CVE-2026-46600

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,559; of 17,790 indexed, latest versions
Container images: 4,369; deployed by those charts
Fix available: 2 of 2; affected packages

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Carried by container images the latest versions of 3,559 of 17,790 indexed charts deploy, on 4,369 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+221 more	0.56.0	3,945
stdlibgolang	go1.26.0, go1.26.1, go1.26.2, go1.26.2-X:boringcrypto+7 more	1.26.6	897

OSV records: GO-2026-5942
Also known as: BIT-golang-2026-46600

Charts affected

3,559 by stars

Chart

Latest

Affected images

Radar Score

dapr-agentsdapr-agents-dev

0.1.5

20 of 31 See more

dapr-agents dapr-agents-dev 0.1.5

20 of the 31 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0	0.56.0
grafana/loki :3.6.5	847c287ada0e	golang.org/x/net@v0.47.0	0.56.0
grafana/loki-canary :3.6.5	fbb984bab741	golang.org/x/net@v0.47.0	0.56.0
grafana/tempo :2.9.0	65a578975943	golang.org/x/net@v0.43.0	0.56.0
mcp/grafana :latest	9362bcf6aa0e	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/net@v0.49.0	0.56.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0	0.56.0
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/net@v0.48.0	0.56.0
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/net@v0.48.0	0.56.0
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/net@v0.48.0	0.56.0
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/net@v0.48.0	0.56.0
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/net@v0.48.0	0.56.0
ghcr.io/jkroepke/kube-webhook-certgen :1.7.7	b18964551d8e	golang.org/x/net@v0.49.0	0.56.0
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/net@v0.38.0	0.56.0
ghcr.io/kagent-dev/kmcp/controller :0.2.2	83276357d448	golang.org/x/net@v0.30.0	0.56.0
public.ecr.aws/diagrid-dev/diagrid-dashboard :latest	f1348a65664a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6
quay.io/prometheus-operator/prometheus-operator :v0.88.1	d3d65efa3bee	golang.org/x/net@v0.48.0	0.56.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0	0.56.0
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

22,355

dns-mesh-controllerdashdns

2.0.8

2 of 2 See more

dns-mesh-controller dashdns 2.0.8

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
emirozbir/dashdns-admission-webhook :v2.0.5	6801ba2a3fc3	golang.org/x/net@v0.47.0	0.56.0
emirozbir/dashdns-controller :v2.0.5	d3a5c1063425	golang.org/x/net@v0.38.0	0.56.0

Open the chart page →

1,103

dasherdasher

0.1.1

1 of 1 See more

dasher dasher 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	golang.org/x/net@v0.22.0	0.56.0

Open the chart page →

1,096

dash-opsdash-ops

0.0.4

1 of 1 See more

dash-ops dash-ops 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
dashops/dash-ops :latest	23537693ff05	golang.org/x/net@v0.46.0	0.56.0

Open the chart page →

507

dask-gatewaydask

2026.3.0

1 of 2 See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/traefik :3.3.5	104204dadedf	golang.org/x/net@v0.37.0	0.56.0

Open the chart page →

2,002

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.56.0

Open the chart page →

2,985

kafka-connectdasmeta

1.0.2

1 of 3 See more

kafka-connect dasmeta 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
confluentinc/cp-schema-registry :latest	f0cfd047a839	stdlib@go1.26.5	1.26.6

Open the chart page →

550

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.56.0

Open the chart page →

2,806

spqr-routerdasmeta

0.1.1

1 of 1 See more

spqr-router dasmeta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/net@v0.47.0	0.56.0

Open the chart page →

686

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/net@v0.7.0	0.56.0

Open the chart page →

1,933

monitoring-stackdata354-helm

1.4.2

2 of 4 See more

monitoring-stack data354-helm 1.4.2

2 of the 4 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.56.0 1.26.6
grafana/loki :latest	d70e4659623f	stdlib@go1.26.5	1.26.6

Open the chart page →

3,220

datadog-csi-driverdatadog

0.17.0

1 of 2 See more

datadog-csi-driver datadog 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.56.0

