StackRadar

CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-p32r-2pjm-q43gCGA-pjc7-rhj8-2m9qDEBIAN-CVE-2026-78659GO-2026-6603
Also known as
CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending
Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
job-pod-reaperjob-pod-reaper0.14.01 of 1See more

job-pod-reaper job-pod-reaper 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/job-pod-reaper:v0.14.0775449888968
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

347
haven-complinacy-dashboardjolle-devVerified publisher1.0.01 of 2See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17.2
0.60.0
1.26.9

Open the chart page →

6,283
BNSdeployjongseo220.1.01 of 8See more

BNSdeploy jongseo22 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

226
cloudnative-pgjouveVerified publisher0.27.01 of 1See more

cloudnative-pg jouve 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.28.034198e85b6e6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

1,092
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
golang.org/x/net@v0.45.0
stdlib@go1.25.2
0.60.0
1.26.9

Open the chart page →

1,415
distributionjouveVerified publisher0.2.31 of 1See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
distribution/distribution:3.1.1bca24727f400
golang.org/x/net@v0.52.0
stdlib@go1.25.9
0.60.0
1.26.9

Open the chart page →

1,270
etcd-defragjouveVerified publisher0.1.11 of 1See more

etcd-defrag jouve 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/ahrtr/etcd-defrag:v0.45.0b2a97f7fac6e
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

251
api-key-managerjtektVerified publisher0.3.02 of 4See more

api-key-manager jtekt 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.9
public.ecr.aws/jtekt-corporation/api-key-manager-api:v0.1.175a48d987e0f
stdlib@go1.20.7
1.26.9

Open the chart page →

7,875
image-storage-servicejtektVerified publisher0.5.11 of 4See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
golang.org/x/net@v0.14.0
stdlib@go1.19.12
0.60.0
1.26.9

Open the chart page →

25,817
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9
stdlib@go1.19.6
0.60.0
1.26.9

Open the chart page →

19,280
firstchartjuanjmerono0.2.01 of 1See more

firstchart juanjmerono 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
jmalloc/echo-server:0.3.1e4eaee2c7998
golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d
stdlib@go1.17
0.60.0
1.26.9

Open the chart page →

2,570
daily-restartjuniorjpdj0.1.731 of 1See more

daily-restart juniorjpdj 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r5136348264b41
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

738
mumbledjjuniorjpdj0.1.2071 of 2See more

mumbledj juniorjpdj 0.1.207

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r5136348264b41
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,281
alertmanager-irc-relayjuppi880.0.11 of 1See more

alertmanager-irc-relay juppi88 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
maldridge/alertmanager-irc-relay:v0.4.1391de2b76128
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.4
0.60.0
1.26.9

Open the chart page →

2,795
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
golang.org/x/net@v0.48.0
stdlib@go1.25.7
0.60.0
1.26.9

Open the chart page →

769
jupyter-notebook-validator-operatorjupyter-notebook-validatorVerified publisher1.0.101 of 1See more

jupyter-notebook-validator-operator jupyter-notebook-validator 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

226
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

12,084
multusk3s4.0.201+upv4.0.2-build20240208012 of 2See more

multus k3s 4.0.201+upv4.0.2-build2024020801

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
rancher/hardened-cni-plugins:v1.4.0-build202401222581c5490bab
stdlib@go1.20.7
1.26.9
rancher/hardened-multus-cni:v4.0.2-build202402087d0f41b72eb7
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.60.0
1.26.9

Open the chart page →

2,906
snapshot-controllerk3s1.6.1+up1.6.01 of 1See more

snapshot-controller k3s 1.6.1+up1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
rancher/mirrored-sig-storage-snapshot-controller:v6.1.0934863015367
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9

Open the chart page →

2,409
snapshot-validation-webhookk3s1.6.1+up1.6.01 of 1See more

snapshot-validation-webhook k3s 1.6.1+up1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
rancher/mirrored-sig-storage-snapshot-validation-webhook:v6.1.0deac027820ae
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9

Open the chart page →

2,409
traefikk3s20.3.1+up20.3.01 of 1See more

traefik k3s 20.3.1+up20.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
rancher/mirrored-library-traefik:2.9.40842af6afcdf
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.19.2
0.60.0
1.26.9

Open the chart page →

4,257
k8-ldap-configmapk8-ldap-configmap0.16.01 of 1See more

k8-ldap-configmap k8-ldap-configmap 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/k8-ldap-configmap:v0.16.040d0b67afd77
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

388
k8-namespace-reaperk8-namespace-reaper0.11.01 of 1See more

k8-namespace-reaper k8-namespace-reaper 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/k8-namespace-reaper:v0.11.0ead1f817e8c2
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

