StackRadar

CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,616
of 17,805 indexed, latest versions
Container images
4,367
deployed by those charts
Fix available
2 of 2
affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,616 of 17,805 indexed charts deploy, on 4,367 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more0.56.03,960
stdlibgolanggo1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+7 more1.26.6868
OSV records
GO-2026-5942
Also known as
BIT-golang-2026-46600

Charts affected

3,616 by stars
ChartLatestAffected imagesRadar Score
kubernetes-event-exporteritakurahVerified publisher0.2.31 of 1See more

kubernetes-event-exporter itakurah 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

1,142
tailscale-operatorjacobcolvinVerified publisher0.1.01 of 1See more

tailscale-operator jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
tailscale/k8s-operator:unstablecc9b8f6d9dea
stdlib@go1.26.5
1.26.6

Open the chart page →

242
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
alpine/git:latest6f3b5029566d
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.56.0
1.26.6

Open the chart page →

3,441
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2
0.56.0

Open the chart page →

9,351
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
golang.org/x/net@v0.17.0
0.56.0

Open the chart page →

7,447
job-manager-dispatcherjob-manager-dispatcher1.27.01 of 1See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

479
job-manager-serverjob-manager-server1.27.01 of 1See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

757
hncjouveVerified publisher0.8.31 of 1See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
golang.org/x/net@v0.3.0
0.56.0

Open the chart page →

1,078
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
golang.org/x/net@v0.24.0
0.56.0

Open the chart page →

1,290
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.56.0
1.26.6

Open the chart page →

2,620
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
golang.org/x/net@v0.11.0
0.56.0

Open the chart page →

3,381
k8s-ephemeral-storage-metricsk8s-ephemeral-storage-metrics1.21.31 of 1See more

k8s-ephemeral-storage-metrics k8s-ephemeral-storage-metrics 1.21.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics:1.21.38297aa4a9278
stdlib@go1.26.5
1.26.6

Open the chart page →

56
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3213 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

13 of the 17 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
golang.org/x/net@v0.50.0
0.56.0
grafana/grafana:12.3.12175aaa91c96
golang.org/x/net@v0.46.0
0.56.0
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/net@v0.47.0
0.56.0
grafana/loki-canary:3.6.70dac7d5cb383
golang.org/x/net@v0.47.0
0.56.0
grafana/tempo:2.9.065a578975943
golang.org/x/net@v0.43.0
0.56.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/net@v0.29.0
0.56.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/net@v0.29.0
0.56.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/net@v0.37.0
0.56.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
golang.org/x/net@v0.49.0
0.56.0
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
golang.org/x/net@v0.49.0
0.56.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/net@v0.44.0
0.56.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/net@v0.49.0
stdlib@go1.26.0
0.56.0
1.26.6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
0.56.0

Open the chart page →

15,794
karpenterkarpenter-provider-gcpVerified publisher0.6.01 of 1See more

karpenter karpenter-provider-gcp 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.6.0aab80cfd2c4e
stdlib@go1.26.5
1.26.6

Open the chart page →

119
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

5,595
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

5,875
mongodb-operatorkeiailabVerified publisher1.16.91 of 1See more

mongodb-operator keiailab 1.16.9

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/keiailab/mongodb-operator:v1.16.9cf6d86e057bb
stdlib@go1.26.5
1.26.6

Open the chart page →

127
valkey-operatorkeiailabVerified publisher1.5.21 of 1See more

valkey-operator keiailab 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.249b5aef82877
stdlib@go1.26.5
1.26.6

Open the chart page →

127
keycloakkeycloak1.13.71 of 2See more

keycloak keycloak 1.13.7

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
golang.org/x/net@v0.46.0
0.56.0

Open the chart page →

349
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

521
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
0.56.0

Open the chart page →

5,409
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
golang.org/x/net@v0.42.0
0.56.0
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
golang.org/x/net@v0.34.0
0.56.0

