StackRadar

CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,401
of 18,104 indexed, latest versions
Container images
6,250
deployed by those charts
Fix available
2 of 4
affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,223
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.05,000
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
OSV records
CGA-pjc7-rhj8-2m9qDEBIAN-CVE-2026-78659GO-2026-6603
Also known as
CGA-w7mj-m6pj-r2xq
Trending
Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars
ChartLatestAffected imagesRadar Score
castai-watchdogcastaiVerified publisher0.2.4821 of 1See more

castai-watchdog castai 0.2.482

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/castai/images/watchdog:v0.2.4828f70018e61ca
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

317
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

4,312
oci-csi-drivercastaiVerified publisher1.13.86 of 7See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
golang.org/x/net@v0.49.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

3,733
temporalcastaiVerified publisher0.54.210 of 14See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
golang.org/x/net@v0.23.0
stdlib@go1.21.10
0.60.0
1.26.9
temporalio/admin-tools:1.26.237e2e33dbd7b
golang.org/x/net@v0.31.0
stdlib@go1.22.5
0.60.0
1.26.9
temporalio/server:1.26.21e2626efcbc1
golang.org/x/net@v0.31.0
stdlib@go1.23.2
0.60.0
1.26.9
temporalio/ui:2.33.05c586a3c8ec5
golang.org/x/net@v0.17.0
stdlib@go1.23.0
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
golang.org/x/net@v0.25.0
stdlib@go1.22.3
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/net@v0.20.0
stdlib@go1.21.7
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.60.0
1.26.9
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

23,078
catalyst-agentscatalyst-agents0.1.3514 of 18See more

catalyst-agents catalyst-agents 0.1.35

14 of the 18 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
golang.org/x/net@v0.37.0
stdlib@go1.23.6
0.60.0
1.26.9
grafana/grafana:13.1.3ab5cb380e3ff
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
grafana/loki:3.0.0757b5fadf816
golang.org/x/net@v0.22.0
stdlib@go1.21.9
0.60.0
1.26.9
grafana/loki-canary:3.0.028d7c00588aa
golang.org/x/net@v0.22.0
stdlib@go1.21.9
0.60.0
1.26.9
grafana/tempo:2.5.0f0200a9bff6d
golang.org/x/net@v0.24.0
stdlib@go1.21.3
0.60.0
1.26.9
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
prom/memcached-exporter:v0.14.2d8a61419b841
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.60.0
1.26.9
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.25.5
0.60.0
1.26.9
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
golang.org/x/net@v0.52.0
stdlib@go1.25.11
0.60.0
1.26.9
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
golang.org/x/net@v0.52.0
stdlib@go1.25.11
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.5d0e80b2f62fe
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.93.0a001ed10a382
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

24,902
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
stdlib@go1.14.10
0.60.0
1.26.9

Open the chart page →

7,720
openldapccowleyVerified publisher2.0.41 of 3See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
stdlib@go1.13.4
0.60.0
1.26.9

Open the chart page →

9,237
openldap_exporterccowleyVerified publisher0.1.01 of 1See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
stdlib@go1.15.7
1.26.9

Open the chart page →

3,184
ceems-api-serverceemsVerified publisher0.10.12 of 2See more

ceems-api-server ceems 0.10.1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
quay.io/ceems/ceems:v0.16.14633125698c3
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

419
ceems-exporterceemsVerified publisher0.9.01 of 1See more

ceems-exporter ceems 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

218
ceems-lbceemsVerified publisher0.9.01 of 1See more

ceems-lb ceems 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.14633125698c3
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

218
kube-ceemsceemsOfficialVerified publisher1.49.04 of 5See more

kube-ceems ceems 1.49.0

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
quay.io/ceems/ceems:v0.16.14633125698c3
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

988
cellcastcellcast0.5.01 of 1See more

cellcast cellcast 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/cellcast-hub:v0.5.0c450eb54b7e4
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

211
ceph-csi-operatorceph-csi-operator1.1.01 of 1See more

ceph-csi-operator ceph-csi-operator 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

215
cerberuscerberusVerified publisher0.18.01 of 1See more

cerberus cerberus 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/tsouza/cerberus:1.22.0d181d9145aac
golang.org/x/net@v0.59.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

467
certforge-issuercertforge-issuer0.2.41 of 1See more

certforge-issuer certforge-issuer 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/certforge-llc/certforge-issuer:0.2.430f73d255939
golang.org/x/net@v0.56.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

213
cert-manager-csi-driver-spiffecert-managerOfficialVerified publisher0.15.04 of 4See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

4 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver-spiffe:v0.15.01755a3802efd
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/jetstack/cert-manager-csi-driver-spiffe-approver:v0.15.05f7a9bbb95fb
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

1,759
cert-manager-acm-synccert-manager-acm-sync0.7.41 of 1See more

cert-manager-acm-sync cert-manager-acm-sync 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/camilorivera/cert-manager-acm-sync:0.7.489a83796a550
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

434
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
golang.org/x/net@v0.47.0
stdlib@go1.25.3
0.60.0
1.26.9

Open the chart page →

1,804
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
golang.org/x/net@v0.26.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

