StackRadar

CVE-2026-73500

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
592
of 17,781 indexed, latest versions
Container images
559
deployed by those charts
Fix available
3 of 3
affected packages

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Carried by container images the latest versions of 592 of 17,781 indexed charts deploy, on 559 images.

Affected packageAffected versionsFixed inImages
etcdbitnami3.5.7-0, 3.6.1-1, 3.6.4-03.5.334
go.etcd.io/etcd/v3golangv3.3.0-rc.0.0.20200707003333-58bb8ae09f8e3.5.334
go.etcd.io/etcd/client/pkg/v3golangv3.0.0-20210928084031-3df272774672, v3.5.0, v3.5.1, v3.5.2+33 more3.5.33551
OSV records
BIT-etcd-2026-73500GHSA-6vch-q96h-7gc3GO-2026-6107

Charts affected

592 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher90.2.01 of 6See more

kube-prometheus-stack prometheus-community 90.2.0

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

740
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

3,218
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

156
vaulthashicorpVerified publisher0.34.11 of 2See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
go.etcd.io/etcd/client/pkg/v3@v3.6.0
3.5.33

Open the chart page →

542
ciliumciliumOfficialVerified publisher1.20.12 of 3See more

cilium cilium 1.20.1

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33
quay.io/cilium/operator-generic:v1.20.16c3885fc7b62
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

1,708
rancherrancher-stable2.15.11 of 2See more

rancher rancher-stable 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33

Open the chart page →

1,456
nginx-ingressnginxVerified publisher2.7.11 of 1See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.6.18ca7b42ae702
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

1,285
kedakedacore2.20.22 of 3See more

keda kedacore 2.20.2

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

873
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

1,100
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

569
mimir-distributedgrafana6.2.03 of 6See more

mimir-distributed grafana 6.2.0

3 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/mimir:3.2.0736f7459913d
go.etcd.io/etcd/client/pkg/v3@v3.6.13
3.5.33
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

4,517
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33

Open the chart page →

7,894
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

1,765
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

1,360
grafanagrafana-communityVerified publisher13.2.41 of 1See more

grafana grafana-community 13.2.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

431
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

1,889
openebsopenebsOfficialVerified publisher4.6.17 of 35See more

openebs openebs 4.6.1

7 of the 35 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
grafana/loki:3.4.258a6c186ce78
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
etcd@3.6.4-0
3.5.33
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

23,894
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.etcd.io/etcd/client/pkg/v3@v3.5.11
3.5.33

Open the chart page →

930
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33

Open the chart page →

2,883
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
go.etcd.io/etcd/client/pkg/v3@v3.6.12
3.5.33

Open the chart page →

330
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
etcd@3.6.1-1
3.5.33

Open the chart page →

3,045
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

2,483
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.etcd.io/etcd/client/pkg/v3@v3.5.14
3.5.33

Open the chart page →

1,040
snapshot-controllerpiraeus-chartsVerified publisher5.2.01 of 1See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

228
k10kastenVerified publisher9.0.54 of 23See more

k10 kasten 9.0.5

4 of the 23 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
gcr.io/kasten-images/aggregatedapis:9.0.5e5acd40c5aa5
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/dashboardbff:9.0.5dbbec053774e
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/executor:9.0.59388835ed097
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
gcr.io/kasten-images/vbrintegrationapi:9.0.54a2438d399ff
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

1,880
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.14 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

4 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.14 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

4 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

4,061
csi-driver-nfscsi-driver-nfsVerified publisher4.13.43 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

3,324
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33

Open the chart page →

3,475
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
etcd@3.5.7-0
3.5.33
milvusdb/milvus:v2.2.13a3a55e1c1497
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33

Open the chart page →

32,259
tempografana-communityVerified publisher3.0.01 of 1See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/tempo:3.0.30296560ac66f
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

148
rancherrancher-latest2.15.11 of 2See more

rancher rancher-latest 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
go.etcd.io/etcd/client/pkg/v3@v3.6.10
3.5.33

Open the chart page →

1,456
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
go.etcd.io/etcd/client/pkg/v3@v3.6.7
3.5.33

Open the chart page →

9,864
miniocloudpirates-minioVerified publisher0.13.41 of 1See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33

