CVE-2026-78659

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,521; of 18,087 indexed, latest versions
Container images: 6,339; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,521 of 18,087 indexed charts deploy, on 6,339 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,327
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,102
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78659 GO-2026-6603
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,521 by stars

Chart

Latest

Affected images

Radar Score

ndb-operatorndb-operator

0.5.11

1 of 1 See more

ndb-operator ndb-operator 0.5.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/nutanix-cloud-native/ndb-operator/controller :v0.5.8	b3927d7b72b9	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

102

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/net@v0.44.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

4,859

netbird-api-exporternetbird-api-exporter

0.2.17

1 of 1 See more

netbird-api-exporter netbird-api-exporter 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/matanbaruch/netbird-api-exporter :0.2.16	fcbf2025207a	stdlib@go1.27.1	1.27.2

Open the chart page →

232

netbird-operatornetbird-operator

0.8.0

1 of 1 See more

netbird-operator netbird-operator 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/netbirdio/netbird-operator :v0.8.0	ae2c26cfc547	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

192

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.8	0.60.0 1.26.9

Open the chart page →

6,280

mstreamnicholaswilde

2.1.2

1 of 1 See more

mstream nicholaswilde 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/mstream :version-v5.2.5	22c012bcc43c	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297 stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,749

gateway-apinicklasfrahm-gateway-api

0.2.0

1 of 1 See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.33.3	2c59a3f0726c	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,664

observalobserval

1.14.0

2 of 8 See more

observal observal 1.14.0

2 of the 8 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
library/postgres :16	1a6ab3f5345e	stdlib@go1.24.6	1.26.9

Open the chart page →

6,380

aws-xrayokgolove

5.0.0

1 of 1 See more

aws-xray okgolove 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/xray/aws-xray-daemon :3.6.2	43d051eed000	golang.org/x/net@v0.38.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

538

olivetinolivetin

4.0.0

1 of 1 See more

olivetin olivetin 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jamesread/olivetin :3000.19.0	af9d7c4db6dc	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

620

flagsmithone-acre-fund

0.1.5

1 of 6 See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

7,970

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
enketo/enketo-express :3.0.4	dcad9c2273f6	stdlib@go1.17.1	1.26.9
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

23,855

secrets-injectoronepassword-connect

1.2.0

1 of 1 See more

secrets-injector onepassword-connect 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

1,453

opentelemetry-ebpfopentelemetry-helm

0.1.7

1 of 4 See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/net@v0.7.0 stdlib@go1.20	0.60.0 1.26.9

Open the chart page →

3,628

opentelemetry-ebpf-instrumentationopentelemetry-helm

0.14.3

1 of 1 See more

opentelemetry-ebpf-instrumentation opentelemetry-helm 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument :v0.14.0	0b063b9ec47e	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	stdlib@go1.17.2	1.26.9
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	stdlib@go1.16.15	1.26.9
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.60.0 1.26.9
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.19.1	0.60.0 1.26.9
quay.io/opsmxpublic/opa :opa-sidecar-v1.0	3dcbf3caa454	golang.org/x/net@v0.38.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/opsmxpublic/opa :1.12.0	84fb1af7401c	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	stdlib@go1.22.2	1.26.9
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.1	0.60.0 1.26.9

Open the chart page →

110,685

pacto-operatorpacto-operator

5.4.2

1 of 1 See more

pacto-operator pacto-operator 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/trianalab/pacto/operator :5.4.2	fc2c05866911	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87 stdlib@go1.18.3	0.60.0 1.26.9
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87 stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

5,472

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

1,456

persesperses

0.23.3

1 See more

perses perses 0.23.3

1 container image this version deploys carries CVE-2026-78659.

Container image	Digest	Package	Fixed in
persesdev/perses :v0.54.0	a0e34ddaf9d7	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

—

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

3,548

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/net@v0.39.0 stdlib@go1.21.6	0.60.0 1.26.9

Open the chart page →

1,923

ipmi-exporterpnnl-miscscripts

0.1.15

1 of 1 See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.26.9

Open the chart page →

4,287

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/net@v0.9.0 stdlib@go1.20.3	0.60.0 1.26.9

Open the chart page →

2,777

prometheus-memcached-exporterprometheus-community

0.6.0

1 of 1 See more

prometheus-memcached-exporter prometheus-community 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.17.0	995c80e3ffbe	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

113

prometheus-pgbouncer-exporterprometheus-community

0.10.1

1 of 1 See more

prometheus-pgbouncer-exporter prometheus-community 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/pgbouncer-exporter :v0.12.1	30f31b6c2efd	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

