CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,312; of 18,131 indexed, latest versions
Container images: 6,132; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,312 of 18,131 indexed charts deploy, on 6,132 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,077
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,894
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,312 by stars

Chart

Latest

Affected images

Radar Score

pet-battle-tournamentpetbattle

1.0.40

2 of 3 See more

pet-battle-tournament petbattle 1.0.40

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.60.0 1.26.9

Open the chart page →

17,903

mariadbpetersandor

15.2.5

1 of 1 See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/mariadb :11.7.2	16a7dae804fb	stdlib@go1.22.12	1.26.9

Open the chart page →

3,574

mongodbpetersandor

14.1.8

1 of 1 See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

5,464

redispetersandor

15.2.2

1 of 1 See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/redis :7.4.2	4e65bf641805	stdlib@go1.23.8	1.26.9

Open the chart page →

3,410

lan-orangutanpeterweissdk

0.1.0

1 of 1 See more

lan-orangutan peterweissdk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/291-group/lan-orangutan :3.3.8	86b55c80eeb1	stdlib@go1.25.12	1.26.9

Open the chart page →

486

pgcopydb-operatorpgcopydb-operator

0.21.0

1 of 1 See more

pgcopydb-operator pgcopydb-operator 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/ydixken/pgcopydb-operator :v0.21.0	807741a423a3	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

220

pgdogpgdog

0.90.0

1 See more

pgdog pgdog 0.90.0

1 container image this version deploys carries CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/pgdogdev/pgdog :v0.1.60	25d1908886f5	stdlib@go1.26.7	1.26.9

Open the chart page →

—

whoamiphilippwaller

1.0.3

1 of 1 See more

whoami philippwaller 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.26.9

Open the chart page →

1,900

codimdphntom

0.1.12

1 of 3 See more

8,184

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.60.0 1.26.9

Open the chart page →

2,786

external-dns-host-networkphntom

0.0.12

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

6,578

goalertphntom

0.0.29

1 of 1 See more

goalert phntom 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

1,723

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

4,191

loki-stackphntom

2.10.2

2 of 2 See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.60.0 1.26.9
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

8,423

mindavphntom

0.1.6

1 of 2 See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

5,735

npre-essentialsphntom

0.1.60

13 of 22 See more

npre-essentials phntom 0.1.60

13 of the 22 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.60.0 1.26.9
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.60.0 1.26.9
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.60.0 1.26.9
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.60.0 1.26.9
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.60.0 1.26.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheuscommunity/elasticsearch-exporter :v1.5.0	13a41e8ac836	stdlib@go1.18.4	1.26.9
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

39,332

prometheus-elasticsearch-exporterphntom

4.5.1

1 of 2 See more

prometheus-elasticsearch-exporter phntom 4.5.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9

Open the chart page →

3,124

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	stdlib@go1.19	1.26.9

Open the chart page →

94,176

picoclawpicoclaw

0.1.26

1 of 1 See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/mattn/picoclaw :latest	517556c8b144	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

2,002

piepie

0.11.1

1 of 1 See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/pie :0.18.0	aa467443e407	golang.org/x/net@v0.49.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

2,769

piggy-webhookspiggy

0.7.6

1 of 1 See more

piggy-webhooks piggy 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/kongz/piggy-webhooks :0.7.6	9197edc00bbf	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

213

pagespighosh-pages

1.0.0

1 of 3 See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,421

pii-shieldpii-shield

2.2.7

1 of 1 See more

pii-shield pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
thelisdeep/pii-shield :2.2.7	6a8b0c89227b	stdlib@go1.27.1	1.27.2

Open the chart page →

148

pii-shield-operatorpii-shield

2.2.7

1 of 1 See more

pii-shield-operator pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/pii-shield/pii-shield-operator :2.2.7	1d21a4b3683c	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

231

pillar-csipillar-csi

0.5.4

8 of 9 See more

pillar-csi pillar-csi 0.5.4

8 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/isac322/pillar-csi/agent :0.5.4	adb7fecffc4e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/isac322/pillar-csi/controller :0.5.4	f9eea76ec045	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/isac322/pillar-csi/node :0.5.4	835432e4ddf1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.20.0	19f2cf2f40e1	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

2,336

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

2,358

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

4,719

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

8,739

substreams-sink-kvpinax

0.0.4

1 of 1 See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9

Open the chart page →

59,281

substreams-sink-nooppinax

0.0.3

1 of 1 See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9

Open the chart page →

59,211

substreams-tier-2pinax

0.0.8

1 of 1 See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

6,260

pixie-operator-chartpixie

0.1.7

1 of 3 See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	1b6002156f56	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,641

pixie-operator-helm2-chartpixie

0.1.2

1 of 2 See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	f9ea8cef95ac	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

2,614

planectlplanectl

0.7.0

6 of 10 See more

planectl planectl 0.7.0

6 of the 10 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.22.3	0.60.0 1.26.9
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	stdlib@go1.24.6	1.26.9
gitea/act_runner :0.2.11	c57233403eff	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.60.0 1.26.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.26.9
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/net@v0.34.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

32,253

account-operatorplatform-mesh-account-operator

0.21.1

1 of 1 See more

account-operator platform-mesh-account-operator 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/account-operator :v0.15.5	fa4923226063	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

230

extension-manager-operatorplatform-mesh-extension-manager-operator

0.43.0

1 of 1 See more

extension-manager-operator platform-mesh-extension-manager-operator 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator :v0.10.0	9371fcf05f76	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

230

kubernetes-graphql-gatewayplatform-mesh-kubernetes-graphql-gateway

0.53.0

1 of 1 See more

kubernetes-graphql-gateway platform-mesh-kubernetes-graphql-gateway 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway :v1.20.0	2e6c9c111893	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

