CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.26.9

Open the chart page →

10,828

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

11,762

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

3,519

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.60.0 1.26.9

Open the chart page →

4,606

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

3,765

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.26.9

Open the chart page →

12,210

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

3,500

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.26.9

Open the chart page →

13,112

ghost-on-kubernetesghost-on-kubernetes-helm

2.0.2

2 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.4	6ea90827b110	stdlib@go1.24.6	1.26.9
ghcr.io/sredevopsorg/ghost-on-kubernetes :main	8da4c9948421	stdlib@go1.26.4	1.26.9

Open the chart page →

1,850

gitlab-runnergitlab-jh

0.93.0

1 of 1 See more

gitlab-runner gitlab-jh 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

658

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.26.9

Open the chart page →

7,303

etcdgroundhog2k

1.1.14

1 of 2 See more

etcd groundhog2k 1.1.14

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.7.2	e9afa62b1e91	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

245

giteagroundhog2k

0.16.5

1 of 1 See more

gitea groundhog2k 0.16.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gitea/gitea :28.1.0	f505a0d3a413	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

225

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	stdlib@go1.26.5	1.26.9

Open the chart page →

2,654

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.26.9

Open the chart page →

7,872

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.60.0 1.26.9

Open the chart page →

2,885

haproxyhaproxytech

1.30.2

1 of 1 See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :3.4.4	1fe3f201ebb5	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

811

whoamiharrytang

0.2.0

1 of 1 See more

whoami harrytang 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.26.9

Open the chart page →

759

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,822

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,103

headscaleheadscale

1.0.20

3 of 3 See more

headscale headscale 1.0.20

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4-debug	2380cdb4951e	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,886

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

2,675

netbirdhelmforge

1.0.11

2 of 4 See more

netbird helmforge 1.0.11

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	74935e722416	stdlib@go1.24.6	1.26.9
netbirdio/netbird-server :0.79.0	d1da0c0179c9	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

3,362

simple-krr-dashboardhelm-simple-krr-dashboard

1.6.2

1 of 3 See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,977

helm-watchdog-pod-deletehelm-watchdog-pod-delete

0.3.0

1 of 1 See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,671

hermes-agenthermes-agent

1.18.0

1 of 1 See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nousresearch/hermes-agent :v2026.9.24	fca358f12efd	stdlib@go1.24.4	1.26.9

Open the chart page →

7,002

home-assistanthome-assistant

0.5.13

2 of 3 See more

home-assistant home-assistant 0.5.13

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/nats :2.15.0-scratch	c0d27f305460	stdlib@go1.27.1	1.27.2
ghcr.io/home-assistant/home-assistant :2026.10.0	1b64d38f38d9	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

3,030

keycloak-operatorhostzero-keycloak-operator

0.13.1

1 of 1 See more

keycloak-operator hostzero-keycloak-operator 0.13.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/hostzero-gmbh/keycloak-operator :v0.13.1	ab4ee2b45444	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

209

hpe-cosi-driverhpe-storage

2.0.0

2 of 2 See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	golang.org/x/net@v0.40.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

2,683

inference-manager-engineinference-manager-engine

1.46.0

1 of 1 See more

inference-manager-engine inference-manager-engine 1.46.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

635

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

3,772

infrahub-enterpriseinfrahub-enterprise

4.21.3

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.21.3

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.9

Open the chart page →

12,722

inlets-operatorinlets

0.17.20

1 of 1 See more

inlets-operator inlets 0.17.20

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/inlets/inlets-operator :0.17.22	08265c006973	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

891

coreinstill-ai

0.1.75

7 of 15 See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.60.0 1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

14,401

intel-gpu-resource-driverintel

0.7.0

1 of 1 See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,096

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

3,446

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

5,084

amazon-eks-pod-identity-webhookjkroepke

2.6.5

1 of 1 See more

amazon-eks-pod-identity-webhook jkroepke 2.6.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

477

k8s-ephemeral-storage-metricsk8s-ephemeral-storage-metrics

1.21.3

1 of 1 See more

k8s-ephemeral-storage-metrics k8s-ephemeral-storage-metrics 1.21.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics :1.21.3	8297aa4a9278	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

