CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,134; of 17,821 indexed, latest versions
Container images: 4,755; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,134 of 17,821 indexed charts deploy, on 4,755 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+181 more	1.25.10	4,601
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,623

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,134 by stars

Chart

Latest

Affected images

Radar Score

csghubcsghub

2.5.0

14 of 34 See more

csghub csghub 2.5.0

14 of the 34 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.53.0 1.25.10
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.25.10
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	stdlib@go1.19.8	1.25.10
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	stdlib@go1.24.4	1.25.10
opencsghq/csghub-portal :v2.5.0-ee	1cb36b49151e	golang.org/x/net@v0.28.0 stdlib@go1.23.3	0.53.0 1.25.10
opencsghq/csghub-server :v2.5.0-ee	587046575c2c	stdlib@go1.26.0	1.25.10
opencsghq/csghub-xnet :v2.5.0-ee	86ea22f495c7	golang.org/x/net@v0.39.0 stdlib@go1.24.10	0.53.0 1.25.10
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.53.0 1.25.10
opencsghq/gitlab-shell :v19.2.5	80a65ac370da	golang.org/x/net@v0.48.0	0.53.0
opencsghq/lws :v0.6.1	de15437db41b	golang.org/x/net@v0.37.0 stdlib@go1.24.0	0.53.0 1.25.10
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.25.10
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

50,098

csgshipcsghub

0.4.6

2 of 10 See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.25.10

Open the chart page →

12,043

dataflowcsghub

2.5.0

1 of 7 See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.25.10

Open the chart page →

7,009

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.53.0 1.25.10

Open the chart page →

5,296

rtcsic-charts

0.1.1

2 of 5 See more

rt csic-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/net@v0.5.0 stdlib@go1.19.6	0.53.0 1.25.10
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.25.10

Open the chart page →

15,497

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/net@v0.5.0 stdlib@go1.18.9	0.53.0 1.25.10

Open the chart page →

14,008

csi-driver-ipfscsi-driver-ipfs

0.2.0

5 of 6 See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

3,700

ipfs-clustercsi-driver-ipfs

0.2.0

1 of 2 See more

ipfs-cluster csi-driver-ipfs 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.41.0	0661819c2e09	stdlib@go1.26.2	1.25.10

Open the chart page →

1,651

cursor-admin-api-exportercursor-admin-api-exporter

0.1.9

1 of 1 See more

cursor-admin-api-exporter cursor-admin-api-exporter 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/matanbaruch/cursor-admin-api-exporter :0.1.8	ba3a29fc479a	stdlib@go1.24.5	1.25.10

Open the chart page →

670

secrets-store-csi-driver-provider-awscustom

0.2.0

1 of 1 See more

secrets-store-csi-driver-provider-aws custom 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.53.0 1.25.10

Open the chart page →

1,240

irods-csi-drivercyverse

0.12.0

3 of 4 See more

irods-csi-driver cyverse 0.12.0

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.1	2cddcc716c19	golang.org/x/net@v0.17.0 stdlib@go1.20.5	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.53.0 1.25.10
registry.k8s.io/sig-storage/livenessprobe :v2.11.0	82adbebdf5d5	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.53.0 1.25.10

Open the chart page →

5,309

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.2	0.53.0 1.25.10

Open the chart page →

1,833

jupyterhubd4n

3.3.7

3 of 7 See more

jupyterhub d4n 3.3.7

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/net@v0.7.0 stdlib@go1.22.5	0.53.0 1.25.10
quay.io/jupyterhub/k8s-image-awaiter :3.3.7	ada70832a345	stdlib@go1.18.10	1.25.10
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/net@v0.23.0 stdlib@go1.21.11	0.53.0 1.25.10

Open the chart page →

16,863

miniod4n

5.2.1

2 of 2 See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.53.0 1.25.10
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.53.0 1.25.10

Open the chart page →

2,801

pagesdalston-pages

1.0.0

1 of 3 See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,285

pagesdaman-dell-kuber

1.0.0

1 of 3 See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,285

damap-chartdamap

0.3.0

1 of 5 See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10

Open the chart page →

14,982

cloudflareddamoun

3.3.0

1 of 1 See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	golang.org/x/net@v0.25.0 stdlib@go1.22.2-devel-cf	0.53.0 1.25.10

Open the chart page →

1,345

gickupdamoun

1.11.0

1 of 1 See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.53.0 1.25.10

Open the chart page →

1,028

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	stdlib@go1.17.1	1.25.10

Open the chart page →

6,250

speedtest-exporterdamoun

1.0.6

1 of 1 See more

speedtest-exporter damoun 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.25.10

Open the chart page →

1,209

nvidia-gpu-exporterdanchev

1.0.3

1 of 1 See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	golang.org/x/net@v0.40.0	0.53.0

Open the chart page →

1,250

grafana-agentdandydev-charts

0.19.2

1 of 1 See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/agent :v0.20.0	825c09373d27	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16	0.53.0 1.25.10

