CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,559; of 17,787 indexed, latest versions
Container images: 4,367; deployed by those charts
Fix available: 2 of 2; affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,559 of 17,787 indexed charts deploy, on 4,367 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more	0.56.0	3,943
stdlibgolang	go1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+7 more	1.26.6	898

OSV records: GO-2026-5942
Also known as: BIT-golang-2026-46600

Charts affected

3,559 by stars

Chart

Latest

Affected images

Radar Score

blob-csi-driverblob-csi-driver

1.27.9

1 of 5 See more

blob-csi-driver blob-csi-driver 1.27.9

1 of the 5 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi :v1.27.9	f9e20264150a	stdlib@go1.26.4	1.26.6

Open the chart page →

758

csi-driver-nfsbook-k8sinfra-v2

4.12.1

6 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

6 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0	0.56.0
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0	0.56.0
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0	0.56.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0	0.56.0
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0	0.56.0
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	golang.org/x/net@v0.37.0	0.56.0

Open the chart page →

6,063

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0	0.56.0

Open the chart page →

1,800

jaegerbook-k8sinfra-v2

3.4.0

3 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

3 of the 5 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.56.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.56.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.56.0

Open the chart page →

19,291

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/net@v0.17.0	0.56.0

Open the chart page →

7,627

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

5 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

5 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0	0.56.0
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0	0.56.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.56.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

6,035

metallbbook-k8sinfra-v2

0.13.10

2 of 3 See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0	0.56.0
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

3,857

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.56.0

Open the chart page →

2,745

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0	0.56.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0	0.56.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.56.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.56.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.56.0

Open the chart page →

5,304

pyroscopebook-k8sinfra-v2

1.10.0

2 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0	0.56.0
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

3,244

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0	0.56.0

Open the chart page →

1,859

boundary-softsciboundary-softsci

0.2.4

1 of 1 See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
hashicorp/boundary :latest	76a201954ca0	golang.org/x/net@v0.48.0	0.56.0

Open the chart page →

727

branchdbbranch-db

0.1.4

2 of 3 See more

branchdb branch-db 0.1.4

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6

Open the chart page →

517

bitmagnetbrandan-schmitz-helm-charts

1.0.6

1 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0	0.56.0

Open the chart page →

1,721

Filebrowserbrandan-schmitz-helm-charts

1.3.1

1 of 1 See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	stdlib@go1.26.4	1.26.6

Open the chart page →

995

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0	0.56.0

Open the chart page →

14,446

plexbryopsida

0.2.0

1 of 1 See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	stdlib@go1.26.5	1.26.6

Open the chart page →

848

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/net@v0.53.0	0.56.0

Open the chart page →

620

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
moby/buildkit :master	bc964521ee58	golang.org/x/net@v0.50.0	0.56.0

Open the chart page →

403

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	stdlib@go1.26.5	1.26.6

Open the chart page →

11,947

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.56.0 1.26.6
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0	0.56.0

Open the chart page →

1,396

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.56.0

Open the chart page →

2,374

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0	0.56.0

Open the chart page →

1,400

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

1,298

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0	0.56.0

Open the chart page →

2,772

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0	0.56.0

Open the chart page →

1,497

gotenbergbysamio

0.2.0

1 of 1 See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8-chromium	a40f92d7419a	stdlib@go1.26.5	1.26.6

Open the chart page →

8,991

miniobysamio

1.0.3

1 of 1 See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0	0.56.0

Open the chart page →

1,069

payloadboxbytefork

0.0.4

1 of 1 See more

payloadbox bytefork 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.26.6

Open the chart page →

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.56.0 1.26.6

Open the chart page →

1,677

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0	0.56.0

Open the chart page →

892

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.56.0

Open the chart page →

2,399

ct-singlecalltelemetry

0.8.4

1 of 7 See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.56.0

Open the chart page →

10,442

stablecalltelemetry

0.7.1

1 of 9 See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.56.0

Open the chart page →

7,702

stable-hacalltelemetry

0.11.4

1 of 7 See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0	0.56.0

Open the chart page →

4,705

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d	0.56.0

Open the chart page →

4,518

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.56.0

Open the chart page →

2,195

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	golang.org/x/net@v0.34.0	0.56.0