347
k8quk8qu1.4.01 of 1See more

k8qu k8qu 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/gijsvandulmen/k8qu:1.4e897b18db13d
golang.org/x/net@v0.26.0
stdlib@go1.22.6
0.60.0
1.26.9

Open the chart page →

1,119
k8s-aibomk8s-aibomVerified publisher1.5.11 of 1See more

k8s-aibom k8s-aibom 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/googlecloudplatform/k8s-aibomdigest-pinned7b02731563a5
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

260
k8s-ai-srek8s-ai-sreVerified publisher3.1.21 of 1See more

k8s-ai-sre k8s-ai-sre 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
mohankrishna999/k8s-ai-agent:3.1.27f980f8c650c
golang.org/x/net@v0.57.0
stdlib@go1.26.5-X:jsonv2
0.60.0
1.26.9

Open the chart page →

981
clonarrk8s-chartsVerified publisher0.10.11 of 1See more

clonarr k8s-charts 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.9

Open the chart page →

770
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
stdlib@go1.24.4
1.26.9

Open the chart page →

7,263
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
stdlib@go1.26.3
1.26.9

Open the chart page →

4,199
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
stdlib@go1.18.1
1.26.9

Open the chart page →

65,671
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
golang.org/x/net@v0.38.0
stdlib@go1.22.7
0.60.0
1.26.9

Open the chart page →

2,507
k8sdb-controllerk8sdb-controller0.1.21 of 1See more

k8sdb-controller k8sdb-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8sdb-controller:v0.0.1a6c2251a6263
golang.org/x/net@v0.0.0-20211108170745-6635138e15ea
stdlib@go1.16.14
0.60.0
1.26.9

Open the chart page →

3,037
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

74,588
k8s-drain-surgek8s-drain-surgeVerified publisher0.0.31 of 1See more

k8s-drain-surge k8s-drain-surge 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/aeyrtonvs/k8s-drain-surge:0.0.338bce7856b5c
golang.org/x/net@v0.53.0
stdlib@go1.25.10
0.60.0
1.26.9

Open the chart page →

448
k8s-file-explorerk8s-file-explorer1.8.11 of 2See more

k8s-file-explorer k8s-file-explorer 1.8.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
don616/k8s-file-explorer-backend:v1.8.13e228fadb3a8
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,316
bitmagnetk8s-home-lab-repo1.0.21 of 1See more

bitmagnet k8s-home-lab-repo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
golang.org/x/net@v0.43.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

1,726
blockyk8s-home-lab-repo11.2.11 of 1See more

blocky k8s-home-lab-repo 11.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.29.0a6d99f323d30
golang.org/x/net@v0.51.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

1,030
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
stdlib@go1.24.6
1.26.9

Open the chart page →

4,307
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
golang.org/x/net@v0.53.0
stdlib@go1.26.3-X:jsonv2
0.60.0
1.26.9

Open the chart page →

2,713
influxdb-exporterk8s-home-lab-repo1.1.31 of 1See more

influxdb-exporter k8s-home-lab-repo 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
prom/influxdb-exporter:v0.11.427e33e18634a
stdlib@go1.19.9
1.26.9

Open the chart page →

1,196
maddyk8s-home-lab-repo4.2.11 of 1See more

maddy k8s-home-lab-repo 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
foxcpp/maddy:0.8.2eeb5813fc4d1
golang.org/x/net@v0.34.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

1,779
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.26.9

Open the chart page →

11,302
photoprismk8s-home-lab-repo10.0.11 of 1See more

photoprism k8s-home-lab-repo 10.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
photoprism/photoprism:231128-ce284de9cc4f9c
golang.org/x/net@v0.18.0
stdlib@go1.21.4
0.60.0
1.26.9

Open the chart page →

1,859
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
golang.org/x/net@v0.20.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,312
k8s-jacoco-operatork8s-jacoco-operator0.4.01 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

3,193
k8skeycloak-controllerk8skeycloak-controller0.1.21 of 1See more

k8skeycloak-controller k8skeycloak-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8skeycloak-controller:v0.0.19befc51b1ad6
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.15
0.60.0
1.26.9

Open the chart page →

5,331
k8s-mutating-admission-webhookk8s-mutating-admission-webhook1.15.11 of 1See more

k8s-mutating-admission-webhook k8s-mutating-admission-webhook 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

1,254
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,719
k8soauth2-proxy-controllerk8soauth2-proxy-controller0.1.51 of 1See more

k8soauth2-proxy-controller k8soauth2-proxy-controller 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8soauth2-proxy-controller:v0.1.280d049c9da31
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.11
0.60.0
1.26.9