234

platform-mesh-operatorplatform-mesh-operator

0.47.0

1 of 1 See more

platform-mesh-operator platform-mesh-operator 0.47.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator :v0.89.0	b26d85c68aa8	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

230

rebac-authz-webhookplatform-mesh-rebac-authz-webhook

0.23.0

1 of 1 See more

rebac-authz-webhook platform-mesh-rebac-authz-webhook 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook :v0.12.0	fbb6df9ad2af	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

225

security-operatorplatform-mesh-security-operator

0.38.2

1 of 1 See more

security-operator platform-mesh-security-operator 0.38.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/security-operator :v0.36.0	9b26032812fd	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

234

virtual-workspacesplatform-mesh-virtual-workspaces

0.14.0

1 of 1 See more

virtual-workspaces platform-mesh-virtual-workspaces 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces :v0.17.0	bb2ee6241719	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

245

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

12,708

pixiecorepnnl-miscscripts

0.0.16

1 of 1 See more

pixiecore pnnl-miscscripts 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/pixiecore :1.0.1-1	c6f17741a0d7	golang.org/x/net@v0.7.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

1,504

tenant-namespacepnnl-miscscripts

0.6.23

1 of 1 See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

3,587

tenant-namespace-operatorpnnl-miscscripts

0.1.28

1 of 1 See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	golang.org/x/net@v0.48.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

14,006

podnat-controllerpodnat-controller

0.5.2

1 of 1 See more

podnat-controller podnat-controller 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gutmensch/podnat-controller :0.5.2	566979793fc4	golang.org/x/net@v0.4.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,579

libretimepodzone-charts

0.4.1

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.26.9

Open the chart page →

13,336

static-sitepodzone-charts

0.1.1

1 of 2 See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.26.9

Open the chart page →

6,640

agentpolyaxon

2.17.0

1 of 4 See more

agent polyaxon 2.17.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
polyaxon/polyaxon-operator :2.17.0	7664c1cebb9d	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

10,477

polyaxonpolyaxon

2.17.0

1 of 5 See more

polyaxon polyaxon 2.17.0

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
polyaxon/polyaxon-operator :2.17.0	7664c1cebb9d	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

14,539

Container images carrying it

6,132 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.26.9	1
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.26.9	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9	1
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.26.9	1
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
rook/ceph :v1.21.0	2c3a65786d3c	golang.org/x/net@v0.58.0 stdlib@go1.22.10	0.60.0 1.26.9	1
rook/ceph :v1.19.2	944a1dd70496	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.60.0 1.26.9	1
rotationalio/beacon :0.2.0	f8d8b694515a	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.60.0 1.26.9	1
rotationalio/genoa :1.2.0	3ab583519215	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
rotationalio/geoping :1.3.0	34bcb6fc3cb7	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
rotationalio/honu :0.5.0	69fd30c2e31c	stdlib@go1.25.1	1.26.9	1
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
rotationalio/vanity :1.2.0	d77350f69b45	stdlib@go1.25.8	1.26.9	1
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.26.9	1
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	1
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.26.9	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.26.9	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.26.9	1
rstream/rstream-operator :latest	c7615b3e3f85	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
rtuszik/photon-docker :2.4.0	21549c60f9e6	stdlib@go1.22.2	1.26.9	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.14.7	0.60.0 1.26.9	1
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.60.0 1.26.9	1
rustrial/k8s-gitops-secrets-controller :0.6.0	93326a322a01	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ryuunosukeds3/orbital :latest	0879f7261b10	golang.org/x/net@v0.37.0 stdlib@go1.23.9	0.60.0 1.26.9	1
sablierapp/sablier :1.16.1	413704376656	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9	1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3	ce9ce8293e4e	stdlib@go1.20.1	1.26.9	1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9	bb64bf14467d	stdlib@go1.20.1	1.26.9	1
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66c	1ff7c90845e4	stdlib@go1.20.1	1.26.9	1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525	799c35f9f306	stdlib@go1.20.1	1.26.9	1
samarthya/spinnaker :v1.0	ef06d81036af	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.6	0.60.0 1.26.9	1
samcm/checkpointz :latest	a66b24a87766	golang.org/x/net@v0.47.0 stdlib@go1.25.1	0.60.0 1.26.9	1
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.60.0 1.26.9	1
samcm/ethereum-metrics-exporter :latest	dc6cedebb24b	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.60.0 1.26.9	1
saurabh6/grafana_setup :v1	5c140fda7486	golang.org/x/net@v0.0.0-20210521195947-fe42d452be8f stdlib@go1.16.1	0.60.0 1.26.9	1
saurabh6/prometheus_setup :v1	9d4dbe7c1815	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.5	0.60.0 1.26.9	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.26.9	1
scaleway/cert-manager-webhook-scaleway :v0.1.3	6d94c970e710	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
scaleway/scaleway-csi :v0.3.4	11135998e31c	golang.org/x/net@v0.42.0 stdlib@go1.24.12	0.60.0 1.26.9	1
scaleway/scaleway-secrets-store-csi :v0.1.1	9acc53a69962	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9	1
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	golang.org/x/net@v0.39.0 stdlib@go1.25.3	0.60.0 1.26.9	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	golang.org/x/net@v0.35.0 stdlib@go1.25.3	0.60.0 1.26.9	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	golang.org/x/net@v0.39.0 stdlib@go1.25.3	0.60.0 1.26.9	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	golang.org/x/net@v0.39.0 stdlib@go1.25.3	0.60.0 1.26.9	1