StackRadar

CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,117 indexed, latest versions
Container images
6,152
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,105
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,915
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-p32r-2pjm-q43gCGA-pjc7-rhj8-2m9qDEBIAN-CVE-2026-78659GO-2026-6603
Also known as
CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending
Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
hoverflyhoverflyVerified publisher0.2.01 of 1See more

hoverfly hoverfly 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
spectolabs/hoverfly:v1.12.13250986d58ed4
golang.org/x/net@v0.56.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

296
paperlesshpVerified publisher0.1.23 of 5See more

paperless hp 0.1.2

3 of the 5 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
golang.org/x/net@v0.40.0
stdlib@go1.26.2
0.60.0
1.26.9
gotenberg/gotenberg:8.3467097317623a
golang.org/x/net@v0.55.0
stdlib@go1.26.2
0.60.0
1.26.9
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
stdlib@go1.24.4
1.26.9

Open the chart page →

35,284
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.9

Open the chart page →

1,555
hammerspace-csihscsi1.2.86 of 6See more

hammerspace-csi hscsi 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
golang.org/x/net@v0.32.0
stdlib@go1.23.1
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/net@v0.32.0
stdlib@go1.23.1
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
golang.org/x/net@v0.34.0
stdlib@go1.23.1
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
golang.org/x/net@v0.28.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

7,790
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
golang.org/x/net@v0.7.0
stdlib@go1.18.10
0.60.0
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

37,327
http-headershttp-headers1.2.11 of 1See more

http-headers http-headers 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
stdlib@go1.19.2
1.26.9

Open the chart page →

2,709
cac-systemhuangchengwu-helm-chart0.1.07 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

7 of the 9 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/jetstack/cert-manager-cainjector:v1.12.0e0a5b06b231c
golang.org/x/net@v0.9.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
golang.org/x/net@v0.9.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
golang.org/x/net@v0.9.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
golang.org/x/net@v0.9.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/metallb/controller:v0.13.101b33357b3595
golang.org/x/net@v0.8.0
stdlib@go1.19.5
0.60.0
1.26.9
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
golang.org/x/net@v0.8.0
stdlib@go1.19.5
0.60.0
1.26.9

Open the chart page →

16,570
jenkinshuangchengwu-helm-chart0.1.01 of 2See more

jenkins huangchengwu-helm-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/ubuntu:latestf144425ff09b
stdlib@go1.26.7
1.26.9

Open the chart page →

669
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

1,841
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.9
0.60.0
1.26.9

Open the chart page →

18,484
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.9
0.60.0
1.26.9

Open the chart page →

22,570
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
golang.org/x/net@v0.0.0-20220607020251-c690dde0001d
stdlib@go1.17.6
0.60.0
1.26.9

Open the chart page →

4,972
sing-boxhuscker-chartsVerified publisher1.0.71 of 1See more

sing-box huscker-charts 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/sagernet/sing-box:v1.12.03c1ee82d450d
golang.org/x/net@v0.42.0
stdlib@go1.24.5
0.60.0
1.26.9

Open the chart page →

2,009
s-uihuscker-chartsVerified publisher1.0.31 of 1See more

s-ui huscker-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
alireza7/s-ui:1.5.302aa86983cdb
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

871
jaegerhuseyinbabalVerified publisher0.1.03 of 3See more

jaeger huseyinbabal 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9
otel/opentelemetry-collector-contrib:latest39923a8e431b
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

2,313
kubetaghuseyinbabalVerified publisher1.0.21 of 2See more

kubetag huseyinbabal 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/huseyinbabal/kubetag:lateste161eddc59a0
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

1,765
mocktailhuseyinnurbaki0.2.11 of 1See more

mocktail huseyinnurbaki 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
hhaluk/mocktail:2.0.3350d19360038
stdlib@go1.17.7
1.26.9

Open the chart page →

2,534
vcbackendi4trustVerified publisher0.0.81 of 1See more

vcbackend i4trust 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
wistefan/vcbackend:0.0.13bd436164b51
stdlib@go1.18.3
1.26.9

