CVE-2026-42506

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,011; of 17,792 indexed, latest versions
Container images: 3,684; deployed by those charts
Fix available: 1 of 1; affected package

Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html

Carried by container images the latest versions of 3,011 of 17,792 indexed charts deploy, on 3,684 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,684

OSV records: GO-2026-5025

Charts affected

3,011 by stars

Chart

Latest

Affected images

Radar Score

cert-managernicklasfrahm-cert-manager

0.1.2

4 of 4 See more

cert-manager nicklasfrahm-cert-manager 0.1.2

4 of the 4 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-startupapicheck :v1.18.2	1075e0974151	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.18.2	9431f0d8b510	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

2,840

ciliumnicklasfrahm-cilium

0.7.4

5 of 6 See more

cilium nicklasfrahm-cilium 0.7.4

5 of the 6 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	golang.org/x/net@v0.41.0	0.55.0
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	golang.org/x/net@v0.41.0	0.55.0
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	golang.org/x/net@v0.42.0	0.55.0
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	golang.org/x/net@v0.42.0	0.55.0
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

7,237

metrics-servernicklasfrahm-metrics-server

0.1.1

1 of 1 See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

792

node-upgrade-channelnimbolus

0.1.1

1 of 1 See more

node-upgrade-channel nimbolus 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent :0.1.0	e0c7cf2415f0	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

2,063

terraform-backendnimbolus

0.3.2

1 of 2 See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/nimbolus/terraform-backend :0.2.2	bf876252fbe1	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

2,492

cloudnative-pgnineinfra-charts

0.19.1

1 of 1 See more

cloudnative-pg nineinfra-charts 0.19.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.21.1	9f707d91de1c	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,188

doris-operatornineinfra-charts

1.3.1

1 of 1 See more

doris-operator nineinfra-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
selectdb/doris.k8s-operator :1.3.1	919210765cb8	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

870

hdfs-operatornineinfra-charts

0.7.0

1 of 1 See more

hdfs-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
nineinfra/hdfs-operator :v0.7.0	debb1e3410e2	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

723

kyuubi-operatornineinfra-charts

0.7.0

1 of 1 See more

kyuubi-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
nineinfra/kyuubi-operator :v0.7.0	8d8ed87ef77c	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

815

metastore-operatornineinfra-charts

0.7.0

1 of 1 See more

metastore-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
nineinfra/metastore-operator :v0.7.0	11259032fb04	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

815

minio-directpvnineinfra-charts

4.0.8

5 of 5 See more

minio-directpv nineinfra-charts 4.0.8

5 of the 5 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/minio/csi-node-driver-registrardigest-pinned	c805fdc16676	golang.org/x/net@v0.8.0	0.55.0
quay.io/minio/csi-provisionerdigest-pinned	7b5c070ec70d	golang.org/x/net@v0.8.0	0.55.0
quay.io/minio/csi-resizerdigest-pinned	819f68a4daf7	golang.org/x/net@v0.8.0	0.55.0
quay.io/minio/directpv :v4.0.8	4560083eb77d	golang.org/x/net@v0.8.0	0.55.0
quay.io/minio/livenessprobedigest-pinned	f3bc9a84f149	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

7,070

minio-operatornineinfra-charts

5.0.9

1 of 1 See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
minio/operator :v5.0.9	170b154d2c61	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

3,425

nineinfranineinfra-charts

0.7.0

1 of 1 See more

nineinfra nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
nineinfra/nineinfra :v0.7.0	d4aad414eccd	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,120

supersetnineinfra-charts

0.11.2

1 of 4 See more

superset nineinfra-charts 0.11.2

1 of the 4 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

1,439

zookeeper-operatornineinfra-charts

0.7.0

1 of 1 See more

zookeeper-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
nineinfra/zookeeper-operator :v0.7.0	af6eb2f37bfc	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

723

node-debug-dashboardnode-debug-dashboard

0.3.2

1 of 1 See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

6,977

cosmoshub-rpcnodeify

1.0.7

1 of 2 See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

2,015

cosmos-nodenodeify

2.6.0

1 of 2 See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

2,015

firehose-corenodeify

1.2.6

1 of 2 See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

6,586

firehose-ethereumnodeify

1.7.1

1 of 2 See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

5,695

substreams-tier-2nodeify

1.1.3

1 of 1 See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0

Open the chart page →

4,756

nodejsweeklynodejsweekly

1.1.0

1 of 1 See more

nodejsweekly nodejsweekly 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/nodejsweekly :v1.1.0	306859a3f167	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.55.0

