CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.26.9
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

7,090

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.26.9

Open the chart page →

10,821

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

11,754

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

3,511

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.60.0 1.26.9

Open the chart page →

4,599

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

3,758

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.26.9

Open the chart page →

12,202

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

3,493

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.26.9

Open the chart page →

13,102

ghost-on-kubernetesghost-on-kubernetes-helm

2.0.2

2 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.4	6ea90827b110	stdlib@go1.24.6	1.26.9
ghcr.io/sredevopsorg/ghost-on-kubernetes :main	8da4c9948421	stdlib@go1.26.4	1.26.9

Open the chart page →

1,835

openbaogitlab

0.20.0

1 of 1 See more

openbao gitlab 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.6.2-gitlab1	77907fa18465	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

1,863

gitlab-runnergitlab-jh

0.93.0

1 of 1 See more

gitlab-runner gitlab-jh 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

650

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.26.9

Open the chart page →

7,290

etcdgroundhog2k

1.1.14

1 of 2 See more

etcd groundhog2k 1.1.14

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.7.2	e9afa62b1e91	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

238

giteagroundhog2k

0.16.5

1 of 1 See more

gitea groundhog2k 0.16.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gitea/gitea :28.1.0	f505a0d3a413	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

218

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	stdlib@go1.26.5	1.26.9

Open the chart page →

2,619

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.26.9

Open the chart page →

7,863

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.60.0 1.26.9

Open the chart page →

2,877

haproxyhaproxytech

1.30.2

1 of 1 See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :3.4.4	1fe3f201ebb5	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

804

whoamiharrytang

0.2.0

1 of 1 See more

whoami harrytang 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.26.9

Open the chart page →

752

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,801

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,096

headscaleheadscale

1.0.20

3 of 3 See more

headscale headscale 1.0.20

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4-debug	2380cdb4951e	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,862

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

2,668

netbirdhelmforge

1.0.11

2 of 4 See more

netbird helmforge 1.0.11

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	74935e722416	stdlib@go1.24.6	1.26.9
netbirdio/netbird-server :0.79.0	d1da0c0179c9	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

3,350

simple-krr-dashboardhelm-simple-krr-dashboard

1.6.2

1 of 3 See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,969

helm-watchdog-pod-deletehelm-watchdog-pod-delete

0.3.0

1 of 1 See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,664

hermes-agenthermes-agent

1.18.0

1 of 1 See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nousresearch/hermes-agent :v2026.9.24	fca358f12efd	stdlib@go1.24.4	1.26.9

Open the chart page →

6,975

home-assistanthome-assistant

0.5.13

2 of 3 See more

home-assistant home-assistant 0.5.13

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/nats :2.15.0-scratch	c0d27f305460	stdlib@go1.27.1	1.27.2
ghcr.io/home-assistant/home-assistant :2026.10.0	1b64d38f38d9	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

3,015

keycloak-operatorhostzero-keycloak-operator

0.13.1

1 of 1 See more

keycloak-operator hostzero-keycloak-operator 0.13.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/hostzero-gmbh/keycloak-operator :v0.13.1	ab4ee2b45444	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

201

hpe-cosi-driverhpe-storage

2.0.0

2 of 2 See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	golang.org/x/net@v0.40.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

2,669

inference-manager-engineinference-manager-engine

1.46.0

1 of 1 See more

inference-manager-engine inference-manager-engine 1.46.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

628

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

3,764

infrahub-enterpriseinfrahub-enterprise

4.21.3

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.21.3

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.9

Open the chart page →

12,723

inlets-operatorinlets

0.17.20

1 of 1 See more

inlets-operator inlets 0.17.20

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/inlets/inlets-operator :0.17.22	08265c006973	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

884

coreinstill-ai

0.1.75

7 of 15 See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.60.0 1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

14,348

intel-gpu-resource-driverintel

0.7.0

1 of 1 See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,088

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

3,439

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

5,076

amazon-eks-pod-identity-webhookjkroepke

2.6.5

1 of 1 See more

amazon-eks-pod-identity-webhook jkroepke 2.6.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

469

k8s-ephemeral-storage-metricsk8s-ephemeral-storage-metrics

1.21.3

1 of 1 See more

k8s-ephemeral-storage-metrics k8s-ephemeral-storage-metrics 1.21.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics :1.21.3	8297aa4a9278	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

