StackRadar

CVE-2026-73500

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
597
of 17,787 indexed, latest versions
Container images
562
deployed by those charts
Fix available
3 of 3
affected packages

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Carried by container images the latest versions of 597 of 17,787 indexed charts deploy, on 562 images.

Affected packageAffected versionsFixed inImages
etcdbitnami3.5.7-0, 3.6.1-1, 3.6.4-03.5.334
go.etcd.io/etcd/v3golangv3.3.0-rc.0.0.20200707003333-58bb8ae09f8e3.5.334
go.etcd.io/etcd/client/pkg/v3golangv3.0.0-20210928084031-3df272774672, v3.5.0, v3.5.1, v3.5.2+33 more3.5.33554
OSV records
BIT-etcd-2026-73500GHSA-6vch-q96h-7gc3GO-2026-6107

Charts affected

597 by stars
ChartLatestAffected imagesRadar Score
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.81 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
go.etcd.io/etcd/client/pkg/v3@v3.6.2
3.5.33

Open the chart page →

2,092
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33

Open the chart page →

4,203
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

7,709
shopwareshopware-storeVerified publisher2.1.11 of 5See more

shopware shopware-store 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

4,890
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.etcd.io/etcd/client/pkg/v3@v3.6.0
3.5.33

Open the chart page →

2,729
trilliansigstoreVerified publisher0.3.202 of 5See more

trillian sigstore 0.3.20

2 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

2,739
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
go.etcd.io/etcd/client/pkg/v3@v3.5.12
3.5.33

Open the chart page →

1,146
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.etcd.io/etcd/client/pkg/v3@v3.6.6
3.5.33

Open the chart page →

1,047
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
go.etcd.io/etcd/client/pkg/v3@v3.5.6
3.5.33

Open the chart page →

2,429
mimirskyloud-helm-chartsVerified publisher5.5.13 of 5See more

mimir skyloud-helm-charts 5.5.1

3 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33

Open the chart page →

10,650
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

7,935
kedasoftonic2.17.02 of 3See more

keda softonic 2.17.0

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33

Open the chart page →

2,583
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

4,975
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
go.etcd.io/etcd/v3@v3.3.0-rc.0.0.20200707003333-58bb8ae09f8e
3.5.33

Open the chart page →

6,836
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33

Open the chart page →

65,130
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.etcd.io/etcd/client/pkg/v3@v3.5.14
3.5.33

Open the chart page →

3,026
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33

Open the chart page →

18,828
ccm-hcloudsyself1.0.111 of 1See more

ccm-hcloud syself 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
go.etcd.io/etcd/client/pkg/v3@v3.5.1
3.5.33

Open the chart page →

1,706
ccm-hetznersyself2.0.71 of 1See more

ccm-hetzner syself 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33

Open the chart page →

702
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

7,336
monitoringthl-chartsVerified publisher0.1.12 of 10See more

monitoring thl-charts 0.1.1

2 of the 10 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33
grafana/promtail:2.4.2626900031c4e
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

18,908
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

6,974
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33

Open the chart page →

2,904
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
grafana/promtail:2.9.1063a2e57a5b14
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33

Open the chart page →

2,813
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

4,529
tyk-control-planetyk-helm5.3.02 of 7See more

tyk-control-plane tyk-helm 5.3.0

2 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

2,929
tyk-dashboardtyk-helm5.3.01 of 1See more

tyk-dashboard tyk-helm 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

659
tyk-data-planetyk-helm5.3.01 of 3See more

tyk-data-plane tyk-helm 5.3.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

846
tyk-stacktyk-helm5.3.02 of 7See more

tyk-stack tyk-helm 5.3.0

2 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.10e03b94c153d
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

2,879
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33

Open the chart page →

4,960
opencloudunxwaresVerified publisher0.2.32 of 13See more

opencloud unxwares 0.2.3

2 of the 13 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
go.etcd.io/etcd/client/pkg/v3@v3.5.20
3.5.33

Open the chart page →

45,392
upcloud-csiupcloud-csiVerified publisher1.18.05 of 7See more

upcloud-csi upcloud-csi 1.18.0

5 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

1,847
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
go.etcd.io/etcd/client/pkg/v3@v3.5.1
3.5.33

Open the chart page →

4,533
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33
quay.io/cilium/operator-generic:v1.17.14773886ec9337
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

4,124
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

887
wavefront-hpa-adapterwavefront0.2.101 of 1See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

1,685
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
etcd@3.6.1-1
3.5.33

Open the chart page →

3,096
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33

Open the chart page →

8,824
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

6,138
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33

Open the chart page →

1,456
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
go.etcd.io/etcd/client/pkg/v3@v3.6.0
3.5.33

Open the chart page →

543
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

1,890
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
go.etcd.io/etcd/client/pkg/v3@v3.5.11
3.5.33

Open the chart page →

14,618
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

9,381
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

1,958
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

7,972
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

879

Container images carrying it

562 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.