Open the chart page →

2,055

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.56.0

Open the chart page →

3,978

agent-helmdatasaker

0.1.8

5 of 6 See more

agent-helm datasaker 0.1.8

5 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/net@v0.17.0	0.56.0
datasaker/dsk-k8s-agent :latest	2542ee73be51	golang.org/x/net@v0.17.0	0.56.0
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/net@v0.17.0	0.56.0
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/net@v0.17.0	0.56.0
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/net@v0.15.0	0.56.0

Open the chart page →

7,606

ambassador-agentdatawire

1.0.22

1 of 1 See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ambassador/ambassador-agent :1.0.22	7a1ea0d934fb	golang.org/x/net@v0.19.0	0.56.0

Open the chart page →

964

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.56.0

Open the chart page →

7,494

eg-edge-stackdatawire

0.0.1

4 of 7 See more

eg-edge-stack datawire 0.0.1

4 of the 7 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/net@v0.11.0	0.56.0
ambassador/aes-eg-ext :v4.0.0-preview.1	b7eb1be3345d	golang.org/x/net@v0.11.0	0.56.0
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/net@v0.11.0	0.56.0
envoyproxy/gateway :v0.5.0	2a9f99d28567	golang.org/x/net@v0.10.0	0.56.0

Open the chart page →

15,861

eg-edge-stack-crdsdatawire

0.0.1

2 of 2 See more

eg-edge-stack-crds datawire 0.0.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	golang.org/x/net@v0.7.0	0.56.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.56.0

Open the chart page →

2,404

ddns-kubernetes-controllerddns-kubernetes-controller

0.1.0

1 of 1 See more

ddns-kubernetes-controller ddns-kubernetes-controller 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/mschenck/ddns-kubernetes-controller :latest	590d55aab53c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.56.0

Open the chart page →

970

kube-better-nodedecayofmind

0.0.4

1 of 1 See more

kube-better-node decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.56.0

Open the chart page →

1,584

defactopsdefactops

1.0.9

1 of 2 See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/net@v0.25.0	0.56.0

Open the chart page →

4,538

symfony-appdefault-gh

0.6.5

1 of 3 See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
alpine/git :2.36.3	66b210a97bc0	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.56.0

Open the chart page →

5,123

csi-driver-smbdeimosfr-charts

1.20.3

5 of 5 See more

csi-driver-smb deimosfr-charts 1.20.3

5 of the 5 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.56.0 1.26.6
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.56.0 1.26.6
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.56.0 1.26.6
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	stdlib@go1.26.4	1.26.6

Open the chart page →

3,005

ddns-updaterdeimosfr-charts

2.10.0

1 of 1 See more

ddns-updater deimosfr-charts 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
qmcgaw/ddns-updater :v2.10.0	3e2aa558946b	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.56.0 1.26.6

Open the chart page →

211

cortex-gatewaydeliveryhero

0.1.9

1 of 1 See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.56.0

Open the chart page →

2,241

field-exporterdeliveryhero

1.4.1

1 of 1 See more

field-exporter deliveryhero 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	golang.org/x/net@v0.26.0	0.56.0

Open the chart page →

471

k8s-cloudwatch-adapterdeliveryhero

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.56.0

Open the chart page →

2,475

prometheus-dellhw-exporterdellhw-exporter

1.3.0

1 of 1 See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	golang.org/x/net@v0.48.0	0.56.0

Open the chart page →

1,855

kubeteach-coredergeberl

0.2.3

1 of 1 See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/net@v0.1.0	0.56.0

Open the chart page →

1,505

kubeteach-exerciseset1dergeberl

0.2.3

1 of 2 See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/net@v0.1.0	0.56.0

Open the chart page →

1,505

clamav-apidevhat

1.0.1

1 of 1 See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/net@v0.25.0	0.56.0

Open the chart page →

2,097

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.56.0
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.56.0

Open the chart page →

4,735

devopsweeklydevopsweekly

2.1.0

1 of 1 See more

devopsweekly devopsweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/devopsweekly :v2.1.0	46625567fb60	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.56.0

Open the chart page →

1,217

lxd8sdevplayer0

0.5.1

2 of 2 See more

lxd8s devplayer0 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.56.0
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.56.0

