CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,540; of 17,790 indexed, latest versions
Container images: 4,338; deployed by those charts
Fix available: 2 of 2; affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,540 of 17,790 indexed charts deploy, on 4,338 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more	0.56.0	3,930
stdlibgolang	go1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+7 more	1.26.6	876

OSV records: GO-2026-5942
Also known as: BIT-golang-2026-46600

Charts affected

3,540 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

1 See more

kube-prometheus-stack prometheus-community 91.4.1

1 container image this version deploys carries CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.26.6

Open the chart page →

—

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.56.0 1.26.6
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

2,989

ingress-nginxingress-nginx

4.15.1

2 of 2 See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.56.0 1.26.6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.56.0 1.26.6

Open the chart page →

1,548

prometheusprometheus-community

29.30.0

2 of 6 See more

prometheus prometheus-community 29.30.0

2 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.6
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

458

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	stdlib@go1.26.4	1.26.6

Open the chart page →

156

vaulthashicorp

0.34.1

2 of 2 See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	stdlib@go1.26.5	1.26.6
hashicorp/vault-k8s :1.7.6	55e27b080c9b	stdlib@go1.26.5	1.26.6

Open the chart page →

543

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.56.0 1.26.6
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

1,650

jenkinsjenkinsci

5.9.62

1 of 2 See more

jenkins jenkinsci 5.9.62

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	golang.org/x/net@v0.38.0	0.56.0

Open the chart page →

2,527

longhornlonghorn

1.12.1

2 of 3 See more

longhorn longhorn 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	stdlib@go1.26.5	1.26.6
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	stdlib@go1.26.5	1.26.6

Open the chart page →

555

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

3,207

mongodbbitnami

19.2.1

1 of 1 See more

mongodb bitnami 19.2.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	e46cffb66274	stdlib@go1.26.5	1.26.6

Open the chart page →

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	golang.org/x/net@v0.53.0	0.56.0

Open the chart page →

1,337

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	golang.org/x/net@v0.53.0	0.56.0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	golang.org/x/net@v0.39.0	0.56.0
quay.io/metallb/speaker :v0.16.1	16561e96531e	golang.org/x/net@v0.53.0	0.56.0

Open the chart page →

2,129

cloudnative-pgcloudnative-pg

0.29.0

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	stdlib@go1.26.4	1.26.6

Open the chart page →

118

argo-workflowsargo

2.0.6

3 of 3 See more

argo-workflows argo 2.0.6

3 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.3	94a031823f2a	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.56.0 1.26.6
quay.io/argoproj/argocli :v4.1.3	fe3b85fcfaf8	stdlib@go1.26.5	1.26.6
quay.io/argoproj/workflow-controller :v4.1.3	3f8e77840d1f	stdlib@go1.26.5	1.26.6

Open the chart page →

259

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.56.0 1.26.6

Open the chart page →

1,456

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

147

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.56.0 1.26.6
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.56.0 1.26.6
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.56.0 1.26.6

Open the chart page →

873

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.56.0

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

5 of 7 See more

artifact-hub artifact-hub 1.23.0

5 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/net@v0.48.0	0.56.0
artifacthub/db-migrator :v1.23.0	28c13565ac5c	stdlib@go1.26.4	1.26.6
artifacthub/hub :v1.23.0	7d3a91c539dc	stdlib@go1.26.4	1.26.6
artifacthub/scanner :v1.23.0	2d8365601f0e	golang.org/x/net@v0.48.0 stdlib@go1.26.4	0.56.0 1.26.6
artifacthub/tracker :v1.23.0	5368d21a6e5c	golang.org/x/net@v0.44.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

10,782

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/net@v0.53.0	0.56.0

Open the chart page →

1,139

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0	0.56.0

Open the chart page →

594

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.56.0 1.26.6

Open the chart page →

569

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.56.0 1.26.6
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

2,989

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	stdlib@go1.26.5	1.26.6

Open the chart page →

295

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0	0.56.0

Open the chart page →

7,909

mimir-distributedgrafana

6.2.0

4 of 6 See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	stdlib@go1.26.5	1.26.6
grafana/rollout-operator :v0.38.1	32fe838b79dd	stdlib@go1.26.5	1.26.6
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.56.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.56.0

Open the chart page →

4,519

natsnats

2.14.6

1 of 3 See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

2,315

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	stdlib@go1.26.5	1.26.6

Open the chart page →

718

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	golang.org/x/net@v0.43.0	0.56.0

Open the chart page →

1,765

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

30,167

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	golang.org/x/net@v0.49.0	0.56.0
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	golang.org/x/net@v0.53.0	0.56.0
falcosecurity/falcoctl :0.13.0	0eeb79adc580	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.56.0 1.26.6

Open the chart page →

5,309

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.56.0

Open the chart page →

2,315

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/net@v0.38.0	0.56.0

Open the chart page →

1,360

prometheus-node-exporterprometheus-community

4.57.0

1 of 1 See more

prometheus-node-exporter prometheus-community 4.57.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.6

Open the chart page →

rook-cephrook

1.20.7

2 of 2 See more

rook-ceph rook 1.20.7

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	golang.org/x/net@v0.55.0	0.56.0
quay.io/cephcsi/ceph-csi-operator :v1.0.4	c62933fd4083	golang.org/x/net@v0.55.0	0.56.0