Open the chart page →

1,489

node-labels-exporternode-labels-exporter

0.1.9

1 of 1 See more

node-labels-exporter node-labels-exporter 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/node-labels-exporter :v0.5.1	dd6875a0a963	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

292

grafananodepulse

7.1.0

1 of 1 See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
grafana/grafana :10.2.3	6b5b37eb35bb	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

2,973

prometheusnodepulse

25.0.0

6 of 6 See more

prometheus nodepulse 25.0.0

6 of the 6 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0	0.55.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0	0.55.0
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.55.0
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0	0.55.0
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/net@v0.10.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

7,748

ingress-helm-chartnotesprojectchart

0.1.0

2 of 2 See more

ingress-helm-chart notesprojectchart 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

2,956

kafka-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

4,558

vault-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
library/vault :1.13.3	f98ac9dd97b0	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

2,254

notification-componentnotification-component

1.0.0

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

7,537

giteanovum-rgi-charts

2.1.3

1 of 3 See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0

Open the chart page →

4,861

nfs-server-provisionernovum-rgi-charts

1.1.2

1 of 1 See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0

Open the chart page →

2,806

example-dev-toolsnoygal

0.2.8

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0

Open the chart page →

27,548

nri-volume-qosnri-volume-qos

0.1.3

1 of 1 See more

nri-volume-qos nri-volume-qos 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/nri-volume-qos :v0.1.3	cbe3e1ea2b6a	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

216

cnaos-pvc-populatornutanix-helm-releases

1.1.0-174-prod

1 of 2 See more

cnaos-pvc-populator nutanix-helm-releases 1.1.0-174-prod

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/volume-data-source-validator :v1.0.0	d35884236461	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

1,838

nai-knative-istio-controllernutanix-helm-releases

1.13.1

2 of 2 See more

nai-knative-istio-controller nutanix-helm-releases 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	golang.org/x/net@v0.20.0	0.55.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

1,566

nai-knative-servingnutanix-helm-releases

1.13.1

4 of 4 See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	golang.org/x/net@v0.20.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	golang.org/x/net@v0.20.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	golang.org/x/net@v0.20.0	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

3,765

nutanix-flow-cninutanix-helm-releases

1.1.0

2 of 7 See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

2 of the 7 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0	0.55.0
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.3	9751856cacc8	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

4,997

firecrawlobeone

3.0.5

1 of 5 See more

firecrawl obeone 3.0.5

1 of the 5 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/firecrawl/firecrawl :2.11.341	32de0537d308	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

10,110

lensoci-ai-incubations

0.1.14

10 of 16 See more

lens oci-ai-incubations 0.1.14

10 of the 16 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0	0.55.0
grafana/grafana :12.1.1	a1701c218024	golang.org/x/net@v0.41.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/net@v0.43.0	0.55.0
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0	0.55.0
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.2	050a34002d5b	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

17,161

ocisocis-community

0.1.0

1 of 1 See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

2,349

argocd-agent-addonocm-helm-charts

0.29.0

1 of 2 See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-operator :v0.18.0	a09814522a72	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

640

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

1,607

cluster-managerocm-helm-charts

1.3.1

1 of 1 See more

cluster-manager ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.3.1	df6c926a2b54	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

799

cluster-proxyocm-helm-charts

0.12.0

1 of 1 See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,198

dynamic-scoring-frameworkocm-helm-charts

0.1.0

2 of 2 See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/dynamic-scoring-addon :latest	7e571a08ec1a	golang.org/x/net@v0.47.0	0.55.0
quay.io/open-cluster-management/dynamic-scoring-controller :latest	587f5bc8f2ed	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

981

klusterletocm-helm-charts

1.3.1

1 of 1 See more

klusterlet ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.3.1	df6c926a2b54	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

799

kueue-addonocm-helm-charts

0.1.4

1 of 1 See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,596

multicluster-controlplaneocm-helm-charts

0.8.0

1 of 1 See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-controlplane :latest	9888240f644b	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

618

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

2,131

octantoctant

0.1.86

1 of 1 See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-42506.

Container image	Digest	Package	Fixed in
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

542

Container images carrying it

3,684 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0	0.55.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.55.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0	0.55.0	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.55.0	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0	0.55.0	2
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.55.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.55.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.55.0	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/net@v0.38.0	0.55.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0	0.55.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0	0.55.0	2
bloomberg/goldpinger :3.11.3	a8ea8c61ff4c	golang.org/x/net@v0.49.0	0.55.0	2
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/net@v0.49.0	0.55.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0	0.55.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0	0.55.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6	0.55.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.55.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/net@v0.51.0	0.55.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0	0.55.0	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0	0.55.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0	0.55.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.55.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0	0.55.0	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.55.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4	0.55.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.55.0	2