CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,147; of 17,828 indexed, latest versions
Container images: 4,757; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,147 of 17,828 indexed charts deploy, on 4,757 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+182 more	1.25.10	4,604
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,632

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,147 by stars

Chart

Latest

Affected images

Radar Score

kubiya-runnerkubiya-helm-charts

0.9.4

8 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

8 of the 9 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/net@v0.31.0 stdlib@go1.22.7	0.53.0 1.25.10
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.10
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.53.0 1.25.10
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.53.0 1.25.10
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/net@v0.28.0 stdlib@go1.25.1	0.53.0 1.25.10
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/net@v0.42.0 stdlib@go1.21.5	0.53.0 1.25.10
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.53.0 1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

20,417

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.53.0 1.25.10
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/net@v0.41.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

1,762

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

3,489

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	golang.org/x/net@v0.28.0 stdlib@go1.24.13	0.53.0 1.25.10

Open the chart page →

980

kusionkusionstack

0.14.1

2 of 3 See more

kusion kusionstack 0.14.1

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	golang.org/x/net@v0.31.0 stdlib@go1.22.10	0.53.0 1.25.10
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

63,783

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.53.0 1.25.10

Open the chart page →

1,882

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.53.0 1.25.10

Open the chart page →

2,524

azure-key-vault-helperkvalitetsit

2.0.2

1 of 1 See more

azure-key-vault-helper kvalitetsit 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/go-loop :1.1.0	d07f449d75ed	stdlib@go1.25.1	1.25.10

Open the chart page →

307

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.53.0 1.25.10

Open the chart page →

1,320

kitarguskvalitetsit

0.0.0-2026-03-09-091234-10013c4

1 of 1 See more

kitargus kvalitetsit 0.0.0-2026-03-09-091234-10013c4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/kitargus :2026-03-09-091234-10013c4	c5cde2d9371c	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.53.0 1.25.10

Open the chart page →

962

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,519

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.1	0.53.0 1.25.10

Open the chart page →

16,735

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.19.5	0.53.0 1.25.10
kvalitetsit/metadoc-web :main	f57e7553f5bd	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.53.0 1.25.10

Open the chart page →

4,036

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.25.10

Open the chart page →

2,064

oauth2-proxy-injectorkvalitetsit

1.5.0

1 of 1 See more

oauth2-proxy-injector kvalitetsit 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/oauth2-proxy-injector :1.5.0	0c906908d632	golang.org/x/net@v0.49.0	0.53.0

Open the chart page →

301

openidkvalitetsit

1.7.2

1 of 2 See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

592

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd stdlib@go1.19.3	0.53.0 1.25.10

Open the chart page →

7,864

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.53.0 1.25.10

Open the chart page →

8,546

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14	0.53.0 1.25.10

Open the chart page →

26,563

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

2,281

everest-lakefs-csi-driverlakefs

1.3.0

2 of 3 See more

everest-lakefs-csi-driver lakefs 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.16.0-eksbuild.3	592d7034d6c7	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.53.0 1.25.10
public.ecr.aws/csi-components/livenessprobe :v2.18.0-eksbuild.3	8e307f4e5820	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.53.0 1.25.10

Open the chart page →

866

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

1,347

pageslatif-pages

1.0.0

1 of 3 See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,287

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/net@v0.23.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

1,386

pageslavanya-pages

1.0.0

1 of 3 See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,287

express-botxlavr

0.31.4

1 of 1 See more

express-botx lavr 0.31.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
lavr/express-botx :0.39.0-rootless	f5035e0f1434	golang.org/x/net@v0.38.0	0.53.0

Open the chart page →

294

kubernetes-dashboardlbenicio-community

7.14.9

4 of 5 See more

kubernetes-dashboard lbenicio-community 7.14.9

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
lbenicio/kubernetes-dashboard-api :1.14.9	51d3d30206c8	golang.org/x/net@v0.46.0	0.53.0
lbenicio/kubernetes-dashboard-auth :1.4.13	78c63efd9dcd	golang.org/x/net@v0.46.0	0.53.0
lbenicio/kubernetes-dashboard-scraper :1.2.6	9202e96ad403	golang.org/x/net@v0.46.0	0.53.0
lbenicio/kubernetes-dashboard-web :1.7.14	2797937bc2a5	golang.org/x/net@v0.46.0	0.53.0

Open the chart page →

1,945

listmonklbenicio-community

0.1.0

1 of 1 See more

listmonk lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
listmonk/listmonk :latest	f535d59e1499	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.53.0 1.25.10

Open the chart page →

720

pinglbenicio-community

0.1.1

1 of 1 See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10

Open the chart page →

600

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.53.0 1.25.10

Open the chart page →

33,946

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.53.0 1.25.10
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.53.0 1.25.10

