StackRadar

CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,531
of 17,797 indexed, latest versions
Container images
4,324
deployed by those charts
Fix available
2 of 2
affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,531 of 17,797 indexed charts deploy, on 4,324 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more0.56.03,917
stdlibgolanggo1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+7 more1.26.6868
OSV records
GO-2026-5942
Also known as
BIT-golang-2026-46600

Charts affected

3,531 by stars
ChartLatestAffected imagesRadar Score
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
golang.org/x/net@v0.39.0
0.56.0

Open the chart page →

2,044
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

7,125
karpenter-provider-proxmoxkarpenter-provider-proxmox0.4.91 of 1See more

karpenter-provider-proxmox karpenter-provider-proxmox 0.4.9

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/karpenter-provider-proxmox:v0.12.0ea8b8e60a020
stdlib@go1.26.5
1.26.6

Open the chart page →

66
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
golang.org/x/net@v0.47.0
0.56.0

Open the chart page →

1,485
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
golang.org/x/net@v0.52.0
stdlib@go1.26.0
0.56.0
1.26.6

Open the chart page →

32,902
kcmkcm1.11.011 of 12See more

kcm kcm 1.11.0

11 of the 12 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.56.0
1.26.6
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
stdlib@go1.26.4
1.26.6
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
stdlib@go1.26.4
1.26.6
ghcr.io/k0rdent/kcm/controller:1.11.04de19a5373db
stdlib@go1.26.5
1.26.6
ghcr.io/k0rdent/kcm/telemetry:1.11.0aabb136cbaaf
stdlib@go1.26.5
1.26.6
ghcr.io/stakater/reloader:v1.4.190530cf462fa3
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.56.0
1.26.6
quay.io/jetstack/cert-manager-cainjector:v1.21.0ad1dcc5b2fcc
stdlib@go1.26.5
1.26.6
quay.io/jetstack/cert-manager-controller:v1.21.0e370f7800a53
stdlib@go1.26.5
1.26.6
quay.io/jetstack/cert-manager-startupapicheck:v1.21.068b3c5029dc6
stdlib@go1.26.5
1.26.6
quay.io/jetstack/cert-manager-webhook:v1.21.0c33cca307541
stdlib@go1.26.5
1.26.6
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
golang.org/x/net@v0.48.0
0.56.0

Open the chart page →

2,857
kcp-operatorkcp-devVerified publisher0.7.101 of 1See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
stdlib@go1.26.4
1.26.6

Open the chart page →

134
keeper-injectorkeeper-injectorVerified publisher0.10.02 of 2See more

keeper-injector keeper-injector 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
keeper/injector-webhook:0.10.0aeb5476b95f0
golang.org/x/net@v0.47.0
0.56.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
0.56.0

Open the chart page →

758
keeper-injectorkeeper-securityVerified publisher0.11.32 of 2See more

keeper-injector keeper-security 0.11.3

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
keeper/injector-webhook:0.11.33eb609f3e60c
golang.org/x/net@v0.55.0
0.56.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
0.56.0

Open the chart page →

505
nodevitalskeiailabVerified publisher0.8.61 of 1See more

nodevitals keiailab 0.8.6

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/keiailab/nodevitals:0.8.597107e46f0d3
stdlib@go1.26.5
1.26.6

Open the chart page →

434
kestra-starterkestraOfficialVerified publisher2.0.22 of 5See more

kestra-starter kestra 2.0.2

2 of the 5 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
library/docker:dind-rootlessc876e00a0d81
golang.org/x/net@v0.55.0
0.56.0
versity/versitygw:v1.1.0f730e0dbc1ef
golang.org/x/net@v0.49.0
0.56.0

Open the chart page →

5,473
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.56.0

Open the chart page →

5,067
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
golang.org/x/net@v0.0.0-20190415100556-4a65cf94b679
0.56.0

Open the chart page →

3,364
gogskeyporttech0.1.31 of 3See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gogs/gogs:0.12.30195b095d0b2
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
0.56.0

Open the chart page →

3,524
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
0.56.0

Open the chart page →

8,829
connectkfirfer1.15.02 of 2See more

connect kfirfer 1.15.0

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
1password/connect-api:1.7.26aa94cf713f9
golang.org/x/net@v0.14.0
0.56.0
1password/connect-sync:1.7.2fe527ed9d81f
golang.org/x/net@v0.14.0
0.56.0

Open the chart page →

2,787
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/net@v0.0.0-20190522155817-f3200d17e092
0.56.0

Open the chart page →

2,792
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
golang.org/x/net@v0.9.0
0.56.0

Open the chart page →

2,083
kubernetes-replicatorkfirfer2.9.11 of 1See more

kubernetes-replicator kfirfer 2.9.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.9.1baf5f784398b
golang.org/x/net@v0.8.0
0.56.0

Open the chart page →

864
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

3,515
pod-cleanupkfirfer0.0.41 of 1See more

pod-cleanup kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup:latest4369f3ba1d9a
golang.org/x/net@v0.43.0
0.56.0

