CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

27,492

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

6,126

qubivaqubiva

0.3.2

2 of 3 See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

8,369

ingress-nginxquench-ingress-nginx

0.0.11

1 of 1 See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

549

ingress-stackquench-ingress-stack

0.0.6

1 of 5 See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

786

versitygwquench-versitygw

0.0.2

1 of 1 See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned	783ea36fcc7a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

2,421

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.26.9

Open the chart page →

9,202

rabbitmq-cluster-operatorrabbitmq-cluster-operator

4.8.0

2 of 2 See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :4.8	23d259e0c93e	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :4.8	d13e3304bda8	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,281

rabbitpingrabbitping

1.3.0

1 of 1 See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
udhos/rabbitping :1.3.0	474c467bbf42	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,748

kubemirrorraczylo-com

0.10.19

1 of 1 See more

kubemirror raczylo-com 0.10.19

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/lukaszraczylo/kubemirror :0.10.19	ffd613daa7d3	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

201

rad-pluginsrad

2.4.15

5 of 5 See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.34	adc2f5d5996b	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.44	f30f0dc32205	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.71	0f5aeaf1a77e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.38	bbba62c5a110	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.50	4e25d84332fc	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,074

rada-platformrada-platform

0.1.0

2 of 7 See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.26.9
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9

Open the chart page →

24,015

cloudnative-pgradar-base

0.23.2

1 of 1 See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,390

headlampradar-base

1.0.0

1 of 1 See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.43.0	5d03caa26df7	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,012

hydraradar-base

0.48.0

1 of 1 See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,223

kratosradar-base

0.43.1

1 of 1 See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,453

kubecostradar-base

1.0.0

3 of 7 See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

11,643

management-portalradar-base

1.7.0

1 of 1 See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

4,002

nginx-gateway-fabricradar-base

2.6.6

1 of 1 See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

397

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

2,476

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,768

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

2,133

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

mysqld-exporterrafaelscone

0.0.1

1 of 1 See more

mysqld-exporter rafaelscone 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :latest	abed8dac117b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

350

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,583

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

ratecapratecap

0.1.2

2 of 3 See more

ratecap ratecap 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

802

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,061

rawfile-localpvrawfile

0.15.3

5 of 6 See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

4,787

aws-ec2-runtime-checkerrayselfs-charts

0.1.4

1 of 1 See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rayselfs/aws-ec2-runtime-checker :v0.1.5	562e5b2f81ce	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

709

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,223

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

4,958

mihomos-clusterre8ch-mihomos-cluster

0.1.1

1 of 3 See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
metacubex/mihomo :v1.19.29	e1d7dadaa936	golang.org/x/net@v0.35.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

939

reactive-policyreactive-policy

0.4.1

1 of 1 See more

reactive-policy reactive-policy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/vedooo/reactive-policy :0.4.1	d92eda891c91	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

283

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.26.9

Open the chart page →

4,550

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.26.9

Open the chart page →

5,749

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

etherpadredhat-cop

0.0.8

1 of 1 See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
etherpad/etherpad :latest	6f87beef31d9	stdlib@go1.26.4	1.26.9

Open the chart page →

484

gitops-operatorredhat-cop

0.10.6

1 of 1 See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,603

ploigosredhat-cop

0.0.9

2 of 2 See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

14,044

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	golang.org/x/net@v0.20.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

17,241

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

31,202

redirectorredirector

0.0.3

1 of 1 See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/chilledornaments/redirector :latest	94d48447d967	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

340

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9

Open the chart page →

2,713

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
opencsghq/stakater-reloader :v1.4.19	0491782f7bac	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	3
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9	3
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9	3
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.60.0 1.26.9	3
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9	3
otel/opentelemetry-collector :latest	310a800ad69e	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	3
pgsty/silo :RELEASE.2026-09-03T13-18-01Z	b616a0cf8cb2	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	3
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	3
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9	3
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.60.0 1.26.9	3
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.9	3
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.9	3
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9	3
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.26.9	3
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.9	3
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9	3
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	3
rancher/system-upgrade-controller :v0.20.2	61b68d4372ba	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	3
rcdelacruz/my-strapi-app :js-amd64	38007f358355	stdlib@go1.19.4	1.26.9	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	3
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.9	3
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.60.0 1.26.9	3
tykio/tyk-dashboard :v5.13.2	1161bd297135	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	3
tykio/tyk-gateway-ee :v5.13.2	50b3e4f5398a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	3
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9	3
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9	3
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.26.9	3
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9	3
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9	3
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	3
gcr.io/trillian-opensource-ci/db_server	2a685a38dd01	stdlib@go1.18.2	1.26.9	3
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	golang.org/x/net@v0.47.0 stdlib@go1.25.10	0.60.0 1.26.9	3
ghcr.io/appscode/sidekick :v0.0.15	d1036b07e348	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.60.0 1.26.9	3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9	3
ghcr.io/coder/coder :v2.38.0	38a4cfc548b0	golang.org/x/net@v0.58.0 stdlib@go1.26.4	0.60.0 1.26.9	3
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.60.0 1.26.9	3
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	3
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	3
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	3
ghcr.io/hatchet-dev/hatchet/hatchet-frontend :v0.110.5	136c6a29a81a	stdlib@go1.26.8	1.26.9	3
ghcr.io/hatchet-dev/hatchet/hatchet-migrate :v0.110.5	b2112d73f37a	stdlib@go1.26.8	1.26.9	3
ghcr.io/home-assistant/home-assistant :2026.10.1	130241f28d01	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9	3
ghcr.io/kuberocketci/krci-cache :0.3.0	5f6cd61e6da6	golang.org/x/net@v0.55.0 stdlib@go1.25.8	0.60.0 1.26.9	3
ghcr.io/rabbitmq/messaging-topology-operator :1.20.3	f377d3c3e221	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	3
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.33	e591f98e3899	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9	3
ghcr.io/sigstore/scaffolding/createdb	16673c1099a5	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9	3
ghcr.io/sigstore/scaffolding/ct_server :v0.7.33	24293fa1ed50	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9	3
ghcr.io/sigstore/scaffolding/trillian_log_server	32ee491f4d00	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2	3