.9.10	35b02acc6765	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10

Open the chart page →

2,829

truefoundry-monitoringtruefoundry

0.1.6

4 of 8 See more

truefoundry-monitoring truefoundry 0.1.6

4 of the 8 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.0	70d9599b186c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.53.0 1.25.10
ghcr.io/jkroepke/kube-webhook-certgen :1.7.4	7a62bba56a7c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-operator :v0.88.0	b4f51de53357	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

4,600

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	cf78e76683b9	stdlib@go1.24.6	1.25.10

Open the chart page →

5,679

aws-eks-asg-rolling-update-handlertwin

1.5.0

1 of 1 See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

1,119

lighthousetwin

1.0.2

1 of 1 See more

lighthouse twin 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/twin/lighthouse :v0.0.4	5aeda2ea2ba2	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

544

twitter-apptwitter-helm

0.1.12

4 of 8 See more

twitter-app twitter-helm 0.1.12

4 of the 8 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.53.0 1.25.10
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.53.0 1.25.10
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.25.10
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.53.0 1.25.10

Open the chart page →

6,150

kafkatwomartens

0.2.1

1 of 2 See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

1,252

simple-mongodbtyk-helm

0.1.1

1 of 1 See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.25.10

Open the chart page →

4,167

tyk-bootstraptyk-helm

5.3.0

3 of 3 See more

tyk-bootstrap tyk-helm 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.53.0 1.25.10
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.53.0 1.25.10
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.25.10

Open the chart page →

1,374

tyk-control-planetyk-helm

5.3.0

3 of 7 See more

tyk-control-plane tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.53.0 1.25.10
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.53.0 1.25.10
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.25.10

Open the chart page →

3,259

Container images carrying it

4,829 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/net@v0.47.0 stdlib@go1.24.3	0.53.0 1.25.10	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.53.0 1.25.10	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.53.0 1.25.10	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.53.0 1.25.10	1
ghcr.io/loft-sh/vcluster-platform :4.12.1	9bc88940affc	golang.org/x/net@v0.52.0	0.53.0	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/net@v0.46.0 stdlib@go1.24.2	0.53.0 1.25.10	1
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.53.0 1.25.10	1
ghcr.io/loxilb-io/loxilb :latest	a475b43946b3	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.53.0 1.25.10	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.15	0.53.0 1.25.10	1
ghcr.io/lukaszraczylo/jobs-manager-operator :0.1.15	e6239e2838d7	golang.org/x/net@v0.49.0 stdlib@go1.25.0	0.53.0 1.25.10	1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator :0.5.57	a424948c8143	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/net@v0.26.0 stdlib@go1.23.4	0.53.0 1.25.10	1
ghcr.io/luzifer/ots :v1.21.5	c94f6c9ed173	stdlib@go1.26.2	1.25.10	1
ghcr.io/luzilla/dnsbl_exporter :v0.7.0-rc3	d9767232a55e	golang.org/x/net@v0.20.0 stdlib@go1.20.14	0.53.0 1.25.10	1
ghcr.io/luzilla/dnsbl_exporter :v0.12.0	ecba7360ff12	stdlib@go1.25.0	1.25.10	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.25.10	1
ghcr.io/madeddie/opds-aggregator :latest	60c56021c552	stdlib@go1.24.13	1.25.10	1
ghcr.io/mailcow/prometheus-exporter :2.1.0	cb76395b84eb	stdlib@go1.23.12	1.25.10	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/net@v0.38.0 stdlib@go1.22.7	0.53.0 1.25.10	1
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	stdlib@go1.20.12	1.25.10	1
ghcr.io/marthydavid/kafka-keda-golang-consumer :0.0.4	e07644865dd1	stdlib@go1.23.0	1.25.10	1
ghcr.io/marthydavid/kafka-keda-golang-producer :0.0.4	54b242c7bf2b	stdlib@go1.23.0	1.25.10	1
ghcr.io/matanbaruch/cursor-admin-api-exporter :0.1.8	ba3a29fc479a	stdlib@go1.24.5	1.25.10	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.53.0 1.25.10	1
ghcr.io/mattn/picoclaw :latest	517556c8b144	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.53.0 1.25.10	1
ghcr.io/mcman2017/qt-vault :v0.1.2	852edf54c850	golang.org/x/net@v0.38.0 stdlib@go1.24.11	0.53.0 1.25.10	1
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	stdlib@go1.24.4	1.25.10	1
ghcr.io/mealie-recipes/mealie :v3.2.1	322369a5b748	stdlib@go1.24.4	1.25.10	1
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	stdlib@go1.24.4	1.25.10	1
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	stdlib@go1.19.8	1.25.10	1
ghcr.io/mealie-recipes/mealie :v3.7.0	bb2939094eed	stdlib@go1.24.4	1.25.10	1
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	golang.org/x/net@v0.33.0 stdlib@go1.24.0	0.53.0 1.25.10	1
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	golang.org/x/net@v0.33.0 stdlib@go1.24.0	0.53.0 1.25.10	1
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.53.0 1.25.10	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.53.0 1.25.10	1
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	golang.org/x/net@v0.20.0 stdlib@go1.22.3	0.53.0 1.25.10	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.53.0 1.25.10	1
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	golang.org/x/net@v0.40.0 stdlib@go1.24.11	0.53.0 1.25.10	1
ghcr.io/metrico/gigapipe :v4.1.6	caeb2652ce5e	stdlib@go1.26.2	1.25.10	1
ghcr.io/mgumz/mtr-exporter :0.4.0	f4691c8fe8eb	stdlib@go1.22.8	1.25.10	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/net@v0.4.0 stdlib@go1.18.9	0.53.0 1.25.10	1
ghcr.io/middleware-labs/mw-auto-injector :0.1.1	8512248e17e8	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.53.0 1.25.10	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/net@v0.14.0 stdlib@go1.20.14	0.53.0 1.25.10	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10	1
ghcr.io/middleware-labs/mw-kube-agent :1.21.0	ff23f452813a	stdlib@go1.25.6	1.25.10	1
ghcr.io/middleware-labs/mw-kube-agent-config-updater :1.21.0	d4edc3f244f4	stdlib@go1.25.6	1.25.10	1
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	golang.org/x/net@v0.26.0 stdlib@go1.24.0	0.53.0 1.25.10	1
ghcr.io/middleware-labs/mw-lang-detector :0.1.2	a4776aa2a56b	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.53.0 1.25.10	1