CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,198; of 18,137 indexed, latest versions
Container images: 6,039; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,198 of 18,137 indexed charts deploy, on 6,039 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9, 1.27.2	5,973
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,834
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,198 by stars

Chart

Latest

Affected images

Radar Score

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,125

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

11,605

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.60.0 1.26.9
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,552

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9

Open the chart page →

29,067

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

3,065

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,479

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

12,435

mosquitto-exportermosquitto-exporter

0.2.2

1 of 1 See more

mosquitto-exporter mosquitto-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/qaoru/mosquitto_exporter :2.0.0	2058ad337e19	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

217

chirpstackmosquitto-helm-chart

0.5.0

3 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.60.0 1.26.9
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0 stdlib@go1.19.3	0.60.0 1.26.9
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.26.9

Open the chart page →

105,059

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

2,873

replacermosquitto-helm-chart

0.2.0

2 of 3 See more

replacer mosquitto-helm-chart 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.60.0 1.26.9
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

6,041

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.60.0 1.26.9

Open the chart page →

3,309

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.26.9

Open the chart page →

5,453

ms-hello-webms-hello-test

0.1.0

1 of 1 See more

ms-hello-web ms-hello-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
irakli/ms-web-hello :latest	966a4bfefe27	stdlib@go1.19.2	1.26.9

Open the chart page →

1,457

adguard-homemt190502

4.0.12

2 of 2 See more

adguard-home mt190502 4.0.12

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.73	7fbf01d73ecb	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9
mikefarah/yq :latest	4b3d9475d655	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,676

codimdmt190502

7.2.2

1 of 3 See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,807

commafeedmt190502

8.2.0

1 of 3 See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	fc973eb97c9f	stdlib@go1.24.6	1.26.9

Open the chart page →

4,311

filestashmt190502

4.0.0

1 of 1 See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
machines/filestash :latest	aff504cd28a8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

3,802

ghostmt190502

8.25.1

2 of 3 See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/ghost :6.25.1	2654b1e90413	stdlib@go1.24.6	1.26.9
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

6,565

keycloakmt190502

1.4.6

1 of 3 See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

3,338

maddymt190502

4.1.2

1 of 1 See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,615

memosmt190502

7.3.2

2 of 3 See more

memos mt190502 7.3.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
neosmemo/memos :0.26.2	3eefcc231141	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

3,295

minifluxmt190502

1.1.6

2 of 3 See more

miniflux mt190502 1.1.6

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	fc973eb97c9f	stdlib@go1.24.6	1.26.9
miniflux/miniflux :2.2.18	a3ca6bbc1f74	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

3,320

nightscoutmt190502

1.1.0

1 of 3 See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

7,599

open-webuimt190502

2.3.10

1 of 3 See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,807

paperless-ngxmt190502

7.6.14

2 of 4 See more

paperless-ngx mt190502 7.6.14

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	stdlib@go1.24.4	1.26.9

Open the chart page →

14,343

umamimt190502

8.1.4

1 of 3 See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

4,318

vaultwardenmt190502

7.3.4

1 of 3 See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

5,401

vikunjamt190502

7.1.2

2 of 3 See more

vikunja mt190502 7.1.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

3,979

mongodbmulti-chart-app

0.1.0

1 of 1 See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :7	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,508

my-multi-chart-appmulti-chart-app

0.1.0

1 of 2 See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :7	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

4,323

multusmultus

0.2.0

2 of 2 See more

multus multus 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller :v0.3.7	2a2bb32c0ea8	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

3,023

devops-demomungari-development-charts

1.0.4

4 of 4 See more

devops-demo mungari-development-charts 1.0.4

4 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :latest	fc973eb97c9f	stdlib@go1.24.6	1.26.9
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.4	0.60.0 1.26.9
quay.io/prometheus/alertmanager :latest	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/prometheus :latest	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

10,708

pagesmuthu-pages

1.0.0

1 of 3 See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

approuvezmvisonneau

0.1.1

1 of 1 See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

3,174

unpollermvisonneau

0.1.0

1 of 1 See more

unpoller mvisonneau 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
golift/unifi-poller :v2.9.2	585a29a06d05	golang.org/x/net@v0.15.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

1,904

ingress-nginxmxytest

4.15.1

2 of 2 See more

ingress-nginx mxytest 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,364

danboorumy0n

0.0.2

1 of 1 See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.26.9

Open the chart page →

105,526

danbooru-stackmy0n

0.0.3

1 of 4 See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.26.9

Open the chart page →

105,526

authmya

22.4.3

1 of 1 See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.60.0 1.26.9

Open the chart page →

3,620

clickhousemya

0.2403.1

1 of 1 See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.26.9

Open the chart page →

4,422

cognativemya

0.2403.3

3 of 3 See more

cognative mya 0.2403.3

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.26.9
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.60.0 1.26.9
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

9,596

giteamya

23.12.5

1 of 1 See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gitea/gitea :1.21.6	ac73e0da341f	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

4,331

redismya

22.4.10

1 of 2 See more

redis mya 22.4.10

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.26.9

Open the chart page →

1,947

redis-queuemya

22.4.6

1 of 2 See more

redis-queue mya 22.4.6

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.26.9

Open the chart page →

1,947

redis-raftmya

22.5.4

1 of 2 See more

redis-raft mya 22.5.4

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.26.9

Open the chart page →

1,947

apachemy-chart-repo

0.1.0

1 of 2 See more

apache my-chart-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,099

myhelmappmyhelmapp

0.1.1

1 of 1 See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9

Open the chart page →

4,546

my-helm-chartmy-helm-chart

0.1.0

1 of 3 See more

my-helm-chart my-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

4,725

Practica_4_helmmy-heml-app

0.1.0

3 of 7 See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.26.9
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.26.9

Open the chart page →

33,083

Container images carrying it

6,039 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.60.0 1.26.9	1
quay.io/gogatekeeper/gatekeeper :5.0.0	3d45202b06be	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
quay.io/go-skynet/local-ai :latest	f1bc435659b9	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9	1
quay.io/groundcover/caretta :v0.0.16	ed8f5118e3a4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18	0.60.0 1.26.9	1
quay.io/groundcover/victoria-metrics :v1.85.3	80ddeb90d18d	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	1
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9	1
quay.io/harikube/harikube :release-v0.16.3	b58b6d40c3bb	golang.org/x/net@v0.53.0 stdlib@go1.25.14	0.60.0 1.26.9	1
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	golang.org/x/net@v0.49.0 stdlib@go1.26.4	0.60.0 1.26.9	1
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9	1
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	golang.org/x/net@v0.48.0 stdlib@go1.25.10	0.60.0 1.26.9	1
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.60.0 1.26.9	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.60.0 1.26.9	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9	1
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	golang.org/x/net@v0.17.0 stdlib@go1.18.10	0.60.0 1.26.9	1
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.60.0 1.26.9	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-approver-policy :v0.28.0	1a955b0a5c41	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.20.0	6a620381d995	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.12.0	e0a5b06b231c	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.20.0	b9009aa6b45b	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1