Open the chart page →

12,237
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
golang.org/x/net@v0.41.0
0.56.0

Open the chart page →

398
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
golang.org/x/net@v0.23.0
0.56.0

Open the chart page →

544
kubeadaptkubeadaptVerified publisher1.0.71 of 1See more

kubeadapt kubeadapt 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.56.0
1.26.6

Open the chart page →

214
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.56.0
1.26.6

Open the chart page →

383
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
golang.org/x/net@v0.38.0
0.56.0
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
golang.org/x/net@v0.38.0
0.56.0
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
golang.org/x/net@v0.38.0
0.56.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
golang.org/x/net@v0.38.0
0.56.0

Open the chart page →

2,928
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
golang.org/x/net@v0.20.0
0.56.0

Open the chart page →

20,617
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/net@v0.17.0
0.56.0
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/net@v0.23.0
0.56.0

Open the chart page →

4,741
kubeboltkubeboltVerified publisher2.1.01 of 3See more

kubebolt kubebolt 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.148.0-scratchb269959f3cac
stdlib@go1.26.5
1.26.6

Open the chart page →

397
kubebrowsekubebrowse1.7.03 of 5See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/net@v0.39.0
0.56.0
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
golang.org/x/net@v0.40.0
0.56.0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
golang.org/x/net@v0.42.0
0.56.0

Open the chart page →

4,302
elastikubeelastiOfficialVerified publisher0.1.302 of 2See more

elasti kubeelasti 0.1.30

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/kubeelasti/elasti-operator:0.1.303b2a972a0284
stdlib@go1.26.5
1.26.6
ghcr.io/kubeelasti/elasti-resolver:0.1.30db3cd41d28ed
stdlib@go1.26.5
1.26.6

Open the chart page →

112
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
0.56.0

Open the chart page →

2,426
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/net@v0.19.0
0.56.0

Open the chart page →

3,399
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
0.56.0
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/net@v0.19.0
0.56.0

Open the chart page →

6,109
kube-monkeykubemonkey1.6.01 of 1See more

kube-monkey kubemonkey 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.40a5bb6fc3f3f
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.56.0
1.26.6

Open the chart page →

120
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.56.0
1.26.6

Open the chart page →

503
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
golang.org/x/net@v0.52.0
stdlib@go1.26.3
0.56.0
1.26.6

Open the chart page →

10,091
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.96.5dbeff02d2337
golang.org/x/net@v0.48.0
stdlib@go1.26.1
0.56.0
1.26.6

Open the chart page →

1,039
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
golang.org/x/net@v0.7.0
0.56.0

Open the chart page →

3,284
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
golang.org/x/net@v0.48.0
0.56.0

Open the chart page →

747
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
golang.org/x/net@v0.40.0
0.56.0

Open the chart page →

4,307
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/net@v0.32.0
0.56.0

Open the chart page →

909
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
golang.org/x/net@v0.9.0
0.56.0

Open the chart page →

2,522
mesherykubesphere-stable0.5.012 of 13See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
golang.org/x/net@v0.39.0
0.56.0
layer5/meshery-app-mesh:stable-latest77d59943b3d6
golang.org/x/net@v0.2.0
0.56.0
layer5/meshery-consul:stable-latest25a4cc38abcd
golang.org/x/net@v0.17.0
0.56.0
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297
0.56.0
layer5/meshery-istio:stable-latestfde47c141ec6
golang.org/x/net@v0.36.0
0.56.0
layer5/meshery-kuma:stable-latest9d25f029a8a2
golang.org/x/net@v0.17.0
0.56.0
layer5/meshery-linkerd:stable-latestb99c73bac1f5
golang.org/x/net@v0.19.0
0.56.0
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
golang.org/x/net@v0.9.0
0.56.0
layer5/meshery-nsm:stable-latestebd6a8faf21f
golang.org/x/net@v0.0.0-20200822124328-c89045814202
0.56.0
layer5/meshery-operator:stable-latest6f58a28fe422
golang.org/x/net@v0.33.0
0.56.0
layer5/meshery-osm:stable-latestec898e5786c6
golang.org/x/net@v0.5.0
0.56.0
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
golang.org/x/net@v0.9.0
0.56.0

