CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

27,492

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

6,126

qubivaqubiva

0.3.2

2 of 3 See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

8,369

ingress-nginxquench-ingress-nginx

0.0.11

1 of 1 See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

549

ingress-stackquench-ingress-stack

0.0.6

1 of 5 See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

786

versitygwquench-versitygw

0.0.2

1 of 1 See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned	783ea36fcc7a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

2,421

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.26.9

Open the chart page →

9,202

rabbitmq-cluster-operatorrabbitmq-cluster-operator

4.8.0

2 of 2 See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :4.8	23d259e0c93e	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :4.8	d13e3304bda8	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,281

rabbitpingrabbitping

1.3.0

1 of 1 See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
udhos/rabbitping :1.3.0	474c467bbf42	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,748

kubemirrorraczylo-com

0.10.19

1 of 1 See more

kubemirror raczylo-com 0.10.19

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/lukaszraczylo/kubemirror :0.10.19	ffd613daa7d3	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

201

rad-pluginsrad

2.4.15

5 of 5 See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.34	adc2f5d5996b	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.44	f30f0dc32205	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.71	0f5aeaf1a77e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.38	bbba62c5a110	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.50	4e25d84332fc	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,074

rada-platformrada-platform

0.1.0

2 of 7 See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.26.9
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9

Open the chart page →

24,015

cloudnative-pgradar-base

0.23.2

1 of 1 See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,390

headlampradar-base

1.0.0

1 of 1 See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.43.0	5d03caa26df7	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,012

hydraradar-base

0.48.0

1 of 1 See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,223

kratosradar-base

0.43.1

1 of 1 See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,453

kubecostradar-base

1.0.0

3 of 7 See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

11,643

management-portalradar-base

1.7.0

1 of 1 See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

4,002

nginx-gateway-fabricradar-base

2.6.6

1 of 1 See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

397

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

2,476

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,768

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

2,133

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

mysqld-exporterrafaelscone

0.0.1

1 of 1 See more

mysqld-exporter rafaelscone 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :latest	abed8dac117b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

350

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,583

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

ratecapratecap

0.1.2

2 of 3 See more

ratecap ratecap 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

802

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,061

rawfile-localpvrawfile

0.15.3

5 of 6 See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

4,787

aws-ec2-runtime-checkerrayselfs-charts

0.1.4

1 of 1 See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rayselfs/aws-ec2-runtime-checker :v0.1.5	562e5b2f81ce	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

709

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,223

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

4,958

mihomos-clusterre8ch-mihomos-cluster

0.1.1

1 of 3 See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
metacubex/mihomo :v1.19.29	e1d7dadaa936	golang.org/x/net@v0.35.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

939

reactive-policyreactive-policy

0.4.1

1 of 1 See more

reactive-policy reactive-policy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/vedooo/reactive-policy :0.4.1	d92eda891c91	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

283

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.26.9

Open the chart page →

4,550

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.26.9

Open the chart page →

5,749

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

etherpadredhat-cop

0.0.8

1 of 1 See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
etherpad/etherpad :latest	6f87beef31d9	stdlib@go1.26.4	1.26.9

Open the chart page →

484

gitops-operatorredhat-cop

0.10.6

1 of 1 See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,603

ploigosredhat-cop

0.0.9

2 of 2 See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

14,044

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	golang.org/x/net@v0.20.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

17,241

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

31,202

redirectorredirector

0.0.3

1 of 1 See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/chilledornaments/redirector :latest	94d48447d967	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

340

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9

Open the chart page →

2,713

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	4
hyperledger/fabric-ca :latest	a70b6ba64a08	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.26.9	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9	4
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.26.9	4
library/mongo :7 :7.0	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	4
library/mongo :5.0-focal	5e15a3f014ed	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9	4
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.9	4
library/mysql :26.7.0 :latest	ade067ae2fb1	stdlib@go1.24.6	1.26.9	4
library/nats :2.15.0-alpine	ac8f88a6494b	stdlib@go1.27.1	1.27.2	4
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.26.9	4
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.26.9	4
linuxserver/plex :1.43.4 :latest	06e07af2851e	stdlib@go1.26.7	1.26.9	4
migrate/migrate :latest	76cc2074cb66	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	4
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9	4
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	4
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.9	4
natsio/prometheus-nats-exporter :0.20.2 :latest	c623b608e148	stdlib@go1.26.6	1.26.9	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.26.9	4
otel/opentelemetry-collector-contrib :0.162.0 :latest	39923a8e431b	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	4
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.60.0 1.26.9	4
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	golang.org/x/net@v0.30.0 stdlib@go1.23.5	0.60.0 1.26.9	4
ghcr.io/curium-rocks/docker-kubectl :main	d04c003d7593	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	e7041c3b41e7	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	e0f4431c4704	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9	4
ghcr.io/sigstore/scaffolding/createtree :v0.7.33	4c845ced03d8	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9	4
ghcr.io/stakater/reloader :v1.4.22	def2480040ad	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.60.0 1.26.9	4
quay.io/argoproj/argocd :v3.5.4	49dff79439bb	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.60.0 1.26.9	4
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	4
quay.io/ceems/ceems :v0.16.1	4633125698c3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	4
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	4
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9	4
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	4