CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,155; of 17,813 indexed, latest versions
Container images: 4,778; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,155 of 17,813 indexed charts deploy, on 4,778 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+181 more	1.25.10	4,618
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,640

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,155 by stars

Chart

Latest

Affected images

Radar Score

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.38

5 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

5 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.53.0 1.25.10

Open the chart page →

5,321

seldon-core-operatorseldon

1.19.0

1 of 1 See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
seldonio/seldon-core-operator :1.19.0	544e3bf71bd1	golang.org/x/net@v0.44.0 stdlib@go1.24.11	0.53.0 1.25.10

Open the chart page →

875

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/net@v0.37.0 stdlib@go1.23.10	0.53.0 1.25.10

Open the chart page →

1,177

lldapself-hosters-by-night

0.5.2

2 of 2 See more

lldap self-hosters-by-night 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.25.10
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.25.10

Open the chart page →

3,474

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.53.0 1.25.10

Open the chart page →

537

skypilotskypilot

0.13.0

3 of 3 See more

skypilot skypilot 0.13.0

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

6,017

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/net@v0.4.0 stdlib@go1.20	0.53.0 1.25.10

Open the chart page →

1,696

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.53.0 1.25.10

Open the chart page →

12,542

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

1,187

forecastlestakater

2.1.1

1 of 1 See more

forecastle stakater 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/net@v0.51.0	0.53.0

Open the chart page →

726

ingressmonitorcontrollerstakater

2.2.13

1 of 1 See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

590

sn-platformstreamnative

1.11.44

6 of 9 See more

sn-platform streamnative 1.11.44

6 of the 9 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.25.10
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.53.0 1.25.10
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.53.0 1.25.10
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.53.0 1.25.10

Open the chart page →

72,232

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

1,465

pretixtechwolf12

2026.7.0

1 of 3 See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.10

Open the chart page →

10,248

mealieth-charts

0.5.1

1 of 1 See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.7.0	bb2939094eed	stdlib@go1.24.4	1.25.10

Open the chart page →

3,895

thingsboard-clusterthingsboard-cluster-betta

0.2.26

3 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.25.10
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	stdlib@go1.19.12	1.25.10
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.25.10

Open the chart page →

14,671

feedbacksystemthm-mni-ii

0.47.1

6 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

6 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.53.0 1.25.10
bitnamilegacy/mysql :8.0.35-debian-11-r2	be03e8ea6129	stdlib@go1.21.5	1.25.10
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.7	0.53.0 1.25.10
thmmniii/fbs-qcm-frontend :v1.27.1	a347f7f4d144	stdlib@go1.20.12	1.25.10
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.53.0 1.25.10

Open the chart page →

28,866

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,677

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.4	0.53.0 1.25.10

Open the chart page →

4,146

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.53.0 1.25.10
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.53.0 1.25.10
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.53.0 1.25.10

Open the chart page →

9,291

k8s-ttl-controllertwin

0.4.0

1 of 1 See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/twin/k8s-ttl-controller :v1.4.0	0525a7def93d	golang.org/x/net@v0.26.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

471

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0 stdlib@go1.19.6	0.53.0 1.25.10
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

10,428

crossplaneupbound-stable

2.4.1-up.1

1 of 5 See more

crossplane upbound-stable 2.4.1-up.1

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,699

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0 stdlib@go1.24.10	0.53.0 1.25.10

Open the chart page →

1,611

valkey-operatorvalkey

0.6.0

1 of 1 See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/valkey-io/valkey-operator :v0.6.0	52a0f1ed0c03	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

148

vaultvault

1.22.0

2 of 4 See more

vault vault 1.22.0

2 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10

Open the chart page →

4,298

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

1,036

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0 stdlib@go1.20.7	0.53.0 1.25.10

Open the chart page →

1,358

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.18.5	0.53.0 1.25.10

Open the chart page →

2,248

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.53.0 1.25.10

Open the chart page →

1,003

wallarm-ingresswallarm

5.3.10-1

2 of 2 See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0 stdlib@go1.22.8	0.53.0 1.25.10

Open the chart page →

1,302

wallarm-sidecarwallarm

6.13.1

1 of 3 See more

wallarm-sidecar wallarm 6.13.1

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.53.0 1.25.10

Open the chart page →

966

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.25.10

Open the chart page →

3,511

argo-cdwenerme

10.9.2

2 of 3 See more

argo-cd wenerme 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0 stdlib@go1.25.6	0.53.0 1.25.10
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.53.0 1.25.10

Open the chart page →

3,043

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.17.4	0.53.0 1.25.10

Open the chart page →

6,088

wgerwger

1.0.0

1 of 8 See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15.18	6eb0add3b77c	stdlib@go1.24.6	1.25.10

Open the chart page →

8,399

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18.1	0.53.0 1.25.10
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.53.0 1.25.10
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.53.0 1.25.10
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.53.0 1.25.10

