CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,134; of 17,821 indexed, latest versions
Container images: 4,755; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,134 of 17,821 indexed charts deploy, on 4,755 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+181 more	1.25.10	4,601
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,623

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,134 by stars

Chart

Latest

Affected images

Radar Score

domain-lockerdomain-locker

0.2.8

1 of 3 See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.10

Open the chart page →

1,889

dominodomino

0.1.11

1 of 3 See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.25.10

Open the chart page →

8,968

archerydouban

0.4.3

2 of 6 See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.53.0 1.25.10
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.53.0 1.25.10

Open the chart page →

5,863

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.53.0 1.25.10

Open the chart page →

2,018

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.25.10

Open the chart page →

73,510

dragonfly-stackdragonfly

0.1.2

4 of 7 See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.53.0 1.25.10
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.53.0 1.25.10
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

18,997

nydus-snapshotterdragonfly

0.0.10

1 of 2 See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.53.0 1.25.10

Open the chart page →

3,669

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.25.10

Open the chart page →

69,456

dyff-operatordyff-operator

0.24.20

1 of 1 See more

dyff-operator dyff-operator 0.24.20

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/dyff-operator :0.24.20	e9ca51627601	golang.org/x/net@v0.44.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

273

gethdysnix

1.1.2

1 of 1 See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/net@v0.24.0 stdlib@go1.22.6	0.53.0 1.25.10

Open the chart page →

1,627

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

4,496

glpieftechcombr-glpi

2.12.1

1 of 5 See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	a02fe89cb597	stdlib@go1.24.6	1.25.10

Open the chart page →

4,620

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.53.0 1.25.10

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0 stdlib@go1.23.1	0.53.0 1.25.10

Open the chart page →

638

elchi-stackelchi

1.13.0

4 of 10 See more

elchi-stack elchi 1.13.0

4 of the 10 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.0	74144189b384	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.25.10
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.53.0 1.25.10
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.53.0 1.25.10

Open the chart page →

15,785

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0 stdlib@go1.21.0	0.53.0 1.25.10

Open the chart page →

2,130

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.25.10

Open the chart page →

32,055

eoapieoapi

0.16.3

1 of 7 See more

eoapi eoapi 0.16.3

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

2,991

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.2	0.53.0 1.25.10

Open the chart page →

2,267

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.25.10

Open the chart page →

1,360

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.53.0 1.25.10

Open the chart page →

3,120

ethereumjsethereum-helm-charts

0.1.2

1 of 2 See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ethpandaops/ethereumjs :master	fb84b718500f	stdlib@go1.23.12	1.25.10

Open the chart page →

1,593

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	stdlib@go1.17.13	1.25.10

Open the chart page →

3,138

ipfs-clusterethereum-helm-charts

0.1.14

2 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ipfs/kubo :latest	b293923d66e4	stdlib@go1.19.8	1.25.10
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

4,717

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.25.10

Open the chart page →

11,588

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.53.0 1.25.10

Open the chart page →

1,195

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

1,210

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.53.0 1.25.10

Open the chart page →

2,135

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.53.0 1.25.10

Open the chart page →

1,237

ext-postgres-operatorext-postgres-operator

3.0.0

1 of 1 See more

ext-postgres-operator ext-postgres-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

401

akauntingf3k-tech

1.3121.0

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	stdlib@go1.24.5	1.25.10

Open the chart page →

4,260

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.53.0 1.25.10

Open the chart page →

3,619

ecr-cleanupfairwinds-stable

1.2.8

1 of 1 See more

ecr-cleanup fairwinds-stable 1.2.8

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.53.0 1.25.10

Open the chart page →

1,004

falco-operatorfalcosecurity

0.3.1

1 of 1 See more

falco-operator falcosecurity 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
falcosecurity/falco-operator :0.4.1	8a99fcc57a57	stdlib@go1.26.0	1.25.10

Open the chart page →

386

fastapi-microservice-appfast-api-microservice-app

1.3.0

1 of 4 See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :7.0	9854f7139445	stdlib@go1.24.6	1.25.10

Open the chart page →

9,630

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.10
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.53.0 1.25.10
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.10

Open the chart page →

8,691

federidfederid

0.1.2

1 of 1 See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
federid/webhook :0.1.0	fbfb7c6510a7	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

2,121

fencemasterfencemaster

0.1.13

1 of 1 See more

fencemaster fencemaster 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.53.0 1.25.10

Open the chart page →

254

taigafermosit

0.0.11

2 of 7 See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.25.10
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.25.10

Open the chart page →

8,611

ferriskeyferriskey

0.8.0

1 of 3 See more

ferriskey ferriskey 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	stdlib@go1.24.6	1.25.10

Open the chart page →

2,212

file-manager-serverfile-manager-server

1.11.0

1 of 1 See more

file-manager-server file-manager-server 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.53.0 1.25.10

Open the chart page →

770

fission-corefission-charts

1.14.1

3 of 3 See more

fission-core fission-charts 1.14.1

3 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.53.0 1.25.10
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.53.0 1.25.10
fission/reporter :1.14.1	04c6e06af175	stdlib@go1.15.14	1.25.10