Open the chart page →

5,408

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.10
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.53.0 1.25.10
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.53.0 1.25.10
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.53.0 1.25.10
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.4	0.53.0 1.25.10

Open the chart page →

9,115

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.53.0 1.25.10

Open the chart page →

3,200

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

4,399

prometheusleechistest

11.6.0

4 of 6 See more

prometheus leechistest 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.53.0 1.25.10
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.53.0 1.25.10
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.25.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.53.0 1.25.10

Open the chart page →

8,495

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.25.10

Open the chart page →

1,633

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.53.0 1.25.10

Open the chart page →

4,282

adguard-homelib42

2.0.0

1 of 1 See more

adguard-home lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.65	d765078d2140	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

1,206

libredb-studiolibredb-studio-oci

0.1.67

1 of 1 See more

libredb-studio libredb-studio-oci 0.1.67

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/libredb/libredb-studio :0.16.2	c398419c29a7	stdlib@go1.24.4	1.25.10

Open the chart page →

1,201

librenmslibrenms

10.1.2

2 of 5 See more

librenms librenms 10.1.2

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :9.7.2	29abb0a17998	stdlib@go1.24.6	1.25.10
librenms/librenms :26.8.2	8194a4a9ff49	stdlib@go1.24.6	1.25.10

Open the chart page →

2,749

kltlifecycle-toolkit

0.2.6

4 of 4 See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v1.1.0	8fdd311a6d33	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.53.0 1.25.10
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.53.0 1.25.10
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.53.0 1.25.10
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.53.0 1.25.10

Open the chart page →

4,697

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.53.0 1.25.10

Open the chart page →

4,481

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.53.0 1.25.10

Open the chart page →

2,788

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.53.0 1.25.10

Open the chart page →

2,788

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.53.0 1.25.10

Open the chart page →

1,135

komgalinkding

0.2.3

1 of 1 See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gotson/komga :1.22.0	ba892ab3e082	stdlib@go1.17.8	1.25.10

Open the chart page →

3,126

linkerd-preview-vizlinkerd-buoyant

25.4.3

4 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.53.0 1.25.10
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

3,464

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	golang.org/x/net@v0.35.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

1,060

linode-blockstorage-csi-driverlinode-blockstorage-csi-driver

1.1.4

4 of 5 See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

2,999

school-botlinuxoid69

0.1.0

1 of 1 See more

school-bot linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/linuxoid69/school-bot :v0.3.3	c8872438f1e0	stdlib@go1.23.3	1.25.10

Open the chart page →

772

Container images carrying it

4,757 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.53.0 1.25.10	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.53.0 1.25.10	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.53.0 1.25.10	1
quay.io/fossa/postgres :17.2-1	5af45ac79f38	stdlib@go1.18.2	1.25.10	1
quay.io/galexrt/dellhw_exporter :v2.0.0-rc.1	8a1361fa38c1	stdlib@go1.23.2	1.25.10	1
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.53.0 1.25.10	1
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.53.0 1.25.10	1
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.53.0 1.25.10	1
quay.io/giantswarm/helloworld :0.2.0	7a07ee730305	stdlib@go1.16.7	1.25.10	1
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.53.0 1.25.10	1
quay.io/go-skynet/local-ai :latest	0632c21ddbe4	stdlib@go1.26.0	1.25.10	1
quay.io/groundcover/caretta :v0.0.16	ed8f5118e3a4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18	0.53.0 1.25.10	1
quay.io/groundcover/tools :20260719	b705e0cbe171	stdlib@go1.24.4	1.25.10	1
quay.io/groundcover/victoria-metrics :v1.85.3	80ddeb90d18d	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.53.0 1.25.10	1
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.53.0 1.25.10	1
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	golang.org/x/net@v0.49.0	0.53.0	1
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.53.0 1.25.10	1
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.53.0 1.25.10	1
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	golang.org/x/net@v0.48.0	0.53.0	1
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	golang.org/x/net@v0.48.0	0.53.0	1
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	golang.org/x/net@v0.48.0	0.53.0	1
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	golang.org/x/net@v0.48.0	0.53.0	1
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	golang.org/x/net@v0.48.0	0.53.0	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.53.0 1.25.10	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.53.0 1.25.10	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.53.0 1.25.10	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.53.0 1.25.10	1
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	golang.org/x/net@v0.17.0 stdlib@go1.18.10	0.53.0 1.25.10	1
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.53.0 1.25.10	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.12.0	e0a5b06b231c	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.53.0 1.25.10	1
quay.io/jetstack/cert-manager-ctl :v1.12.0	8d54fe9d0c0d	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.53.0 1.25.10	1