Open the chart page →

6,158

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

1,193

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129	0.56.0

Open the chart page →

1,632

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	golang.org/x/net@v0.17.0	0.56.0

Open the chart page →

1,330

caninecanine

0.1.10

6 of 7 See more

canine canine 0.1.10

6 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0	0.56.0
ghcr.io/caninehq/canine :latest	a058034ca006	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

13,363

cert-managercanine

1.15.3

4 of 4 See more

cert-manager canine 1.15.3

4 of the 4 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	golang.org/x/net@v0.26.0	0.56.0
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

2,880

traefikcanine

40.2.0

1 of 1 See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0	0.56.0

Open the chart page →

1,023

capi2argo-cluster-operatorcapi2argo

1.5.0

1 of 1 See more

capi2argo-cluster-operator capi2argo 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	golang.org/x/net@v0.40.0	0.56.0

Open the chart page →

281

capsule-argo-addoncapsule-argo-addon

0.7.5

2 of 2 See more

capsule-argo-addon capsule-argo-addon 0.7.5

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.56.0
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	golang.org/x/net@v0.43.0	0.56.0

Open the chart page →

2,040

freebox-exportercaptnbp

1.0.0

1 of 1 See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	golang.org/x/net@v0.17.0	0.56.0

Open the chart page →

717

ranchercarbide-charts

2.15.1

2 of 2 See more

rancher carbide-charts 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.56.0 1.26.6

Open the chart page →

1,456

stigatroncarbide-charts

0.4.1

1 of 10 See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0	0.56.0

Open the chart page →

4,423

casdoor-helm-chartscasdoor

4.4.0

1 of 1 See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
casbin/casdoor :4.4.0	8511c0757ac3	golang.org/x/net@v0.49.0	0.56.0

Open the chart page →

1,103

Container images carrying it

4,367 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.56.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.56.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0	0.56.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4	0.56.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.56.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0	0.56.0	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0	0.56.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0	0.56.0	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0	0.56.0	2
grafana/loki :3.6.11	44148ad243c0	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.56.0 1.26.6	2
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.56.0	2
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0	0.56.0	2
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.56.0	2
grafana/mimir :3.2.0	736f7459913d	stdlib@go1.26.5	1.26.6	2
grafana/promtail :1.5.0	46e88d390cd6	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.56.0	2
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0	0.56.0	2
grafana/tempo :2.10.8	f0561deb1c68	stdlib@go1.26.5	1.26.6	2
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0	0.56.0	2
hashicorp/boundary-enterprise :1.0.1-ent	38d2f9bdee0d	stdlib@go1.26.4	1.26.6	2
hashicorp/consul :1.14.2	e38576edcdfd	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.56.0	2
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.56.0	2
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.56.0	2
hashicorp/vault :2.0.4	5be49781ecf7	stdlib@go1.26.5	1.26.6	2
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0	0.56.0	2
hashicorp/vault :1.12.1	8de4d5f31b38	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.56.0	2
hashicorp/vault-k8s :1.7.6	55e27b080c9b	stdlib@go1.26.5	1.26.6	2
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0	0.56.0	2
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/net@v0.0.0-20221004154528-8021a29435af	0.56.0	2
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.56.0	2
helmforge/kubectl :1.35.3	c3f97e954c47	golang.org/x/net@v0.47.0	0.56.0	2
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.56.0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0	0.56.0	2
ilum/api :6.7.3	624fd09528c8	golang.org/x/net@v0.37.0	0.56.0	2
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/net@v0.8.0	0.56.0	2
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0	0.56.0	2
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0	0.56.0	2
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.56.0	2
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.56.0	2
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0	0.56.0	2
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.56.0	2
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.56.0	2
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.56.0	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.56.0	2
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0	0.56.0	2
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0	0.56.0	2
ipfs/ipfs-cluster :latest :v1.1.6	a83266c524f1	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.56.0 1.26.6	2
ipfs/kubo :v0.33.2	1a30f5ed8579	golang.org/x/net@v0.34.0	0.56.0	2
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.56.0	2
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.56.0	2
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/net@v0.9.0	0.56.0	2