Open the chart page →

3,248

dapr-agentsdapr-agents-dev

0.1.5

18 of 31 See more

dapr-agents dapr-agents-dev 0.1.5

18 of the 31 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
grafana/loki :3.6.5	847c287ada0e	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.53.0 1.25.10
grafana/loki-canary :3.6.5	fbb984bab741	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.53.0 1.25.10
grafana/tempo :2.9.0	65a578975943	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.53.0 1.25.10
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.53.0 1.25.10
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.53.0 1.25.10
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.53.0 1.25.10
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.53.0 1.25.10
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.53.0 1.25.10
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.53.0 1.25.10
ghcr.io/jkroepke/kube-webhook-certgen :1.7.7	b18964551d8e	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.53.0 1.25.10
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.53.0 1.25.10
ghcr.io/kagent-dev/kmcp/controller :0.2.2	83276357d448	golang.org/x/net@v0.30.0 stdlib@go1.24.11	0.53.0 1.25.10
quay.io/prometheus-operator/prometheus-operator :v0.88.1	d3d65efa3bee	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10

Open the chart page →

22,740

dara-chartsdara-charts

0.1.0

1 of 2 See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10

Open the chart page →

3,676

dns-mesh-controllerdashdns

2.0.8

2 of 2 See more

dns-mesh-controller dashdns 2.0.8

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
emirozbir/dashdns-admission-webhook :v2.0.5	6801ba2a3fc3	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.53.0 1.25.10
emirozbir/dashdns-controller :v2.0.5	d3a5c1063425	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

1,111

dasherdasher

0.1.1

1 of 1 See more

dasher dasher 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	golang.org/x/net@v0.22.0 stdlib@go1.22.5	0.53.0 1.25.10

Open the chart page →

1,097

dash-opsdash-ops

0.0.4

1 of 1 See more

dash-ops dash-ops 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dashops/dash-ops :latest	23537693ff05	golang.org/x/net@v0.46.0	0.53.0

Open the chart page →

509

dask-gatewaydask

2026.3.0

1 of 2 See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/traefik :3.3.5	104204dadedf	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10

Open the chart page →

2,165

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.15.15	0.53.0 1.25.10

Open the chart page →

2,986

mongodb-bi-connectordasmeta

1.0.3

1 of 1 See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	stdlib@go1.16.9	1.25.10

Open the chart page →

5,865

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.53.0 1.25.10

Open the chart page →

2,807

sentry-relaydasmeta

0.1.2

1 of 1 See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
getsentry/relay :24.10.0	ba7bf9163219	stdlib@go1.19.8	1.25.10

Open the chart page →

3,625

spqr-routerdasmeta

0.1.1

1 of 1 See more

spqr-router dasmeta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

687

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.53.0 1.25.10

Open the chart page →

1,936

monitoring-stackdata354-helm

1.4.2

1 of 4 See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	ac461fb352ab	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

3,299

datacube-dashboarddatacube-charts

0.5.10

1 of 2 See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

1,699

datacube-indexdatacube-charts

0.4.4

1 of 2 See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	stdlib@go1.22.2	1.25.10

Open the chart page →

6,235

datacube-owsdatacube-charts

0.20.1

1 of 1 See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	stdlib@go1.22.2	1.25.10

Open the chart page →

6,086

datadog-csi-driverdatadog

0.17.0

1 of 2 See more

datadog-csi-driver datadog 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15	0.53.0 1.25.10

Open the chart page →

2,056

private-action-runnerdatadog

1.28.1

1 of 1 See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/datadoghq/private-action-runner :v1.21.0	5f5918f843a4	stdlib@go1.25.8	1.25.10

Open the chart page →

2,190

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.15.2	0.53.0 1.25.10

Open the chart page →

3,980

agent-helmdatasaker

0.1.8

5 of 6 See more

agent-helm datasaker 0.1.8

5 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/net@v0.17.0 stdlib@go1.21.0	0.53.0 1.25.10
datasaker/dsk-k8s-agent :latest	2542ee73be51	golang.org/x/net@v0.17.0 stdlib@go1.19.1	0.53.0 1.25.10
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/net@v0.17.0 stdlib@go1.21.0	0.53.0 1.25.10
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.53.0 1.25.10
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/net@v0.15.0 stdlib@go1.21.0	0.53.0 1.25.10

Open the chart page →

7,607

ambassador-agentdatawire

1.0.22

1 of 1 See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ambassador/ambassador-agent :1.0.22	7a1ea0d934fb	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10

Open the chart page →

966

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.16.5	0.53.0 1.25.10

Open the chart page →

7,497

eg-edge-stackdatawire

0.0.1

5 of 7 See more

eg-edge-stack datawire 0.0.1

5 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10
ambassador/aes-eg-ext :v4.0.0-preview.1	b7eb1be3345d	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10
envoyproxy/gateway :v0.5.0	2a9f99d28567	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.53.0 1.25.10
library/redis :7.0.10	92b8b307ee28	stdlib@go1.18.2	1.25.10