309

rustrial-k8s-gitops-secrets-controllerk8s-gitops-secrets

0.6.0

1 of 1 See more

rustrial-k8s-gitops-secrets-controller k8s-gitops-secrets 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rustrial/k8s-gitops-secrets-controller :0.6.0	93326a322a01	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

340

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.26.9

Open the chart page →

6,440

home-assistantk8s-home-lab-repo

16.3.1

1 of 1 See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

5,801

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.26.9

Open the chart page →

8,459

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.26.9

Open the chart page →

2,635

k8statusk8status

0.17.0

1 of 1 See more

k8status k8status 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,213

kanister-operatorkanister

0.118.0

1 of 1 See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/kanisterio/controller :0.118.0	d22616a5998b	golang.org/x/net@v0.41.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,687

kiali-operatorkiali

2.33.0

1 of 1 See more

kiali-operator kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.33.0	035995403eed	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,719

kividb-operator-chartkividb-operator

0.4.0

2 of 2 See more

kividb-operator-chart kividb-operator 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/kividbio/kividb-operator :0.4.0	a2395d6f47b7	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kividbio/kividb-operator-gui :0.4.0	276352c04b9c	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

402

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.26.9	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/net@v0.35.0 stdlib@go1.23.8	0.60.0 1.26.9	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	golang.org/x/net@v0.38.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.9	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.5.10	e9245a0bca88	stdlib@go1.26.7	1.26.9	1
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.60.0 1.26.9	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	golang.org/x/net@v0.53.0 stdlib@go1.24.4	0.60.0 1.26.9	1
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.26.9	1
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	stdlib@go1.23.5	1.26.9	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0 stdlib@go1.18.5	0.60.0 1.26.9	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.26.9	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.26.9	1
ghcr.io/open-feature/flagd :v0.16.0	32234e63c1d0	golang.org/x/net@v0.52.0 stdlib@go1.25.10	0.60.0 1.26.9	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.60.0 1.26.9	1
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/openkube-hub/kubeuser-controller :0.1.2	27cc7b4dfa0a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/openlit/openlit :1.24.0	2434560e8f0e	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9	1
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	golang.org/x/net@v0.56.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	golang.org/x/net@v0.43.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	golang.org/x/net@v0.55.0 stdlib@go1.25.11	0.60.0 1.26.9	1
ghcr.io/opensoha/soha :v0.1.9	a5e8e9f7a41d	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/opensoha/soha-agent :v0.1.9	70d66a0df909	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/opensoha/soha-operator :0.1.1	5d07d5c5a684	golang.org/x/net@v0.55.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	golang.org/x/net@v0.10.0 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/demo :3.1.0-cart	17c881cf29af	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/demo :3.1.0-opamp-server	3b6c6220bf9c	stdlib@go1.27.1	1.27.2	1
ghcr.io/open-telemetry/demo :3.1.0-product-catalog	7578cbf65fa4	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
ghcr.io/open-telemetry/demo :3.1.0-checkout	d4448ff54129	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.14.0	0b063b9ec47e	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.9.0	26f82b148dfe	golang.org/x/net@v0.53.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.159.0	2ceb3b541295	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.148.0	590e50477b76	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.144.0	79b81912f1fb	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.150.0	89490ef63b72	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator :0.124.0	8936271cf56a	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator :0.160.0	df98ddd322a6	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/open-webui/open-terminal :0.14.0-slim	ba7a67129bba	stdlib@go1.24.4	1.26.9	1
ghcr.io/opnpulse/perses :v2026.4.24	7f540d844c54	golang.org/x/net@v0.42.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/opnpulse/prom-label-proxy :v2026.9.22	47afd6372838	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/opnpulse/tenant-operator :v0.0.3	8fe9b4157ed2	golang.org/x/net@v0.54.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/opnpulse/thanos-operator :v2026.4.24	e05a3e701291	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/orkspace/orkestra :0.7.18	63356a41fbef	golang.org/x/net@v0.59.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/orkspace/orkestra-cc :0.7.18	ebb9654ac4d2	stdlib@go1.26.6	1.26.9	1
ghcr.io/oscrx/tlsa-dnsendpoint-controller	ddd9b71b2d98	golang.org/x/net@v0.58.0	0.60.0	1