Open the chart page →

742
prometheus-elasticsearch-exporterkfirfer6.5.11 of 1See more

prometheus-elasticsearch-exporter kfirfer 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.8.0073dd360de2c
golang.org/x/net@v0.23.0
0.56.0

Open the chart page →

778
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.56.0
grafana/promtail:2.6.1072527b12cdf
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.56.0
istio/pilot:1.15.2db08d6963975
golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e
0.56.0
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
golang.org/x/net@v0.1.0
0.56.0
ghcr.io/dexidp/dex:v2.35.313964b29d63e
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
0.56.0
ghcr.io/kiaedev/kiae:latestebd03028ff6a
golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b
0.56.0

Open the chart page →

19,267
local-path-provisionerkir4hVerified publisher0.0.351 of 1See more

local-path-provisioner kir4h 0.0.35

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
golang.org/x/net@v0.38.0
stdlib@go1.26.1
0.56.0
1.26.6

Open the chart page →

753
process-exporterkir4hVerified publisher1.0.11 of 1See more

process-exporter kir4h 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ncabatoff/process-exporterdigest-pinned6f0549dc24e9
golang.org/x/net@v0.33.0
0.56.0

Open the chart page →

741
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
golang.org/x/net@v0.32.0
0.56.0

Open the chart page →

12,256
rabbitmq-cluster-operatorklicktippVerified publisher0.4.23 of 3See more

rabbitmq-cluster-operator klicktipp 0.4.2

3 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/kubectl:1.36.30c2402d92b5c
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.56.0
1.26.6
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
golang.org/x/net@v0.53.0
0.56.0
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
golang.org/x/net@v0.53.0
0.56.0

Open the chart page →

810
rabbitmq-topology-operatorklicktippVerified publisher0.4.12 of 2See more

rabbitmq-topology-operator klicktipp 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/kubectl:1.36.30c2402d92b5c
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.56.0
1.26.6
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
golang.org/x/net@v0.53.0
0.56.0

Open the chart page →

549
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
golang.org/x/net@v0.15.0
0.56.0

Open the chart page →

1,971
klumklumVerified publisher1.17.11 of 1See more

klum klum 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/jadolg/klum:v0.8.17c66cc93f9d03
golang.org/x/net@v0.53.0
stdlib@go1.26.3
0.56.0
1.26.6

Open the chart page →

357
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
golang.org/x/net@v0.18.0
0.56.0

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
golang.org/x/net@v0.39.0
0.56.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
golang.org/x/net@v0.39.0
0.56.0

Open the chart page →

3,777
kollektorkollektorVerified publisher1.0.51 of 1See more

kollektor kollektor 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
pannoi/kollektor:1.0.59559617788fc
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

717
ingress-nginxkomailo-helm-charts1.0.02 of 2See more

ingress-nginx komailo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
golang.org/x/net@v0.29.0
0.56.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
0.56.0

Open the chart page →

1,548
k8s-metrics-serverkomailo-helm-charts1.2.01 of 1See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
stdlib@go1.26.4
1.26.6

Open the chart page →

163
longhornkomailo-helm-charts0.6.02 of 3See more

longhorn komailo-helm-charts 0.6.0

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
stdlib@go1.26.5
1.26.6
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
stdlib@go1.26.5
1.26.6

Open the chart page →

604
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
golang.org/x/net@v0.53.0
0.56.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
golang.org/x/net@v0.39.0
0.56.0
quay.io/metallb/speaker:v0.16.116561e96531e
golang.org/x/net@v0.53.0
0.56.0

Open the chart page →

2,151
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

1,272
komoplanekomodorVerified publisher0.1.81 of 1See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
komodorio/komoplane:0.2.19678d02c3f2e
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.56.0
1.26.6

Open the chart page →

954
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
golang.org/x/net@v0.29.0
0.56.0

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
golang.org/x/net@v0.23.0
0.56.0

Open the chart page →

1,208
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
golang.org/x/net@v0.43.0
stdlib@go1.26.1
0.56.0
1.26.6

Open the chart page →

2,242
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
0.56.0

Open the chart page →

3,185
authnkrateo0.23.01 of 1See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/authn:0.23.0791c8f9d885a
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

677
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
0.56.0
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
golang.org/x/net@v0.47.0
0.56.0

Open the chart page →

3,253
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
0.56.0

Open the chart page →

2,542
sweeperkrateo0.2.12 of 2See more

sweeper krateo 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
alpine/kubectl:1.36.01ee9df6316d4
golang.org/x/net@v0.49.0
stdlib@go1.26.2
0.56.0
1.26.6
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

1,505
krokro0.9.41 of 1See more

kro kro 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.k8s.io/kro/kro:v0.9.4eaf9fbaddd9d
stdlib@go1.26.3
1.26.6

Open the chart page →

88
kubeflowkromanow94-kubeflow0.5.116 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