2,044
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.60.0
1.26.9

Open the chart page →

1,817
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

1,379
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
golang.org/x/net@v0.15.0
stdlib@go1.21.3
0.60.0
1.26.9

Open the chart page →

1,974
cert-manager-webhook-f5xccert-manager-webhook-f5xcVerified publisher0.6.01 of 1See more

cert-manager-webhook-f5xc cert-manager-webhook-f5xc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/wenkow/cert-manager-webhook-f5xc:0.6.00988cebf89bb
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

210
cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones0.1.51 of 1See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
golang.org/x/net@v0.52.0
stdlib@go1.25.11
0.60.0
1.26.9

Open the chart page →

733
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.15
0.60.0
1.26.9

Open the chart page →

3,402
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
golang.org/x/net@v0.10.0
stdlib@go1.20.6
0.60.0
1.26.9

Open the chart page →

2,478
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
golang.org/x/net@v0.50.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

1,521
cert-manager-webhook-poweradmincert-manager-webhook-poweradmin0.2.161 of 1See more

cert-manager-webhook-poweradmin cert-manager-webhook-poweradmin 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.166c788f9cb8c4
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

205
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
golang.org/x/net@v0.26.0
stdlib@go1.22.10
0.60.0
1.26.9

Open the chart page →

1,449
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

855
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.19.13
0.60.0
1.26.9
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.15
0.60.0
1.26.9

Open the chart page →

9,774
getoutlinecfi20171.2.01 of 4See more

getoutline cfi2017 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
stdlib@go1.24.6
1.26.9

Open the chart page →

5,477
opencvecfi20170.1.23 of 7See more

opencve cfi2017 0.1.2

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
stdlib@go1.24.6
1.26.9
prom/statsd-exporter:v0.28.04e7a1f00b9b2
golang.org/x/net@v0.29.0
stdlib@go1.23.2
0.60.0
1.26.9
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
stdlib@go1.22.10
1.26.9

Open the chart page →

18,334
clechaosnative0.2.73 of 6See more

cle chaosnative 0.2.7

3 of the 6 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.15
0.60.0
1.26.9
chaosnative/cle-license-module:2.7.062cf6adc355e
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.16.15
0.60.0
1.26.9
chaosnative/cle-server:2.7.0e7bcff4a20c0
golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4
stdlib@go1.16.15
0.60.0
1.26.9

Open the chart page →

19,835
charon-relaycharonOfficialVerified publisher0.8.02 of 2See more

charon-relay charon 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9
obolnetwork/charon:v1.10.0278c7e2897b6
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

5,739
dv-podcharonOfficialVerified publisher0.19.13 of 5See more

dv-pod charon 0.19.1

3 of the 5 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
obolnetwork/charon:v1.10.0278c7e2897b6
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
obolnetwork/charon-dkg-sidecar:maine263be0a7440
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9

Open the chart page →

9,517
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

2,917
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

6,918
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
stdlib@go1.24.6
1.26.9

Open the chart page →

1,110
calibre-webcharts-derwitt-devVerified publisher1.1.41 of 1See more

calibre-web charts-derwitt-dev 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.31086aac67a05
stdlib@go1.17.8
1.26.9

Open the chart page →

6,162
filebrowsercharts-derwitt-devVerified publisher1.1.11 of 1See more

filebrowser charts-derwitt-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.63.23a469ea076d4a
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

448
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
stdlib@go1.26.5
1.26.9

Open the chart page →

2,931
paperless-ngxcharts-derwitt-devVerified publisher2.1.61 of 1See more

paperless-ngx charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
stdlib@go1.24.4
1.26.9

Open the chart page →

5,101
yas3pcharts-derwitt-devVerified publisher0.3.11 of 1See more

yas3p charts-derwitt-dev 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
denniswitt/yas3p:0.2.488a235619af6
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

1,150
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
stdlib@go1.20.12
1.26.9

Open the chart page →

2,773
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
golang.org/x/net@v0.50.0
stdlib@go1.25.9
0.60.0
1.26.9

Open the chart page →

1,253
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

11,008
aws-ecr-tokencheveo-charts0.1.01 of 1See more

aws-ecr-token cheveo-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
huzafach/aws-cli-k8:1.0.06e271d43ea48
golang.org/x/net@v0.23.0
stdlib@go1.22.4
0.60.0
1.26.9

