CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

seafileschmitzis

13.0.13

2 of 4 See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
seafileltd/notification-server :13.0.21	1cac4101d0f4	stdlib@go1.26.2	1.26.9

Open the chart page →

44,456

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

4,257

vikunjaschmitzis

1.0.0

1 of 3 See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,204

koffanschoenwald

0.1.8

1 of 1 See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.9

Open the chart page →

174

minifluxschoenwald

0.1.6

1 of 1 See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

540

uptime-kumaschoenwald

1.0.10

1 of 1 See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,895

yopassschoenwald

1.1.0

1 of 2 See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2

Open the chart page →

548

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

61,319

restic-serverschoolguys-helmcharts

0.3.1

1 of 1 See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9

Open the chart page →

3,008

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,460

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.60.0 1.26.9

Open the chart page →

14,628

seafileseafile

0.12.1

1 of 1 See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.26.9

Open the chart page →

76,934

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

5,872

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,402

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.26.9

Open the chart page →

3,996

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,411

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

3,345

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9

Open the chart page →

1,555

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.26.9
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.26.9

Open the chart page →

7,671

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

789

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,428

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,735

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,270

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,711

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9

Open the chart page →

1,749

nucleisecurecodebox-nuclei

5.2.0

1 of 1 See more

nuclei securecodebox-nuclei 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
projectdiscovery/nuclei :v3.5.1	d76713284ad0	golang.org/x/net@v0.46.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,602

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

400

trivysecurecodebox-trivy

5.9.0

1 of 1 See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

838

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,009

security-webhooksecurity-webhook

0.0.14

1 of 1 See more

security-webhook security-webhook 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
kubestar/security-webhook :latest	156d495afe77	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,206

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.60.0 1.26.9
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9

Open the chart page →

15,747

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9

Open the chart page →

3,164

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	6d45ab59ec50	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,861

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

360

s3managersergeyshevch

0.1.0

1 of 1 See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,212

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

4,015

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

4,170

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,106

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,489

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.26.9
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.26.9

Open the chart page →

7,321

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.26.9
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.26.9
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.26.9

Open the chart page →

11,804

serviceexampleserviceexample-chart

0.3.0

2 of 4 See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

4,359

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

2,170

service-exampleservice-example-jt

0.1.1

8 of 9 See more

service-example service-example-jt 0.1.1

8 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/mongodb-exporter :latest	fb4874bb3d07	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
bitnami/redis-exporter :latest	c6a2883c0bb7	stdlib@go1.26.8	1.26.9
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.26.9
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.9

Open the chart page →

10,552

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

10,910

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,424

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

3,837

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.60.0 1.26.9	1
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.60.0 1.26.9	1
owncloud/server :10.15.0	51d9b74fc2a8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
owncloud/server :10.16.6	5b27fce26d9c	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9	1
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.60.0 1.26.9	1
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.60.0 1.26.9	1
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.26.9	1
oxynozeta/s3-proxy :5.1.1	21115040e224	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.100.0.1	63801b40a4e9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.26.9	1
palopalepalo/jasperreports :8-v1.3	56b99b194d20	stdlib@go1.19.6	1.26.9	1
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9	1
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.26.9	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.26.9	1
percona/everest-helmtools :0.0.1	904458d04a18	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	1
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/net@v0.57.0 stdlib@go1.26.2	0.60.0 1.26.9	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.60.0 1.26.9	1
percona/percona-postgresql-operator :3.1.0	a7c50ef1545e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.23.1	78c87b933e18	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	1
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	stdlib@go1.19.9	1.26.9	1
percona/pmm-server :3.9.1	003f9c25f842	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	1
persesdev/perses :v0.54.0	a0e34ddaf9d7	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
persesdev/perses-operator :v0.5.0	8f8d7b09caef	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.60.0 1.26.9	1
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
pgsty/mc :RELEASE.2026-09-13T00-00-00Z	aa5cc1401b3e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
pgsty/silo :RELEASE.2026-09-03T13-18-01Z-distroless	2711cdc5bce0	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
pgvector/pgvector :pg16	7b822b0aac60	stdlib@go1.24.6	1.26.9	1
pgvector/pgvector :pg17	ac08538c6f8b	stdlib@go1.24.6	1.26.9	1
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.26.9	1
philmtd/full-house :1.10.0	224d602420ba	golang.org/x/net@v0.59.0 stdlib@go1.26.3	0.60.0 1.26.9	1
phntom/chadbot :0.2.3	97c28e4178ad	golang.org/x/net@v0.11.0 stdlib@go1.21.5	0.60.0 1.26.9	1
phntom/chartmuseum :v0.16.0	53883b65d9b7	golang.org/x/net@v0.10.0 stdlib@go1.19.3	0.60.0 1.26.9	1
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.60.0 1.26.9	1
phntom/codimd :2.4.3	1b9aafbb62e6	stdlib@go1.16	1.26.9	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9	1
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.60.0 1.26.9	1
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.60.0 1.26.9	1
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.60.0 1.26.9	1
photoprism/photoprism :231128-ce	284de9cc4f9c	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9	1
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.60.0 1.26.9	1
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
photoprism/photoprism :260728	958642220223	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
photoprism/photoprism :20211010	f4687352985a	golang.org/x/net@v0.0.0-20210929193557-e81a3d93ecf6 stdlib@go1.17.1	0.60.0 1.26.9	1