316

rustrial-k8s-gitops-secrets-controllerk8s-gitops-secrets

0.6.0

1 of 1 See more

rustrial-k8s-gitops-secrets-controller k8s-gitops-secrets 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rustrial/k8s-gitops-secrets-controller :0.6.0	93326a322a01	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

347

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.26.9

Open the chart page →

6,447

home-assistantk8s-home-lab-repo

16.3.1

1 of 1 See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

5,808

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.26.9

Open the chart page →

8,467

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.26.9

Open the chart page →

2,642

k8statusk8status

0.17.0

1 of 1 See more

k8status k8status 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,220

kanister-operatorkanister

0.118.0

1 of 1 See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/kanisterio/controller :0.118.0	d22616a5998b	golang.org/x/net@v0.41.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,694

kiali-operatorkiali

2.33.0

1 of 1 See more

kiali-operator kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.33.0	035995403eed	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,726

kividb-operator-chartkividb-operator

0.4.0

2 of 2 See more

kividb-operator-chart kividb-operator 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/kividbio/kividb-operator :0.4.0	a2395d6f47b7	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kividbio/kividb-operator-gui :0.4.0	276352c04b9c	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

418

mysqldumpkokuwa

7.0.3

1 of 1 See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/kokuwaio/gcloud-mysql :v3.2.19	63098135c550	stdlib@go1.26.1	1.26.9

Open the chart page →

1,205

kong-operatorkong

1.4.1

1 of 1 See more

kong-operator kong 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
kong/kong-operator :2.3.2	814eaeee4cc8	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

230

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.gitlab.com/gitlab-org/build/cng/gitaly :v19.4.2	a85b70c915e7	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base :v19.4.2	81f755390179	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry :v4.40.2-gitlab	e813867b3749	golang.org/x/net@v0.55.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter :17.0.2	b5c24e466636	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas :v19.4.2	ef0cbe4dc525	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell :v14.57.3	e3bc352dec49	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee :v19.4.2	e05fea2e7ce7	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/build/cng/kubectl :v19.4.2	dc78bf0d3cbc	golang.org/x/net@v0.49.0 stdlib@go1.26.4	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.16.14	0.60.0 1.26.9	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :3.4.2	4115a5d579c9	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk :v19.4.2	0089e2261568	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk :v19.4.0	4d3498887bee	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.gitlab.com/lenitech/docker/keycloak-ppolicy :0.6.0	9895d6915075	golang.org/x/net@v0.46.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client :v0.6.1	9065cdd80035	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.15	0.60.0 1.26.9	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/ci-tools/kubectl :main	9357cfeef63c	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	90a7a94db2b0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/helm-clamav/kubectl :1.10.39	7d7a46f5dc6d	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.26.9	1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw :1.110.1	51e6f187064f	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9	1
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller :1.9.1	8092dd72f073	golang.org/x/net@v0.57.0 stdlib@go1.27.0-X:nodwarf5	0.60.0 1.27.2	1
registry.gitlab.com/xrow-public/velero-client/velero-client :1.4.2	03015f863a3e	golang.org/x/net@v0.49.0 stdlib@go1.26.4	0.60.0 1.26.9	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.4	be477ba317d8	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.4	c241245d7ff0	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.6	dc23fb0d5624	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.2	dc700a37ecf4	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.1	e1787f95cda4	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
registry.k8s.io/agent-sandbox/sandbox-router-go :v1.0.1	25b1a0939630	golang.org/x/net@v0.58.0 stdlib@go1.26.2	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	golang.org/x/net@v0.38.0 stdlib@go1.24.7	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.8.0	3d94f53e4c5a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.4.1	71d817780aa9	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.6.0	80e487edff02	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.5.1	9928d59477fb	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-recommender :1.4.1	40b6d76e8526	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-recommender :1.5.1	e629c61b75eb	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-recommender :1.8.0	e743e3a7e58a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-updater :1.8.0	1d0229e52f90	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-updater :1.4.1	8ebf269779c1	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-updater :1.6.0	b39d1dfa19cb	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0 stdlib@go1.20.7	0.60.0 1.26.9	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/net@v0.32.0 stdlib@go1.23.0	0.60.0 1.26.9	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1