Open the chart page →

24,962
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
0.56.0

Open the chart page →

2,612
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.56.0

Open the chart page →

1,576
kubetailkubetailVerified publisher0.26.03 of 3See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
golang.org/x/net@v0.38.0
0.56.0
ghcr.io/kubetail-org/kubetail-cluster-api:0.8.28e6acd0da9ac
golang.org/x/net@v0.52.0
0.56.0
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
golang.org/x/net@v0.52.0
0.56.0

Open the chart page →

1,896
kube-vault-controllerkube-vault-controller1.2.01 of 1See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
golang.org/x/net@v0.7.0
0.56.0

Open the chart page →

1,550
kube-vip-cloud-providerkube-vip0.2.101 of 1See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container imageDigestPackageFixed in
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
golang.org/x/net@v0.37.0
0.56.0

Open the chart page →

806

Container images carrying it

4,367 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
golang.org/x/net@v0.33.0
0.56.0
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
golang.org/x/net@v0.52.0
0.56.0
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
golang.org/x/net@v0.41.0
0.56.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
golang.org/x/net@v0.2.0
0.56.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
golang.org/x/net@v0.47.0
0.56.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller:v2.0.0-beta9637c80dd23f
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.56.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook:v2.0.0-beta86b0f7243250
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.56.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.49.0d2bdfff2c377
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller:1.067b89ae52240
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.56.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-2021.08.13.20.34-linux-amd6402aed3370fce
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.56.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-35-g41dc61e-2022.12.16.20.38363bd65cd707
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
0.56.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.56.0
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
golang.org/x/net@v0.21.0
0.56.0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
golang.org/x/net@v0.43.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server:1.45.090b890f800ab
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer:1.27.086957bbeeff5
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/session-manager-agent:1.9.0b9f23db99051
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
golang.org/x/net@v0.35.0
0.56.0
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:1.9.0f24ecd37fbaa
golang.org/x/net@v0.38.0
0.56.0
1
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.6.0aab80cfd2c4e
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
golang.org/x/net@v0.49.0
stdlib@go1.26.1
0.56.0
1.26.6
1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
golang.org/x/net@v0.49.0
stdlib@go1.26.1
0.56.0
1.26.6
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
golang.org/x/net@v0.47.0
0.56.0
1
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.56.0
1.26.6
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
golang.org/x/net@v0.5.0
0.56.0
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.10.252281db48c93
stdlib@go1.26.5
1.26.6
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
golang.org/x/net@v0.28.0
0.56.0
1
public.ecr.aws/eks/amazon-eks-pod-identity-webhook:v0.6.173071570e8e8c
golang.org/x/net@v0.49.0
stdlib@go1.26.3
0.56.0
1.26.6
1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
golang.org/x/net@v0.24.0
0.56.0
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
golang.org/x/net@v0.52.0
stdlib@go1.26.3
0.56.0
1.26.6
1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
golang.org/x/net@v0.47.0
0.56.0
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.56.0
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.56.0
1.26.6
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
golang.org/x/net@v0.53.0
stdlib@go1.26.3
0.56.0
1.26.6
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
0.56.0
1
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
0.56.0
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.56.0
1.26.6
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
golang.org/x/net@v0.44.0
0.56.0
1
public.ecr.aws/karpenter/controller:1.9.030a506c64fbb
golang.org/x/net@v0.48.0
0.56.0
1
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
golang.org/x/net@v0.1.0
0.56.0
1
public.ecr.aws/karpenter/controller:1.1.1fe383abf1dbc
golang.org/x/net@v0.30.0
0.56.0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.