Open the chart page →

1,447

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.47.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

969

victoria-metrics-k8s-stackvictoriametrics

0.92.1

5 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

5 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6
victoriametrics/operator :v0.74.1	7310c4a80b94	stdlib@go1.26.5	1.26.6
ghcr.io/victoriametrics/sync-job :v0.0.17	b6f233532a85	stdlib@go1.26.4-X:jsonv2	1.26.6
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.56.0 1.26.6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

1,890

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0	0.56.0

Open the chart page →

1,445

kuredkured

6.1.0

1 of 1 See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/kubereboot/kured :1.23.0	8dfd3c2e8893	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

231

openebsopenebs

4.6.1

17 of 35 See more

openebs openebs 4.6.1

17 of the 35 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0	0.56.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0	0.56.0
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/net@v0.38.0	0.56.0
openebs/lvm-driver :1.10.1	41f73aba7f31	golang.org/x/net@v0.48.0	0.56.0
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	golang.org/x/net@v0.55.0	0.56.0
openebs/zfs-driver :2.11.1	16f1a74bb249	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.56.0 1.26.6
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.56.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.56.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.56.0
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0	0.56.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0	0.56.0
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0	0.56.0
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/net@v0.43.0	0.56.0
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	golang.org/x/net@v0.39.0	0.56.0
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0	0.56.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0	0.56.0
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0	0.56.0

Open the chart page →

24,009

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.56.0

Open the chart page →

930

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0	0.56.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.56.0

Open the chart page →

2,883

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	stdlib@go1.26.5	1.26.6

Open the chart page →

330

x509-certificate-exporterenix

4.2.0

1 of 1 See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/enix/x509-certificate-exporter :4.2.0	afef14dc3862	stdlib@go1.26.5	1.26.6

Open the chart page →

vpafairwinds-stable

5.0.1

4 of 4 See more

vpa fairwinds-stable 5.0.1

4 of the 4 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0	0.56.0

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.56.0

Open the chart page →

2,059

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.56.0

Open the chart page →

3,096

prometheus-pushgatewayprometheus-community

3.8.0

1 of 1 See more

prometheus-pushgateway prometheus-community 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

124

trinotrino

1.42.2

1 of 1 See more

1,309

Container images carrying it

4,338 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
louislam/uptime-kuma :1.23.13	96510915e6be	golang.org/x/net@v0.19.0	0.56.0	1
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	golang.org/x/net@v0.40.0	0.56.0	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.56.0	1
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.56.0	1
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/net@v0.19.0	0.56.0	1
lumenvox/admin-portal :7.1	12310cf52f79	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/archive :7.1	5114f08ab8ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/cloud-init-tools :7.1	de940e2ec601	stdlib@go1.26.2	1.26.6	1
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.56.0	1
lumenvox/configuration :7.1	82bf01d9ebec	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/deployment :7.1	dadac2a74be6	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/deployment-portal :7.1	9d83efc340cf	stdlib@go1.26.4	1.26.6	1
lumenvox/file-store :7.1	38aa8711c9ef	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/license :7.1	35d0b1ac053e	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/management-api :7.1	6420a6e7d6c2	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/resource :7.1	93fd6ff1d62c	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
lumenvox/storage :7.1	c961fe78e2ca	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	1
macropower/twitch_predictions_recorder :v0.2	1e9c4fb89787	golang.org/x/net@v0.1.0	0.56.0	1
maldridge/alertmanager-irc-relay :v0.4.1	391de2b76128	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.56.0	1
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	golang.org/x/net@v0.10.0	0.56.0	1
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	golang.org/x/net@v0.4.0	0.56.0	1
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.56.0	1
masipcat/wireguard-go :0.0.20230223	769f7bb64694	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.56.0	1
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.56.0	1
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.56.0	1
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.56.0	1
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.56.0	1
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.56.0	1
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/net@v0.19.0	0.56.0	1
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.56.0	1
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.56.0	1
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.56.0	1
mattermost/mattermost-operator :v1.25.4	bac00a2bbd33	golang.org/x/net@v0.41.0	0.56.0	1
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/net@v0.24.0	0.56.0	1
mattermost/rtcd :latest	a27058aaa53a	golang.org/x/net@v0.50.0	0.56.0	1
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	golang.org/x/net@v0.7.0	0.56.0	1
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/net@v0.26.0	0.56.0	1
maxrocketinternet/k8s-event-logger :2.7	0234bdec4626	golang.org/x/net@v0.38.0	0.56.0	1
maxrocketinternet/k8s-event-logger :2.1	11224534789d	golang.org/x/net@v0.8.0	0.56.0	1
mccutchen/go-httpbin :latest	20739736d4eb	stdlib@go1.26.5	1.26.6	1
megaease/easegress :latest	fad1c7452958	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.56.0 1.26.6	1
meshery/meshery-operator :1.0.5	0d245bc8b5c6	stdlib@go1.26.4	1.26.6	1
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/net@v0.11.0	0.56.0	1
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/net@v0.25.0	0.56.0	1
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/net@v0.13.0	0.56.0	1
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.56.0	1
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.56.0	1
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.56.0	1
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.56.0	1
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.56.0	1