Open the chart page →

82,304

eg-edge-stack-crdsdatawire

0.0.1

2 of 2 See more

eg-edge-stack-crds datawire 0.0.1

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.53.0 1.25.10

Open the chart page →

2,405

pagesdavid-pages

1.0.0

1 of 3 See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,285

dbgatedbgate

0.1.1

1 of 1 See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
nathanfirmo/dbgate :latest	6b0487e6e987	stdlib@go1.24.5	1.25.10

Open the chart page →

630

scoperunnerddefrancesco

0.2.1

1 of 1 See more

scoperunner ddefrancesco 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ddefrancesco/scoperunner-server :0.2.1	daaac6657600	stdlib@go1.21.10	1.25.10

Open the chart page →

748

Container images carrying it

4,755 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.25.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	stdlib@go1.19.8	1.25.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	stdlib@go1.24.4	1.25.10	1
ghcr.io/papra-hq/papra :26.6.2-rootless	a281cb44176d	stdlib@go1.20.7	1.25.10	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.53.0 1.25.10	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/net@v0.19.0 stdlib@go1.21.4	0.53.0 1.25.10	1
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	golang.org/x/net@v0.43.0 stdlib@go1.24.7	0.53.0 1.25.10	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10	1
ghcr.io/patricklaabs/sample-application :0.0.1	f0935fa2eee3	stdlib@go1.22.0	1.25.10	1
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	golang.org/x/net@v0.45.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	golang.org/x/net@v0.43.0 stdlib@go1.24.13	0.53.0 1.25.10	1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy :0.4.1	1838720c13b2	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/peimanja/artifactory_exporter :v1.16.0	d3e3929a3d2b	stdlib@go1.21.13	1.25.10	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.4	0.53.0 1.25.10	1
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.53.0 1.25.10	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.14.6	0.53.0 1.25.10	1
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	stdlib@go1.26.0	1.25.10	1
ghcr.io/podtato-head/entry :latest	c3d9d9c98be7	stdlib@go1.19	1.25.10	1
ghcr.io/podtato-head/hat :latest	de37ff39a4c0	stdlib@go1.19	1.25.10	1
ghcr.io/podtato-head/left-arm :latest	97596c95276a	stdlib@go1.19	1.25.10	1
ghcr.io/podtato-head/left-leg :latest	00bb31622b1e	stdlib@go1.19	1.25.10	1
ghcr.io/podtato-head/right-arm :latest	5f8f97a60558	stdlib@go1.19	1.25.10	1
ghcr.io/podtato-head/right-leg :latest	03e125b9279e	stdlib@go1.19	1.25.10	1
ghcr.io/postfinance/kubelet-csr-approver :v1.2.15	6469ef517d2b	golang.org/x/net@v0.49.0	0.53.0	1
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.53.0 1.25.10	1
ghcr.io/privacyengineering/collector-go :main	7217f1a4fa28	stdlib@go1.17.13	1.25.10	1
ghcr.io/privacyengineering/consumer :main	73f59c032812	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.13	0.53.0 1.25.10	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	golang.org/x/net@v0.19.0 stdlib@go1.20.11	0.53.0 1.25.10	1
ghcr.io/projectcapsule/capsule-addon-fluxcd :0.2.2	e0baf564b706	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.53.0 1.25.10	1
ghcr.io/projectcontour/contour :v1.30.0	b12824d7eb58	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.53.0 1.25.10	1
ghcr.io/projectcontour/contour :v1.33.0	cd6e13fa882d	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.53.0 1.25.10	1
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.53.0 1.25.10	1
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.53.0 1.25.10	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.10	0.53.0 1.25.10	1
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.53.0 1.25.10	1
ghcr.io/punchplatform/operator :8.1-dev	2a9536c8cee2	golang.org/x/net@v0.20.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.53.0 1.25.10	1
ghcr.io/rabbitmq/cluster-operator :2.17.2	5d690e6cd856	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10	1
ghcr.io/rabbitmq/cluster-operator :2.20.1	a96853470256	stdlib@go1.25.9	1.25.10	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.53.0 1.25.10	1
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.25.10	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	stdlib@go1.20.7	1.25.10	1
ghcr.io/razvanmacovei/x402-k8s-operator :0.1.0	bf3407fad182	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	1
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/ricardozd/agentgateway-route-reconciler :0.3.1	846f6e407c96	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.53.0 1.25.10	1
ghcr.io/riesinger/plausible-exporter :1.1.0	61112cda1be5	stdlib@go1.19.7	1.25.10	1
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	golang.org/x/net@v0.2.0 stdlib@go1.19.4	0.53.0 1.25.10	1
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.17.13	0.53.0 1.25.10	1
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.53.0 1.25.10	1