16 of the 30 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
golang.org/x/net@v0.28.0
0.56.0
kubeflow/training-operator:v1-04f9f13dabb76dbda29
golang.org/x/net@v0.23.0
0.56.0
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
golang.org/x/net@v0.23.0
0.56.0
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
golang.org/x/net@v0.23.0
0.56.0
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
golang.org/x/net@v0.23.0
0.56.0
kubeflownotebookswg/kfam:v1.9.22060a2ede788
golang.org/x/net@v0.17.0
0.56.0
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
0.56.0
kubeflownotebookswg/poddefaults-webhook:v1.9.2bde88d98ad74
golang.org/x/net@v0.13.0
0.56.0
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.56.0
kubeflownotebookswg/pvcviewer-controller:v1.9.29815e9b1728f
golang.org/x/net@v0.24.0
0.56.0
kubeflownotebookswg/tensorboard-controller:v1.9.26536a9f61193
golang.org/x/net@v0.17.0
0.56.0
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
golang.org/x/net@v0.21.0
0.56.0
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
golang.org/x/net@v0.21.0
0.56.0
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
golang.org/x/net@v0.21.0
0.56.0
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
golang.org/x/net@v0.21.0
0.56.0
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
golang.org/x/net@v0.21.0
0.56.0

Open the chart page →

71,075
kron-aapm-sidecarkron-aapm-sidecar1.1.01 of 1See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
0.56.0

Open the chart page →

2,111

Container images carrying it

4,324 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cloudflare/cloudflared:2024.8.314d9c6b01b29
golang.org/x/net@v0.25.0
0.56.0
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
golang.org/x/net@v0.25.0
0.56.0
1
cloudflare/cloudflared:2023.10.0c18744ae1767
golang.org/x/net@v0.12.0
0.56.0
1
cloudflare/cloudflared:2025.8.0eb5c9324efe3
golang.org/x/net@v0.40.0
0.56.0
1
cloudflare/origin-ca-issuer:v0.14.4c92ef5ac7e4b
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.56.0
1.26.6
1
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
golang.org/x/net@v0.4.0
0.56.0
1
cloudreve/cloudreve:4.18.0f7a464100bf6
golang.org/x/net@v0.55.0
0.56.0
1
cloudtooling/moodle:5.2.3f4f04e0fc401
stdlib@go1.26.4
1.26.6
1
cmacrae/lgtm:0.1.0dec8d490fe40
golang.org/x/net@v0.0.0-20181108082009-03003ca0c849
0.56.0
1
cockroachdb/cockroach-operator:v2.1.0983312754620
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
0.56.0
1
codecov/self-hosted-gateway:24.4.1de483faad6e5
golang.org/x/net@v0.21.0
0.56.0
1
codenotary/immudb:1.9.77c85d7cc4f22
golang.org/x/net@v0.17.0
0.56.0
1
coderenvs/coder-service:1.44.61deffc4670e6
golang.org/x/net@v0.24.0
0.56.0
1
codeskyblue/gohttpserver:latestcaa862590e34
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.56.0
1
cometbft/cometbft:v0.38.1722c2ac018f40
golang.org/x/net@v0.34.0
0.56.0
1
concourse/concourse:8.3.040a143ce5873
golang.org/x/net@v0.50.0
stdlib@go1.26.5
0.56.0
1.26.6
1
conduction/agendaservice-php:latest9cfeeb6c7c20
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/balance-registration-php:devc36094a41369
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/betaalservice-php:latestece1ab544c57
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/cgrc-php:dev25415534d245
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/checkin-component-php:dev3423845692c1
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/docparser-php:devb6f95c8ead7d
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
conduction/pan-php:dev24f03c57568f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.56.0
1
confluentinc/cp-kafka:latest0ad069035863
stdlib@go1.26.5
1.26.6
1
confluentinc/cp-schema-registry:latestf0cfd047a839
stdlib@go1.26.5
1.26.6
1
consensys/web3signer:latestf146a51a1ba3
golang.org/x/net@v0.40.0
stdlib@go1.26.4
0.56.0
1.26.6
1
containous/maesh:v1.3.2587162516502
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
0.56.0
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
golang.org/x/net@v0.23.0
0.56.0
1
coordimap/coordimap-agent:latest7748fd0fae9f
golang.org/x/net@v0.38.0
stdlib@go1.26.4
0.56.0
1.26.6
1
coredns/coredns:1.12.040384aa1f5ea
golang.org/x/net@v0.31.0
0.56.0
1
coredns/coredns:1.7.073ca82b4ce82
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
0.56.0
1
coredns/coredns:1.14.6900f9c109f7a
stdlib@go1.26.5
1.26.6
1
coredns/coredns:1.10.1a0ead06651cf
golang.org/x/net@v0.4.0
0.56.0
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
golang.org/x/net@v0.33.0
0.56.0
1
cortezaproject/corteza:2024.9.08eb7a26605c9
golang.org/x/net@v0.21.0
0.56.0
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
golang.org/x/net@v0.33.0
0.56.0
1
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.56.0
1.26.6
1
couchbase/operator:2.9.369a385b49e1f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.56.0
1.26.6
1
craftypath/sops-operator:v0.8.0402a0024c732
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.56.0
1
crossplane/crossplane:v0.12.066666e6963af
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
0.56.0
1
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
0.56.0
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
0.56.0
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.56.0
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
0.56.0
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
0.56.0
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11
0.56.0
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
0.56.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.