Open the chart page →

961
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33

Open the chart page →

3,157
proxmox-csi-pluginproxmox-csi0.5.123 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.12

3 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

1,766
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
go.etcd.io/etcd/client/pkg/v3@v3.5.1
3.5.33

Open the chart page →

16,251
k8sgpt-operatork8sgptOfficialVerified publisher0.2.291 of 2See more

k8sgpt-operator k8sgpt 0.2.29

1 of the 2 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33

Open the chart page →

966
node-feature-discoverynode-feature-discoveryOfficialVerified publisher0.19.01 of 1See more

node-feature-discovery node-feature-discovery 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

207
csi-driver-smbcsi-driver-smbVerified publisher1.20.32 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

2 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33

Open the chart page →

2,945
hpe-csi-driverhpe-storageVerified publisher3.3.05 of 14See more

hpe-csi-driver hpe-storage 3.3.0

5 of the 14 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.3.0e58e22427b38
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33

Open the chart page →

1,615
glasskube-operatorglasskubeOfficialVerified publisher0.12.22 of 3See more

glasskube-operator glasskube 0.12.2

2 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33

Open the chart page →

11,933
kubescape-operatorkubescape1.40.42 of 6See more

kubescape-operator kubescape 1.40.4

2 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
quay.io/kubescape/operator:v0.2.16901b2694425e9
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
quay.io/kubescape/storage:v0.0.33101f2b053ace1
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

920
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

4,854
milvusmilvus-helm5.0.272 of 4See more

milvus milvus-helm 5.0.27

2 of the 4 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
etcd@3.5.7-0
3.5.33
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33

Open the chart page →

10,670
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33

Open the chart page →

14,956
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.etcd.io/etcd/client/pkg/v3@v3.5.0
3.5.33

Open the chart page →

6,470
kube-prometheus-stackkube-prometheus-stack-oci91.2.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.2.1

1 of the 6 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.etcd.io/etcd/client/pkg/v3@v3.6.9
3.5.33

Open the chart page →

647
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-73500.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.etcd.io/etcd/client/pkg/v3@v3.5.19
3.5.33

Open the chart page →

10,775

Container images carrying it

559 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
1
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
1
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
go.etcd.io/etcd/client/pkg/v3@v3.6.11
3.5.33
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.etcd.io/etcd/client/pkg/v3@v3.5.21
3.5.33
1
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
go.etcd.io/etcd/client/pkg/v3@v3.5.5
3.5.33
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
go.etcd.io/etcd/client/pkg/v3@v3.5.10
3.5.33
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubedb/kubedb-kibana:v0.42.0735dd5d2709d
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubedb/kubedb-schema-manager:v0.42.04e2a3cce7ce8
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubedb/kubedb-ui-server:v0.42.0e93dfe7454d4
go.etcd.io/etcd/client/pkg/v3@v3.6.6
3.5.33
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
go.etcd.io/etcd/client/pkg/v3@v3.5.4
3.5.33
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
go.etcd.io/etcd/client/pkg/v3@v3.5.11
3.5.33
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33
1
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
go.etcd.io/etcd/client/pkg/v3@v3.5.14
3.5.33
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.etcd.io/etcd/client/pkg/v3@v3.5.6
3.5.33
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.etcd.io/etcd/client/pkg/v3@v3.5.6
3.5.33
1
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
go.etcd.io/etcd/client/pkg/v3@v3.6.3
3.5.33
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
go.etcd.io/etcd/client/pkg/v3@v3.5.16
3.5.33
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
go.etcd.io/etcd/client/pkg/v3@v3.5.13
3.5.33
1
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak:v0.1.5990dbf506d41
go.etcd.io/etcd/client/pkg/v3@v3.6.5
3.5.33
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
go.etcd.io/etcd/client/pkg/v3@v3.5.9
3.5.33
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.etcd.io/etcd/client/pkg/v3@v3.5.7
3.5.33
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
go.etcd.io/etcd/client/pkg/v3@v3.6.8
3.5.33
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
go.etcd.io/etcd/client/pkg/v3@v3.6.2
3.5.33
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
go.etcd.io/etcd/client/pkg/v3@v3.5.17
3.5.33
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.etcd.io/etcd/client/pkg/v3@v3.6.4
3.5.33
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.