StackRadar

CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.005
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,599
of 17,828 indexed, latest versions
Container images
4,356
deployed by those charts
Fix available
2 of 2
affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,599 of 17,828 indexed charts deploy, on 4,356 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more0.56.03,979
stdlibgolanggo1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+8 more1.26.6836
OSV records
GO-2026-5942
Also known as
BIT-golang-2026-46600

Charts affected

3,599 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

4,356 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
golang.org/x/net@v0.53.0
0.56.0
1
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/hive-operator:0.4.0d66ba9149c22
golang.org/x/net@v0.53.0
0.56.0
1
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/listener-csi-driver:0.4.0b69bed123b02
golang.org/x/net@v0.53.0
0.56.0
1
quay.io/zncdatadev/listener-operator:0.4.068b92dae8d75
golang.org/x/net@v0.53.0
0.56.0
1
quay.io/zncdatadev/nifi-operator:0.4.0bb4e26ff5e2f
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
golang.org/x/net@v0.47.0
0.56.0
1
quay.io/zncdatadev/spark-k8s-operator:0.4.0d3f2b10c4a6d
golang.org/x/net@v0.47.0
0.56.0
1
quay.io/zncdatadev/superset-operator:0.4.0102e66e32218
golang.org/x/net@v0.49.0
0.56.0
1
quay.io/zncdatadev/trino-operator:0.4.04f516757aee3
golang.org/x/net@v0.54.0
0.56.0
1
quay.io/zncdatadev/zookeeper-operator:0.4.0b4f33d89ac45
golang.org/x/net@v0.49.0
0.56.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
0.56.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
0.56.0
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
0.56.0
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.56.0
1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator:0.0.1779454fea06c
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
0.56.0
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
golang.org/x/net@v0.13.0
0.56.0
1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator:0.1.063cf51392ce7
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
0.56.0
1
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
golang.org/x/net@v0.0.0-20180811021610-c39426892332
0.56.0
1
registry.gitlab.com/dyff/dyff-operator:0.24.20e9ca51627601
golang.org/x/net@v0.44.0
0.56.0
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
stdlib@go1.26.5
1.26.6
1
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
golang.org/x/net@v0.17.0
0.56.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
golang.org/x/net@v0.47.0
stdlib@go1.26.1
0.56.0
1.26.6
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
golang.org/x/net@v0.50.0
stdlib@go1.26.1
0.56.0
1.26.6
1
registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign:v19.4.07757679afa1b
golang.org/x/net@v0.20.0
0.56.0
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabdc1a8972c640
golang.org/x/net@v0.48.0
0.56.0
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
golang.org/x/net@v0.55.0
0.56.0
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.56.0
1.26.6
1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup:latest4369f3ba1d9a
golang.org/x/net@v0.43.0
0.56.0
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
0.56.0
1
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.25448611a3c54
golang.org/x/net@v0.54.0
stdlib@go1.26.5
0.56.0
1.26.6
1
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
golang.org/x/net@v0.46.0
0.56.0
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
golang.org/x/net@v0.38.0
0.56.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
golang.org/x/net@v0.14.0
0.56.0
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.56.0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
golang.org/x/net@v0.49.0
0.56.0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
golang.org/x/net@v0.49.0
0.56.0
1
registry.gitlab.com/xrow-public/ci-tools/kubectl:main9357cfeef63c
golang.org/x/net@v0.38.0
0.56.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
golang.org/x/net@v0.48.0
stdlib@go1.26.5
0.56.0
1.26.6
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
golang.org/x/net@v0.41.0
0.56.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.93.006a950310ecd
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.56.0
1.26.6
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.56.0
1.26.6
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
stdlib@go1.26.5
1.26.6
1
registry.k8s.io/agent-sandbox/sandbox-router-go:v1.0.125b1a0939630
stdlib@go1.26.2
1.26.6
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
golang.org/x/net@v0.38.0
0.56.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
golang.org/x/net@v0.38.0
0.56.0
1
registry.k8s.io/autoscaling/vpa-admission-controller:1.4.171d817780aa9
golang.org/x/net@v0.39.0
0.56.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.