Open the chart page →

10,051

windmillwindmill

4.0.265

1 of 3 See more

windmill windmill 4.0.265

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :18	10037cee1d5e	stdlib@go1.24.6	1.25.10

Open the chart page →

1,270

buildkitdwiremind

0.33.0

1 of 1 See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/net@v0.43.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,165

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.8	0.53.0 1.25.10

Open the chart page →

4,715

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.4	0.53.0 1.25.10

Open the chart page →

4,051

yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter

0.38.0

1 of 1 See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.25.10

Open the chart page →

924

nocodbzekker6

1.10.0

1 of 1 See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.301.5	d9516f0bf546	stdlib@go1.23.12	1.25.10

Open the chart page →

4,180

paperlesszekker6

11.8.0

1 of 1 See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	stdlib@go1.24.4	1.25.10

Open the chart page →

4,834

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.53.0 1.25.10

Open the chart page →

829

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

1,875

no-latest-tag-webhookadmission-webhook-no-latest

1.0.14

1 of 1 See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0	0.53.0

Open the chart page →

162

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	stdlib@go1.24.4	1.25.10

Open the chart page →

20,721

agentareaagentarea

0.0.18

7 of 16 See more

agentarea agentarea 0.0.18

7 of the 16 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
agentarea/agentarea-mcp-manager :latest	efe23cef3727	stdlib@go1.22.5	1.25.10
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	stdlib@go1.19.8	1.25.10
library/postgres :16-alpine	3c5c8892d184	stdlib@go1.24.6	1.25.10
library/postgres :alpine	6c538e7206ea	stdlib@go1.24.6	1.25.10
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.53.0 1.25.10
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/net@v0.35.0 stdlib@go1.25.0	0.53.0 1.25.10
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/net@v0.40.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

14,566

traefikaigisuk

0.1.1

1 of 1 See more

traefik aigisuk 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/traefik :2.7.0-rc2	b70710baceeb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.53.0 1.25.10

Open the chart page →

2,884

Container images carrying it

4,778 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.53.0 1.25.10	1
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.53.0 1.25.10	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.53.0 1.25.10	1
ghcr.io/nousefreak/clusterfan :v0.1.0	4ea05e2a7b57	stdlib@go1.17.5	1.25.10	1
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.53.0 1.25.10	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	golang.org/x/net@v0.38.0 stdlib@go1.24.7	0.53.0 1.25.10	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.53.0 1.25.10	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.53.0 1.25.10	1
ghcr.io/okteto/backend :0.0.0-2026-08-17	629bdce31b4d	golang.org/x/net@v0.47.0	0.53.0	1
ghcr.io/okteto/buildkit :0.0.0-2026-08-03 :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0 stdlib@go1.25.7	0.53.0 1.25.10	1
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.53.0 1.25.10	1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller :0.2.3	0aec31e36d95	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	golang.org/x/net@v0.33.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0	0.53.0	1
ghcr.io/onedr0p/exportarr :v1.6.1	60cf3d44aa0b	stdlib@go1.21.6	1.25.10	1
ghcr.io/openappsec/smartsync :latest	580d68c50cc7	stdlib@go1.18.10	1.25.10	1
ghcr.io/openappsec/smartsync-shared-files :latest	30c1daa0b33e	stdlib@go1.18.10	1.25.10	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.53.0 1.25.10	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.53.0 1.25.10	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.53.0 1.25.10	1
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	golang.org/x/net@v0.50.0 stdlib@go1.24.12	0.53.0 1.25.10	1
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	stdlib@go1.23.5	1.25.10	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10	1
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.25.10	1
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.10	1
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.25.10	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/net@v0.35.0 stdlib@go1.23.8	0.53.0 1.25.10	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	golang.org/x/net@v0.38.0	0.53.0	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.25.10	1
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.53.0 1.25.10	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	stdlib@go1.23.5	1.25.10	1
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	stdlib@go1.24.4	1.25.10	1
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	stdlib@go1.23.5	1.25.10	1
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.25.10	1
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	stdlib@go1.23.5	1.25.10	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0 stdlib@go1.18.5	0.53.0 1.25.10	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.25.10	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.10	1
ghcr.io/open-feature/flagd :v0.16.0	32234e63c1d0	golang.org/x/net@v0.52.0	0.53.0	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.53.0 1.25.10	1
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0	0.53.0	1
ghcr.io/openlit/openlit :1.24.0	2434560e8f0e	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.53.0 1.25.10	1
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	stdlib@go1.24.13	1.25.10	1
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	golang.org/x/net@v0.43.0 stdlib@go1.24.13	0.53.0 1.25.10	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	golang.org/x/net@v0.10.0 stdlib@go1.18.10	0.53.0 1.25.10	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.53.0 1.25.10	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.53.0 1.25.10	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1