Open the chart page →

2,433
k8s-ondemand-proxyk8s-ondemand-proxy0.0.61 of 1See more

k8s-ondemand-proxy k8s-ondemand-proxy 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ondemand-proxy:0.0.2078b25d48cf7
golang.org/x/net@v0.13.0
stdlib@go1.21.1
0.60.0
1.26.9

Open the chart page →

1,496

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
rabbitmqoperator/cluster-operator:2.6.08651dd3cec51
golang.org/x/net@v0.18.0
stdlib@go1.20.11
0.60.0
1.26.9
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
stdlib@go1.23.7
1.26.9
1
ralexstokes/eth2-fork-mon:latestc0d4bbefd31f
stdlib@go1.16.7
1.26.9
1
rancher/fleet:v0.16.231f39589e1f8
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/hardened-calico:v3.13.36d2cd61a338b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.60.0
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.60.0
1
rancher/hardened-cni-plugins:v1.4.0-build202401222581c5490bab
stdlib@go1.20.7
1.26.9
1
rancher/hardened-cni-plugins:v1.2.0-build202401084f0fd4a0201c
stdlib@go1.20.7
1.26.9
1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.60.0
1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.60.0
1
rancher/hardened-flannel:v0.24.0-build20240108de22a17107b6
golang.org/x/net@v0.18.0
stdlib@go1.20.7
0.60.0
1.26.9
1
rancher/hardened-multus-cni:v4.0.2-build202402087d0f41b72eb7
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.60.0
1.26.9
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.60.0
1
rancher/hardened-snapshot-controller:v8.6.0-build202609097b122b30e5c6
golang.org/x/net@v0.56.0
stdlib@go1.26.8-X:boringcrypto
0.60.0
1.26.9
1
rancher/hardened-traefik:v3.7.14-build20261009fa98374d7a17
golang.org/x/net@v0.59.0
0.60.0
1
rancher/harvester-cloud-provider:v0.2.95fb3954ccef4
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/harvester-csi-driver:v0.2.10eb75514c6979
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/helm-controller:v0.17.4946ae0d13229
golang.org/x/net@v0.55.0
stdlib@go1.25.12
0.60.0
1.26.9
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
golang.org/x/net@v0.13.0
stdlib@go1.20.8
0.60.0
1.26.9
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.19.2
0.60.0
1.26.9
1
rancher/kubectl:v1.25.085a0d1148784
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19
0.60.0
1.26.9
1
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.361eba82e9c386
golang.org/x/net@v0.38.0
stdlib@go1.26.3
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.329289da488b07
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.309b9148811700
golang.org/x/net@v0.27.0
stdlib@go1.23.1
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.16.6
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.16.15
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.37e757967a5ec3
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
golang.org/x/net@v0.26.0
stdlib@go1.22.8
0.60.0
1.26.9
1
rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4a071159e19cc
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
rancher/mirrored-library-traefik:2.9.40842af6afcdf
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.19.2
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-attacher:v4.11.0-20260428fe417c28a6b8
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
golang.org/x/net@v0.49.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-resizer:v2.1.0-2026042841cb674d1154
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-snapshotter:v8.5.0-202604281975fac3890f
golang.org/x/net@v0.49.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-csi-provisioner:v6.0.00c537015fe9c
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-controller:v6.1.0934863015367
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-validation-webhook:v8.1.067ca97fe362b
golang.org/x/net@v0.28.0
stdlib@go1.22.5
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-validation-webhook:v6.1.0deac027820ae
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9
1
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
golang.org/x/net@v0.52.0
stdlib@go1.24.13
0.60.0
1.26.9
1
rancher/pushprox-client:v0.1.0-rancher2-clienta41cd716c412
stdlib@go1.16.4
1.26.9
1
rancher/pushprox-proxy:v0.1.0-rancher2-proxy3126395b966c
stdlib@go1.16.4
1.26.9
1
rancher/system-upgrade-controller:v0.19.234fa058fe453
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.60.0
1.26.9
1
rancher/system-upgrade-controller:v0.18.09813f85653c8
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9
1
raspbernetes/csi-node-driver-registrar:2.0.1a552705225fd
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.13.15
0.60.0
1.26.9
1
ravendb/ravendb-operator:2.1.0511050205ac5
golang.org/x/net@v0.48.0
stdlib@go1.26.6
0.60.0
1.26.9
1
rayselfs/aws-ec2-runtime-checker:v0.1.5562e5b2f81ce
golang.org/x/net@v0.47.0
stdlib@go1.24.11
0.60.0
1.26.9
1
rclone/rclone:1.63.008e1af3c8814
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.60.0
1.26.9
1
rclone/rclone:1.57.01e6eeabddc01
golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d
stdlib@go1.17.2
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.