Open the chart page →

5,431

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0	0.56.0

Open the chart page →

9,685

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127	0.56.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.56.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.56.0

Open the chart page →

13,011

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

1,587

caddy-reverse-proxydevtron

0.10.1

1 of 1 See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
library/caddy :latest	13ba145cba2f	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6

Open the chart page →

853

devtron-enterprisedevtron

48.0.0

17 of 28 See more

devtron-enterprise devtron 48.0.0

17 of the 28 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.56.0
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/net@v0.40.0	0.56.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.56.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0	0.56.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.56.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.56.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/net@v0.48.0	0.56.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.56.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.56.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.56.0
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/net@v0.28.0	0.56.0

Open the chart page →

68,695

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.56.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

5,055

devtron-logs-dumpdevtron

0.1.0

1 of 1 See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0	0.56.0

Open the chart page →

4,972

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.56.0

Open the chart page →

11,959

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0	0.56.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

3 of 6 See more

kube-prometheus-stack devtron 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.56.0
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.56.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.56.0

Open the chart page →

8,659

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.56.0

Open the chart page →

2,441

winter-soldierdevtron

0.10.6

1 of 1 See more

winter-soldier devtron 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.56.0

Open the chart page →

1,176

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.56.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0	0.56.0

Open the chart page →

9,685

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-46600.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127	0.56.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.56.0

Open the chart page →

10,484

Container images carrying it

4,369 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ipfs/kubo :v0.33.2	1a30f5ed8579	golang.org/x/net@v0.34.0	0.56.0	2
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.56.0	2
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.56.0	2
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/net@v0.9.0	0.56.0	2
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.56.0	2
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.56.0	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0	0.56.0	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/net@v0.38.0	0.56.0	2
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e	0.56.0	2
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.56.0	2
jmalloc/echo-server :0.3.1	e4eaee2c7998	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.56.0	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0	0.56.0	2
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.56.0	2
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.56.0	2
l7mp/stunner-auth-server :1.2.1	0d2094060b72	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.56.0 1.26.6	2
l7mp/stunner-auth-server :dev	58c775671b00	stdlib@go1.26.5	1.26.6	2
l7mp/stunner-gateway-operator :dev	1cadc92fdb49	stdlib@go1.26.5	1.26.6	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.56.0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0	0.56.0	2
library/caddy :2.11.4-alpine :2-alpine	5f5c8640aae0	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6	2
library/caddy :latest	df7f1c2fb114	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6	2
library/docker :dind	5efed980cba3	golang.org/x/net@v0.55.0	0.56.0	2
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.56.0	2
library/influxdb :2.7	b8d940ca9376	golang.org/x/net@v0.38.0	0.56.0	2
library/mongo :8.0.20	098862b1339f	golang.org/x/net@v0.47.0	0.56.0	2
library/mongo :5.0	41108d183e97	golang.org/x/net@v0.47.0	0.56.0	2
library/mongo :7	b096b4cb9269	stdlib@go1.26.5	1.26.6	2
library/mongo :7.0	b6421fd6d1c5	stdlib@go1.26.5	1.26.6	2
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0	0.56.0	2
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.56.0	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.56.0	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.56.0	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.56.0 1.26.6	2
longhornio/longhorn-manager :v1.12.1	83b79f57043f	stdlib@go1.26.5	1.26.6	2
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	stdlib@go1.26.5	1.26.6	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/net@v0.40.0	0.56.0	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.56.0 1.26.6	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/net@v0.40.0	0.56.0	2
meshery/meshery :stable-latest	44b64ee128fb	stdlib@go1.26.4	1.26.6	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.56.0	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	golang.org/x/net@v0.43.0	0.56.0	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.56.0	2
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.56.0	2
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.56.0 1.26.6	2
nacos/nacos-server :latest	1c191c30c8cd	stdlib@go1.26.5	1.26.6	2
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.56.0	2
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	golang.org/x/net@v0.40.0	0.56.0	2
obolnetwork/charon :v1.10.0	278c7e2897b6	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.56.0 1.26.6	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	golang.org/x/net@v0.38.0	0.56.0	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/net@v0.38.0	0.56.0	2