Open the chart page →

2,711
vcverifieri4trustVerified publisher1.0.231 of 1See more

vcverifier i4trust 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/fiware/vcverifier:2.0.1cd36290dc849
golang.org/x/net@v0.8.0
stdlib@go1.19.9
0.60.0
1.26.9

Open the chart page →

2,517
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
golang.org/x/net@v0.8.0
stdlib@go1.20.2
0.60.0
1.26.9

Open the chart page →

9,220
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.8
0.60.0
1.26.9

Open the chart page →

6,117
ibexaibexaVerified publisher3.11.12 of 10See more

ibexa ibexa 3.11.1

2 of the 10 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/mysql:8.0.41bf577825b52a
stdlib@go1.18.2
1.26.9
registry.gitlab.com/xrow-public/ci-tools/kubectl:main9357cfeef63c
golang.org/x/net@v0.38.0
stdlib@go1.24.9
0.60.0
1.26.9

Open the chart page →

7,858
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2
library/postgres:9.6caddd35b05cd
stdlib@go1.16.7
1.26.9

Open the chart page →

117,242
ibm-ucv-prodibm-helm5.3.01 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

1 of the 16 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
stdlib@go1.22.7
1.26.9

Open the chart page →

13,768
browserlessicoretechVerified publisher0.18.11 of 1See more

browserless icoretech 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.9

Open the chart page →

1,335
metamcpicoretechVerified publisher0.3.111 of 2See more

metamcp icoretech 0.3.11

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:161a6ab3f5345e
stdlib@go1.24.6
1.26.9

Open the chart page →

1,924
multicaicoretechVerified publisher0.6.31See more

multica icoretech 0.6.3

1 container image this version deploys carries CVE-2026-78659.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17ac08538c6f8b
stdlib@go1.24.6
1.26.9

Open the chart page →

—
tolgeeicoretechVerified publisher0.56.01See more

tolgee icoretech 0.56.0

1 container image this version deploys carries CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
stdlib@go1.24.6
1.26.9

Open the chart page →

—
monitoring-stackict-platformVerified publisher0.4.010 of 13See more

monitoring-stack ict-platform 0.4.0

10 of the 13 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9
prom/memcached-exporter:v0.15.4b6763ecb3c47
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
golang.org/x/net@v0.46.0
stdlib@go1.24.10
0.60.0
1.26.9
ghcr.io/grafana/grafana-operator:v5.22.2d45fc24e8f43
golang.org/x/net@v0.51.0
stdlib@go1.26.1
0.60.0
1.26.9
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
golang.org/x/net@v0.30.0
stdlib@go1.24.9
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.043401e216e89
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9
registry.k8s.io/kubectl:v1.31.099b37df34bc4
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

14,424
s3-exporterict-platformVerified publisher1.0.11 of 1See more

s3-exporter ict-platform 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/virtuos/s3-exporter:1.0.26bee875150a0
stdlib@go1.26.7
1.26.9

Open the chart page →

148
ingress-nginxifmethod-helm-charts4.12.12 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2e8825994b7a2
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9

Open the chart page →

2,741
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
golang.org/x/net@v0.7.0
stdlib@go1.18.10
0.60.0
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

32,869
bluesky-pdsijmacd1.0.02 of 2See more

bluesky-pds ijmacd 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
golang.org/x/net@v0.24.0
stdlib@go1.23.8
0.60.0
1.26.9
ghcr.io/bluesky-social/pds:0.43a8feb3415e3
stdlib@go1.25.10
1.26.9

Open the chart page →

10,308
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
kuberay/operator:v1.0.04e6ac8a3a2c4
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.60.0
1.26.9
rabbitmqoperator/cluster-operator:2.6.08651dd3cec51
golang.org/x/net@v0.18.0
stdlib@go1.20.11
0.60.0
1.26.9
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b
stdlib@go1.17.3
0.60.0
1.26.9

Open the chart page →

117,652
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9

Open the chart page →

3,215
ilum-jupyterhubilumVerified publisher4.3.12 of 6See more

ilum-jupyterhub ilum 4.3.1

2 of the 6 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
bitnami/git:latest27e3b3fe7123
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
golang.org/x/net@v0.23.0
stdlib@go1.23.10
0.60.0
1.26.9

