StackRadar

CVE-2026-73500

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
592
of 17,781 indexed, latest versions
Container images
559
deployed by those charts
Fix available
3 of 3
affected packages

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Carried by container images the latest versions of 592 of 17,781 indexed charts deploy, on 559 images.

Affected packageAffected versionsFixed inImages
etcdbitnami3.5.7-0, 3.6.1-1, 3.6.4-03.5.334
go.etcd.io/etcd/v3golangv3.3.0-rc.0.0.20200707003333-58bb8ae09f8e3.5.334
go.etcd.io/etcd/client/pkg/v3golangv3.0.0-20210928084031-3df272774672, v3.5.0, v3.5.1, v3.5.2+33 more3.5.33551
OSV records
BIT-etcd-2026-73500GHSA-6vch-q96h-7gc3GO-2026-6107

Charts affected

592 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher90.2.01 of 6See more

kube-prometheus-stack prometheus-community 90.2.0

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

740
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

3,218
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

156
vaulthashicorpVerified publisher0.34.11 of 2See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
go.etcd.io/etcd/client/pkg/v3@v3.6.0
3.5.33

Open the chart page →

542
ciliumciliumOfficialVerified publisher1.20.12 of 3See more

cilium cilium 1.20.1

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33
quay.io/cilium/operator-generic:v1.20.16c3885fc7b62
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

1,708
rancherrancher-stable2.15.11 of 2See more

rancher rancher-stable 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33

Open the chart page →

1,456
nginx-ingressnginxVerified publisher2.7.11 of 1See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.6.18ca7b42ae702
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

1,285
kedakedacore2.20.22 of 3See more

keda kedacore 2.20.2

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

873
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

1,100
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

569
mimir-distributedgrafana6.2.03 of 6See more

mimir-distributed grafana 6.2.0

3 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/mimir:3.2.0736f7459913d
go.etcd.io/etcd/client/pkg/v3@v3.6.13
3.5.33
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

4,517
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33

Open the chart page →

7,894
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

1,765
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

1,360
grafanagrafana-communityVerified publisher13.2.41 of 1See more

grafana grafana-community 13.2.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

431
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

1,889
openebsopenebsOfficialVerified publisher4.6.17 of 35See more

openebs openebs 4.6.1

7 of the 35 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
grafana/loki:3.4.258a6c186ce78
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
etcd@3.6.4-0
3.5.33
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

23,894
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.etcd.io/etcd/client/pkg/v3@v3.5.11
3.5.33

Open the chart page →

930
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33

Open the chart page →

2,883
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

330
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
etcd@3.6.1-1
3.5.33

Open the chart page →

3,045
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

2,483
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.etcd.io/etcd/client/pkg/v3@v3.5.14
3.5.33

Open the chart page →

1,040
snapshot-controllerpiraeus-chartsVerified publisher5.2.01 of 1See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

228
k10kastenVerified publisher9.0.54 of 23See more

k10 kasten 9.0.5

4 of the 23 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
gcr.io/kasten-images/aggregatedapis:9.0.5e5acd40c5aa5
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/dashboardbff:9.0.5dbbec053774e
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/executor:9.0.59388835ed097
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/vbrintegrationapi:9.0.54a2438d399ff
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

1,880
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.14 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

4 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.14 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

4 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

4,061
csi-driver-nfscsi-driver-nfsVerified publisher4.13.43 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

3,324
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33

Open the chart page →

3,475
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
etcd@3.5.7-0
3.5.33
milvusdb/milvus:v2.2.13a3a55e1c1497
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33

Open the chart page →

32,259
tempografana-communityVerified publisher3.0.01 of 1See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/tempo:3.0.30296560ac66f
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

148
rancherrancher-latest2.15.11 of 2See more

rancher rancher-latest 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33

Open the chart page →

1,456
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

9,864
miniocloudpirates-minioVerified publisher0.13.41 of 1See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33

Open the chart page →

961
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

3,157
proxmox-csi-pluginproxmox-csi0.5.123 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.12

3 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

1,766
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
go.etcd.io/etcd/client/pkg/v3@v3.5.1
3.5.33

Open the chart page →

16,251
k8sgpt-operatork8sgptOfficialVerified publisher0.2.291 of 2See more

k8sgpt-operator k8sgpt 0.2.29

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

966
node-feature-discoverynode-feature-discoveryOfficialVerified publisher0.19.01 of 1See more

node-feature-discovery node-feature-discovery 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

207
csi-driver-smbcsi-driver-smbVerified publisher1.20.32 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

2 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

2,945
hpe-csi-driverhpe-storageVerified publisher3.3.05 of 14See more

hpe-csi-driver hpe-storage 3.3.0

5 of the 14 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.3.0e58e22427b38
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

1,615
glasskube-operatorglasskubeOfficialVerified publisher0.12.22 of 3See more

glasskube-operator glasskube 0.12.2

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33

Open the chart page →

11,933
kubescape-operatorkubescape1.40.42 of 6See more

kubescape-operator kubescape 1.40.4

2 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/kubescape/operator:v0.2.16901b2694425e9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
quay.io/kubescape/storage:v0.0.33101f2b053ace1
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

920
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

4,854
milvusmilvus-helm5.0.272 of 4See more

milvus milvus-helm 5.0.27

2 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
etcd@3.5.7-0
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

10,670
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

14,956
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

6,470
kube-prometheus-stackkube-prometheus-stack-oci91.2.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.2.1

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

647
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

10,775

Container images carrying it

559 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33
16
grafana/grafana:latestf772d434e8fa
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
12
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
10
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
go.etcd.io/etcd/client/pkg/v3@v3.6.6
3.5.33
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
7
ghcr.io/quenchworks/images/grafana3ccc56791c8a
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
6
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
5
grafana/grafana:13.1.0121a7a9ece6d
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
4
grafana/loki:2.6.11ee60f980950
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33
4
grafana/loki:3.6.73c8fd3570dd9
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
4
grafana/tempo:2.9.065a578975943
go.etcd.io/etcd/client/pkg/v3@v3.5.12
3.5.33
4
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33
4
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
4
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
4
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
3
envoyproxy/gateway:v1.7.5156b7d32c73b
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
3
grafana/grafana:11.0.00dc5a246ab16
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
3
grafana/grafana:13.1.17cb8c64c4d57
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
3
grafana/grafana:11.3.0a0f881232a6f
go.etcd.io/etcd/client/pkg/v3@v3.5.14
3.5.33
3
grafana/loki:3.4.258a6c186ce78
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
3
grafana/loki-canary:3.6.70dac7d5cb383
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
3
grafana/promtail:2.4.2626900031c4e
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
3
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
3
ghcr.io/quenchworks/images/tempo9e889ec33f96
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.etcd.io/etcd/client/pkg/v3@v3.6.0
3.5.33
3
ghcr.io/sigstore/scaffolding/trillian_log_server5a878e4e4f03
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
3
ghcr.io/sigstore/scaffolding/trillian_log_signer28c5ff40963f
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.