Open the chart page →

7,109

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.53.0 1.25.10

Open the chart page →

3,315

flyway-operatorflyway-operator

0.2.13

1 of 1 See more

flyway-operator flyway-operator 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

641

free5gcfree5gc

0.1.3

11 of 12 See more

free5gc free5gc 0.1.3

11 of the 12 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.53.0 1.25.10

Open the chart page →

10,715

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.53.0 1.25.10
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

4,228

adguard-homegabe565

0.3.25

1 of 2 See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.56	c64a0b37f7b9	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.53.0 1.25.10

Open the chart page →

815

home-assistantgabe565

0.17.0

1 of 1 See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :latest	d89226851697	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.53.0 1.25.10

Open the chart page →

2,162

memosgabe565

0.17.0

1 of 1 See more

memos gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/usememos/memos :0.24.0	4723d86e6797	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.53.0 1.25.10

Open the chart page →

1,477

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.53.0 1.25.10

Open the chart page →

3,399

Container images carrying it

4,755 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.25.10	1
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0 stdlib@go1.23.0	0.53.0 1.25.10	1
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.53.0 1.25.10	1
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0	0.53.0	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.53.0 1.25.10	1
ghcr.io/rybbit-io/rybbit-backend :latest	e0d1b397e33c	stdlib@go1.20.7	1.25.10	1
ghcr.io/sagernet/sing-box :v1.12.0	3c1ee82d450d	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.53.0 1.25.10	1
ghcr.io/salaboy/fmtok8s-email-service :v0.2.0-native	b52d5dbac2ca	stdlib@go1.17.11	1.25.10	1
ghcr.io/salaboy/fmtok8s-email-service :v0.1.0-native	cf28472bc460	stdlib@go1.17.11	1.25.10	1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.25.10	1
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.53.0 1.25.10	1
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.15	0.53.0 1.25.10	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.53.0 1.25.10	1
ghcr.io/sapcc/ntp_exporter :v2.9.0	79c40c65f5d4	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/schaka/janitorr :native-stable	7cfe1e0c41da	stdlib@go1.24.6	1.25.10	1
ghcr.io/schmitzis/cert-manager-webhook-bunny :latest	125e31c8e85a	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.53.0 1.25.10	1
ghcr.io/seanmorley15/adventurelog-frontend :v0.13.0	51ee22428b41	stdlib@go1.23.12	1.25.10	1
ghcr.io/sergelogvinov/hybrid-csi-provisioner :v0.3.1	221e07794a8a	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.10	0.53.0 1.25.10	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.53.0 1.25.10	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	stdlib@go1.23.8	1.25.10	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.53.0 1.25.10	1
ghcr.io/sergelogvinov/node-labels-exporter :v0.5.1	dd6875a0a963	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.53.0 1.25.10	1
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	stdlib@go1.24.6	1.25.10	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.53.0 1.25.10	1
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	stdlib@go1.21.5	1.25.10	1
ghcr.io/shift/domain_exporter :v0.1.13	47e27690a816	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.53.0 1.25.10	1
ghcr.io/shopware/shopware-operator :1.8.1	87db0eda7a03	golang.org/x/net@v0.38.0 stdlib@go1.26.0	0.53.0 1.25.10	1
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.25.10	1
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	stdlib@go1.26.2	1.25.10	1
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.53.0 1.25.10	1
ghcr.io/sigstore/policy-controller/policy-controller	0bcd60beb93f	golang.org/x/net@v0.39.0 stdlib@go1.24.7	0.53.0 1.25.10	1
ghcr.io/sigstore/scaffolding/server	ae8eb69c7b70	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.53.0 1.25.10	1
ghcr.io/sigstore/sigstore-probers/prober :v1.0.1	d1e914e6d6b9	stdlib@go1.26.0	1.25.10	1
ghcr.io/sigstore/timestamp-server :v2.1.0	8637f0482ed1	stdlib@go1.25.1	1.25.10	1
ghcr.io/sikalabs/hello-world-server :latest	cf8538bf6489	stdlib@go1.26.2	1.25.10	1
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	golang.org/x/net@v0.26.0 stdlib@go1.22.0	0.53.0 1.25.10	1
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	golang.org/x/net@v0.44.0 stdlib@go1.26.0	0.53.0 1.25.10	1
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	golang.org/x/net@v0.52.0	0.53.0	1
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.53.0 1.25.10	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	stdlib@go1.22.2	1.25.10	1
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.53.0 1.25.10	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.53.0 1.25.10	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.53.0 1.25.10	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	golang.org/x/net@v0.42.0 stdlib@go1.25.7	0.53.0 1.25.10	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	golang.org/x/net@v0.42.0 stdlib@go1.25.7	0.53.0 1.25.10	1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	golang.org/x/net@v0.43.0 stdlib@go1.25.7	0.53.0 1.25.10	1
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.53.0 1.25.10	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.53.0 1.25.10	1