449

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

1,127

prometheus-yet-another-cloudwatch-exporterprometheus-community

0.48.0

1 of 1 See more

prometheus-yet-another-cloudwatch-exporter prometheus-community 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter :v0.68.0	651b4041d9c3	stdlib@go1.26.8	1.26.9

Open the chart page →

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.12	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

16,682

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

6,243

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

3,837

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.26.9

Open the chart page →

14,419

wordpress-hardenedriotkit-org

2.0.0

2 of 2 See more

wordpress-hardened riotkit-org 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.60.0 1.26.9
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.26.9

Open the chart page →

8,265

backrestrobertobochet

0.7.0

1 of 1 See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
garethgeorge/backrest :v1.14.1	b85297975428	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

1,200

supabaserock8s

0.0.6

1 of 1 See more

supabase rock8s 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9

Open the chart page →

607

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,682

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/net@v0.31.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,654

sabliersablier-helm-charts

1.8.1

1 of 1 See more

sablier sablier-helm-charts 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sablierapp/sablier :1.16.1	413704376656	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

336

satisfactory-serversatisfactory

0.1.6

1 of 1 See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.26.9

Open the chart page →

4,455

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.40

7 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.40

7 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs-csi-driver :v1.4.34	1fca534c9001	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
chrislusf/seaweedfs-mount :v1.4.34	7c6250e96001	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9

Open the chart page →

8,130

seldon-core-operatorseldon

1.19.0

1 of 1 See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
seldonio/seldon-core-operator :1.19.0	544e3bf71bd1	golang.org/x/net@v0.44.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,228

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/net@v0.37.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

1,642

lldapself-hosters-by-night

0.5.2

2 of 2 See more

lldap self-hosters-by-night 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.26.9

Open the chart page →

4,787

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

973

skypilotskypilot

0.14.0

3 of 3 See more

skypilot skypilot 0.14.0

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot :0.14.0	a8362d205365	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,717

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/net@v0.4.0 stdlib@go1.20	0.60.0 1.26.9

Open the chart page →

2,415

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9

Open the chart page →

18,189

forecastlestakater

2.1.3

1 of 1 See more

forecastle stakater 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/net@v0.51.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

976

ingressmonitorcontrollerstakater

2.2.13

1 of 1 See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

863

tigera-operatorstevehipwell

2.15.0

1 of 1 See more

tigera-operator stevehipwell 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.44.0	066c2e8d6745	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:boringcrypto	0.60.0 1.27.2

Open the chart page →

Container images carrying it

6,339 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9	2
freikin/dawarich :1.15.3	589e3606b11b	stdlib@go1.24.4	1.26.9	2
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.26.9	2
frinx/krakend :7.0.0	bf8edd4f52f3	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.60.0 1.26.9	2
frinx/resource-manager :6.1.0	9cd0147a09bd	stdlib@go1.21.7	1.26.9	2
frinx/schellar :6.1.0	4693dc627d32	stdlib@go1.21.11	1.26.9	2
garethgeorge/backrest :latest :v1.14.1	b85297975428	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.26.9	2
githubexporter/github-exporter :v2.3.1	a36fbedeedf8	stdlib@go1.26.4	1.26.9	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b stdlib@go1.18	0.60.0 1.26.9	2
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.60.0 1.26.9	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.60.0 1.26.9	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.60.0 1.26.9	2
grafana/alloy :v1.19.2	b8ec653c4423	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	2
grafana/grafana :13.0.1	0f86bada30d6	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.60.0 1.26.9	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.60.0 1.26.9	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.5	0.60.0 1.26.9	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.60.0 1.26.9	2
grafana/loki :3.6.5	847c287ada0e	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	2
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.11	0.60.0 1.26.9	2
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.60.0 1.26.9	2
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.60.0 1.26.9	2
grafana/promtail :1.5.0	46e88d390cd6	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.11	0.60.0 1.26.9	2
grafana/promtail :2.9.3	b338a29de45e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	2
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0 stdlib@go1.21.3	0.60.0 1.26.9	2
grafana/tempo :2.10.8	f0561deb1c68	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	2
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.60.0 1.26.9	2
hashicorp/boundary-enterprise :1.0.2-ent	3a8061968ee4	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	2
hashicorp/consul :1.14.2	e38576edcdfd	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.60.0 1.26.9	2
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.2	0.60.0 1.26.9	2
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.7	0.60.0 1.26.9	2
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	2
hashicorp/vault :1.12.1	8de4d5f31b38	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.60.0 1.26.9	2
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	2
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/net@v0.0.0-20221004154528-8021a29435af stdlib@go1.19.3	0.60.0 1.26.9	2
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9	2
helmforge/kubectl :1.35.3	c3f97e954c47	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2