CVE-2026-73500
HighAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.004
- 33rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 586
- of 17,787 indexed, latest versions
- Container images
- 552
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
Carried by container images the latest versions of 586 of 17,787 indexed charts deploy, on 552 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| etcdbitnami | 3.5.7-0, 3.6.1-1, 3.6.4-0 | 3.5.33 | 4 |
| go.etcd.io/ | v3.3.0-rc.0.0.20200707003333-58bb8ae09f8e | 3.5.33 | 4 |
| go.etcd.io/ | v3.0.0-20210928084031-3df272774672, v3.5.0, v3.5.1, v3.5.2+33 more | 3.5.33 | 544 |
Charts affected
586 by stars
Container images carrying it
552 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | e8cad21b2f9a | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 2c314feeb5e8 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 64adcb95ce09 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 9c67cf8c92d8 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | d429b6d696e0 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | eee34b3de2dd | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 37ad4c475941 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | a784ce6e3b1b | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | ad34abeba912 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 6262bc9a2730 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | 8e5e9490cd50 | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | a0a002cb113c | go.etcd.io/ | 3.5.33 | 2 |
| quay.io/ | df6c926a2b54 | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | 89258156d0e9 | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | 2fa1c99ad09b | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | d992c36d4ddd | go.etcd.io/ | 3.5.33 | 2 |
| registry.k8s.io/ | e5900dc98b0d | go.etcd.io/ | 3.5.33 | 2 |
| abiondevelopment/ | c741988fbd23 | go.etcd.io/ | 3.5.33 | 1 |
| akeyless/ | 3d2e7dce5eb9 | go.etcd.io/ | 3.5.33 | 1 |
| antrea/ | c10bc45c6272 | go.etcd.io/ | 3.5.33 | 1 |
| antrea/ | f1373d39217c | go.etcd.io/ | 3.5.33 | 1 |
| antrea/ | 065193e7572f | go.etcd.io/ | 3.5.33 | 1 |
| apecloud/ | 5832d1a9097a | go.etcd.io/ | 3.5.33 | 1 |
| apecloud/ | 98abc64aa985 | go.etcd.io/ | 3.5.33 | 1 |
| aristidetm/ | 469dbc951224 | go.etcd.io/ | 3.5.33 | 1 |
| bitnami/ | b7e25b5c57d9 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | cb8ab5515676 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 0b60b6565ab2 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 0f7c8ac484ac | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 5501c419f42e | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 5bb0aa825d16 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 6dabb4a2088c | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 8935e75fa5d1 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 952f86d1116c | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | ba9f3b4b0b00 | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | c0ede65eb88e | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | cce234b4381a | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | d7cd0e172c4c | go.etcd.io/ | 3.5.33 | 1 |
| bitnamilegacy/ | 0cb31d0fc356 | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | cef0c907b8f4 | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | e486870cfde8 | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | 8f04e4772a2b | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | eadb3a25109a | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | 385bf6391fea | go.etcd.io/ | 3.5.33 | 1 |
| calico/ | d8c644a8a3ee | go.etcd.io/ | 3.5.33 | 1 |
| chrislusf/ | 634b094b2183 | go.etcd.io/ | 3.5.33 | 1 |
| chrislusf/ | ed80f00fde46 | go.etcd.io/ | 3.5.33 | 1 |