Open the chart page →

2,844
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
golang.org/x/net@v0.30.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

2,176
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/postgres:17.6-alpineef257d85f76e
stdlib@go1.24.6
1.26.9

Open the chart page →

12,096
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
masipcat/wireguard-go:0.0.20230223769f7bb64694
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

4,234
frigateimprowisedVerified publisher1.1.01 of 1See more

frigate improwised 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
golang.org/x/net@v0.8.0
stdlib@go1.20.3
0.60.0
1.26.9

Open the chart page →

3,060
kore-boardimprowisedVerified publisher0.5.83 of 4See more

kore-board improwised 0.5.8

3 of the 4 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.4
0.60.0
1.26.9
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.19.4
0.60.0
1.26.9
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.18.9
0.60.0
1.26.9

Open the chart page →

19,416
fpga-cloudinaccelVerified publisher1.2.23 of 3See more

fpga-cloud inaccel 1.2.2

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
inaccel/cloud-init:latesta5d3d0af05c1
golang.org/x/net@v0.19.0
stdlib@go1.21.6
0.60.0
1.26.9
inaccel/device-selector:latest44b4f274f40b
golang.org/x/net@v0.21.0
stdlib@go1.21.9
0.60.0
1.26.9
inaccel/kubevirt-hack:latestbdfd61803a70
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9

Open the chart page →

5,118
fpga-operatorinaccelVerified publisher2.8.23 of 7See more

fpga-operator inaccel 2.8.2

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
golang.org/x/net@v0.19.0
stdlib@go1.21.6
0.60.0
1.26.9
inaccel/mkrt:latest187fd448b6f2
stdlib@go1.21.5
1.26.9
inaccel/reef:latestc967218739f3
golang.org/x/net@v0.19.0
stdlib@go1.21.6
0.60.0
1.26.9

Open the chart page →

7,764
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/infisical:latest3f014f284cb9
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

3,072
infisical-agent-injectorinfisical-charts0.1.121 of 1See more

infisical-agent-injector infisical-charts 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/infisical-agent-injector:v0.1.12718dd5bee7cb
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

1,183
infisical-csi-providerinfisical-charts0.2.31 of 1See more

infisical-csi-provider infisical-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/infisical-csi-provider:v0.0.9e3390e677db6
golang.org/x/net@v0.33.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

1,054
infisical-gatewayinfisical-charts1.6.01 of 1See more

infisical-gateway infisical-charts 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/cli:0.43.134fd40aa379818
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

277
infisical-pki-issuerinfisical-charts1.0.01 of 1See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/pki-issuer:latestff38294270e3
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

983
secrets-operatorinfisical-charts0.11.111 of 1See more

secrets-operator infisical-charts 0.11.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
infisical/kubernetes-operator:v0.11.118c1cf30ef822
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

340
chronografinfluxdata1.2.61 of 1See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container imageDigestPackageFixed in
library/chronograf:1.9.496d8a3f65a4f
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.4
0.60.0
1.26.9