Open the chart page →

1,668
pathling-serverchglVerified publisher0.10.141 of 3See more

pathling-server chgl 0.10.14

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9

Open the chart page →

1,767

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
invisibl/identity-manager-demo:v1.0.0cf5400cb935a
stdlib@go1.19.2
1.26.9
1
iofog/router:2.0.17260cf861479
stdlib@go1.15
1.26.9
1
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.21.5
0.60.0
1.26.9
1
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.20.3
0.60.0
1.26.9
1
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.21.5
0.60.0
1.26.9
1
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.20.3
0.60.0
1.26.9
1
iomesh/csi-driver:v2.8.01a151f602451
golang.org/x/net@v0.8.0
stdlib@go1.21.11
0.60.0
1.26.9
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f
stdlib@go1.16.7
0.60.0
1.26.9
1
iomesh/deck:v0.2.0282d6c419ed3
golang.org/x/net@v0.19.0
stdlib@go1.22.6
0.60.0
1.26.9
1
iomesh/deck:v0.1.0a31e26b6ae22
golang.org/x/net@v0.17.0
stdlib@go1.21.10
0.60.0
1.26.9
1
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
golang.org/x/net@v0.19.0
stdlib@go1.21.10
0.60.0
1.26.9
1
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
golang.org/x/net@v0.19.0
stdlib@go1.22.6
0.60.0
1.26.9
1
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.7
0.60.0
1.26.9
1
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.7
0.60.0
1.26.9
1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.7
0.60.0
1.26.9
1
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.7
0.60.0
1.26.9
1
iomesh/operator:v1.1.060081c9b2f52
golang.org/x/net@v0.17.0
stdlib@go1.21.4
0.60.0
1.26.9
1
iomesh/operator:v1.2.0ba4dd6be7e59
golang.org/x/net@v0.17.0
stdlib@go1.21.4
0.60.0
1.26.9
1
iomesh/post-delete-hook:v1.2.0e3b92f838f4b
golang.org/x/net@v0.17.0
stdlib@go1.21.4
0.60.0
1.26.9
1
iomesh/post-delete-hook:v1.1.0eea5651f3270
golang.org/x/net@v0.17.0
stdlib@go1.21.4
0.60.0
1.26.9
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.12
0.60.0
1.26.9
1
iotaledger/goshimmer:v0.8.6b02a8f77474f
golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2
stdlib@go1.17.2
0.60.0
1.26.9
1
iotaledger/hornet:2.001206f1ba89c
golang.org/x/net@v0.14.0
stdlib@go1.21.10
0.60.0
1.26.9
1
iotaledger/inx-dashboard:1.012c669cb8748
golang.org/x/net@v0.14.0
stdlib@go1.21.1
0.60.0
1.26.9
1
ipfs/go-ipfs:v0.13.117259397f587
golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87
stdlib@go1.18.3
0.60.0
1.26.9
1
ipfs/go-ipfs:v0.27.0bfce363b878b
golang.org/x/net@v0.21.0
stdlib@go1.19.8
0.60.0
1.26.9
1
ipfs/ipfs-cluster:1.0.21511f6d57994
golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87
stdlib@go1.18.3
0.60.0
1.26.9
1
ipfs/kubo:v0.41.00661819c2e09
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ipfs/kubo:v0.17.0803fac58ba15
golang.org/x/net@v0.1.0
stdlib@go1.19.1
0.60.0
1.26.9
1
ipfs/kubo:latestb293923d66e4
golang.org/x/net@v0.59.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ipfs/kubo:v0.24.0e3de33bd746b
golang.org/x/net@v0.17.0
stdlib@go1.19.8
0.60.0
1.26.9
1
ipushc/cassandra-web:latestfa3e0c66c289
golang.org/x/net@v0.8.0
stdlib@go1.20.2
0.60.0
1.26.9
1
irakli/ms-web-hello:latest966a4bfefe27
stdlib@go1.19.2
1.26.9
1
isebben/smart-proxy:2.3.1ee3c01b698a3
golang.org/x/net@v0.59.0
0.60.0
1
ispras/svacer:11-2-042aa9fa9f189
golang.org/x/net@v0.37.0
stdlib@go1.24.3
0.60.0
1.26.9
1
istio/install-cni:1.10.32232f365aed6
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.60.0
1.26.9
1
istio/install-cni:1.23.6ab34c4740f44
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9
1
istio/install-cni:1.29.0ce27c9ce43c8
golang.org/x/net@v0.48.0
stdlib@go1.25.7
0.60.0
1.26.9
1
istio/operator:1.10.3655eefa11c84
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.60.0
1.26.9
1
istio/operator:1.12.06cfce8a071b9
golang.org/x/net@v0.0.0-20211020060615-d418f374d309
stdlib@go1.17.3
0.60.0
1.26.9
1
istio/operator:1.18.270f9d1fe5fff
golang.org/x/net@v0.10.0
stdlib@go1.20.6
0.60.0
1.26.9
1
istio/pilot:1.29.0325156535773
golang.org/x/net@v0.48.0
stdlib@go1.25.7
0.60.0
1.26.9
1
istio/pilot:1.9.652f25f91d702
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
stdlib@go1.15.13
0.60.0
1.26.9
1
istio/pilot:1.23.69c3d6a218181
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9
1
istio/pilot:1.16.0ac0284d75ec9
golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9
stdlib@go1.19.3
0.60.0
1.26.9
1
istio/pilot:1.17.1ce9d87606701
golang.org/x/net@v0.5.0
stdlib@go1.20.1
0.60.0
1.26.9
1
istio/pilot:1.15.2db08d6963975
golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e
stdlib@go1.19.2
0.60.0
1.26.9
1
istio/pilot:1.10.3e7e110a421c2
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.60.0
1.26.9
1
istio/pilot:1.29.1f8b0e412ac4a
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.60.0
1.26.9
1
istio/proxyv2:1.14.1df69c1a7af7c
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.18.2
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.