Open the chart page →

3,402

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
robotshop/rs-mongodb:latest119b545823cd
stdlib@go1.16.3
1.26.9
1
robustadev/kubewatch:v2.9.00457a51e36e8
golang.org/x/net@v0.26.0
stdlib@go1.23.1
0.60.0
1.26.9
1
rocm/k8s-device-plugin:1.31.0.926212c665aab
golang.org/x/net@v0.33.0
stdlib@go1.23.6
0.60.0
1.26.9
1
rogerrum/alertmanager-discord:1.0.3827593369625
stdlib@go1.17.4
1.26.9
1
rokk42/seashells:1.0-k8sdfc850a5db9e
golang.org/x/net@v0.25.0
stdlib@go1.22.3
0.60.0
1.26.9
1
rook/ceph:v1.21.02c3a65786d3c
golang.org/x/net@v0.58.0
stdlib@go1.22.10
0.60.0
1.26.9
1
rook/ceph:v1.19.2944a1dd70496
golang.org/x/net@v0.47.0
stdlib@go1.25.6
0.60.0
1.26.9
1
rookout/k8s-operator:latest0d083f3ef1a7
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.15
0.60.0
1.26.9
1
rotationalio/beacon:0.2.0f8d8b694515a
golang.org/x/net@v0.54.0
stdlib@go1.26.5
0.60.0
1.26.9
1
rotationalio/endeavor:1.4.21a73cb9620ef
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rotationalio/genoa:1.2.03ab583519215
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rotationalio/geoping:1.3.034bcb6fc3cb7
golang.org/x/net@v0.51.0
stdlib@go1.26.1
0.60.0
1.26.9
1
rotationalio/honu:0.5.069fd30c2e31c
stdlib@go1.25.1
1.26.9
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
1
rotationalio/vanity:1.2.0d77350f69b45
stdlib@go1.25.8
1.26.9
1
rqlite/rqlite:9.1.37b992a526eee
golang.org/x/net@v0.46.0
stdlib@go1.25.3
0.60.0
1.26.9
1
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
stdlib@go1.21.3
1.26.9
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.60.0
1.26.9
1
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
stdlib@go1.21.3
1.26.9
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
stdlib@go1.21.3
1.26.9
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
stdlib@go1.21.3
1.26.9
1
rstream/rstream-operator:latestc7615b3e3f85
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
rtuszik/photon-docker:2.4.021549c60f9e6
stdlib@go1.22.2
1.26.9
1
runatlantis/atlantis:v0.16.145fbaf7e207c
golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a
stdlib@go1.14.7
0.60.0
1.26.9
1
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
golang.org/x/net@v0.26.0
stdlib@go1.22.11
0.60.0
1.26.9
1
rustrial/k8s-gitops-secrets-controller:0.6.093326a322a01
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ryuunosukeds3/orbital:latest0879f7261b10
golang.org/x/net@v0.37.0
stdlib@go1.23.9
0.60.0
1.26.9
1
sablierapp/sablier:1.16.1413704376656
golang.org/x/net@v0.56.0
stdlib@go1.26.3
0.60.0
1.26.9
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
stdlib@go1.20.1
1.26.9
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
stdlib@go1.20.1
1.26.9
1
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66c1ff7c90845e4
stdlib@go1.20.1
1.26.9
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
stdlib@go1.20.1
1.26.9
1
samarthya/spinnaker:v1.0ef06d81036af
golang.org/x/net@v0.0.0-20210913180222-943fd674d43e
stdlib@go1.17.6
0.60.0
1.26.9
1
samcm/checkpointz:latesta66b24a87766
golang.org/x/net@v0.47.0
stdlib@go1.25.1
0.60.0
1.26.9
1
samcm/ethereum-metrics-exporter:0.29.2:latest91a2d9a015c1
golang.org/x/net@v0.43.0
stdlib@go1.25.8
0.60.0
1.26.9
1
samcm/ethereum-metrics-exporter:latestdc6cedebb24b
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
sarwansharma/minio:v359d1da9385d1
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.18.3
0.60.0
1.26.9
1
saurabh6/grafana_setup:v15c140fda7486
golang.org/x/net@v0.0.0-20210521195947-fe42d452be8f
stdlib@go1.16.1
0.60.0
1.26.9
1
saurabh6/prometheus_setup:v19d4dbe7c1815
golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b
stdlib@go1.16.5
0.60.0
1.26.9
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
stdlib@go1.19.8
1.26.9
1
scaleway/cert-manager-webhook-scaleway:v0.1.36d94c970e710
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
scaleway/scaleway-csi:v0.3.411135998e31c
golang.org/x/net@v0.42.0
stdlib@go1.24.12
0.60.0
1.26.9
1
scaleway/scaleway-secrets-store-csi:v0.1.19acc53a69962
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.60.0
1.26.9
1
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
golang.org/x/net@v0.39.0
stdlib@go1.25.3
0.60.0
1.26.9
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
golang.org/x/net@v0.35.0
stdlib@go1.25.3
0.60.0
1.26.9
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
golang.org/x/net@v0.39.0
stdlib@go1.25.3
0.60.0
1.26.9
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
golang.org/x/net@v0.39.0
stdlib@go1.25.3
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.