CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

7,482

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

12,921

wazuh-operatorwazuh-operator

2026.10.2

1 of 1 See more

wazuh-operator wazuh-operator 2026.10.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/maximewewer/wazuh-operator :2026.10.2	aad30dd2e645	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

anubiswbstack

0.1.0

1 of 1 See more

anubis wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

977

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

7,324

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9

Open the chart page →

10,875

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

azure-janitorwebdevops

1.0.13

1 of 1 See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-janitor :24.9.0	2446baee7b69	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,354

azure-keyvault-exporterwebdevops

1.0.12

1 of 1 See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-keyvault-exporter :24.9.1	f333704ecd60	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,353

azure-loganalytics-exporterwebdevops

1.0.13

1 of 1 See more

azure-loganalytics-exporter webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-loganalytics-exporter :25.12.0	051845d06d85	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

azure-resourcegraph-exporterwebdevops

1.1.5

1 of 1 See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcegraph-exporter :24.9.0	381136dda026	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,338

azure-resourcemanager-exporterwebdevops

1.3.6

1 of 1 See more

azure-resourcemanager-exporter webdevops 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcemanager-exporter :26.1.0	d3e1842ad419	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

970

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,691

kube-pool-managerwebdevops

1.0.16

1 of 1 See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/kube-pool-manager :24.9.0	4fad7e14ad67	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,038

pagerduty-exporterwebdevops

1.1.8

1 of 1 See more

pagerduty-exporter webdevops 1.1.8

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
webdevops/pagerduty-exporter :25.12.1	83b95faf10a0	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mariadb :10	7db29378d4fd	stdlib@go1.24.6	1.26.9

Open the chart page →

11,207

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,194

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

30,659

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	stdlib@go1.20.1	1.26.9

Open the chart page →

2,674

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,563

valkey-operatorwellcake

0.11.0

1 of 1 See more

valkey-operator wellcake 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/melancholictheory/wellcake :0.11.0	5833bb94d394	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

329

alertmanagerwener

2.1.1

2 of 2 See more

alertmanager wener 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

502

ambassadorwener

6.9.5

1 of 2 See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

5,651

apisixwener

2.18.1

1 of 3 See more

apisix wener 2.18.1

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

3,705

apisix-ingress-controllerwener

1.4.0

1 of 2 See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,338

argo-cdwener

10.10.3

2 of 3 See more

argo-cd wener 10.10.3

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/argoproj/argocd :v3.5.5	13db7b10db23	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

2,657

argocd-image-updaterwener

1.3.2

1 of 1 See more

argocd-image-updater wener 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.1	a578e328e8cb	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

398

argo-eventswener

2.4.27

1 of 1 See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.57.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,609

argo-rolloutswener

2.43.7

1 of 1 See more

argo-rollouts wener 2.43.7

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.1	fbcc4cf0a29d	golang.org/x/net@v0.56.0	0.60.0

Open the chart page →

220

argo-workflowswener

2.0.13

3 of 3 See more

argo-workflows wener 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.5	93534a0d0ba3	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/argoproj/argocli :v4.1.5	e0824b55297b	stdlib@go1.26.5	1.26.9
quay.io/argoproj/workflow-controller :v4.1.5	328307c9436f	stdlib@go1.26.5	1.26.9

Open the chart page →

966

athens-proxywener

0.5.2

2 of 2 See more

athens-proxy wener 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.60.0 1.26.9
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

6,742

cadencewener

0.23.0

2 of 5 See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.60.0 1.26.9
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

13,620

cert-managerwener

1.21.2

4 of 4 See more

cert-manager wener 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

866

cockroachdbwener

22.0.4

1 of 3 See more

cockroachdb wener 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

781

consulwener

2.0.4

2 of 2 See more

consul wener 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
hashicorp/consul :2.0.4	1c59f007df8e	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9
hashicorp/consul-k8s-control-plane :2.0.4	9334d7f4bcf0	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

459

emissary-ingresswener

8.12.2

1 of 2 See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	golang.org/x/net@v0.28.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

76,693

external-secretswener

2.12.0

1 of 1 See more

external-secrets wener 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

270

filebrowserwener

1.0.0

1 of 1 See more

filebrowser wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,422

giteawener

12.7.0

2 of 4 See more

gitea wener 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9

Open the chart page →

10,533

gitlab-runnerwener

0.93.0

1 of 1 See more

gitlab-runner wener 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

657

haproxy-ingresswener

0.16.2

1 of 1 See more

haproxy-ingress wener 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

243

ingress-nginxwener

4.15.1

2 of 2 See more

ingress-nginx wener 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,364

juicefs-csi-driverwener

0.33.0

5 of 5 See more

juicefs-csi-driver wener 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,321

kube-prometheus-stackwener

92.7.0

5 of 6 See more

kube-prometheus-stack wener 92.7.0

5 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.4-distroless	ae3d3add290a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.11.0	778d97dc3986	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,464

kubernetes-dashboardwener

7.14.0

4 of 5 See more

kubernetes-dashboard wener 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

5,075

kube-state-metricswener

8.6.0

1 of 1 See more

kube-state-metrics wener 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

322

logging-operatorwener

3.17.10

1 of 1 See more

logging-operator wener 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,541

longhornwener

1.2.3

1 of 2 See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.60.0 1.26.9

Open the chart page →

17,191

mesherywener

1.0.71

1 of 1 See more

meshery wener 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	b3816d0c691d	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,882

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
supporttools/rancher-upgrade-tool :v216	f4dc8ef6dd2d	stdlib@go1.22.4	1.26.9	1
supporttools/reflow-ingress-logs :v11	aa7194c4c851	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.60.0 1.26.9	1
supporttools/uptime-kuma :v2.6	f8a49ed65809	golang.org/x/net@v0.19.0 stdlib@go1.19.6	0.60.0 1.26.9	1
supporttools/website :v1326	03fdbc9e708e	stdlib@go1.22.4	1.26.9	1
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.60.0 1.26.9	1
svtechnmaa/svtech_icingadb :v1.1.2	6d91c2e4e882	stdlib@go1.21.5	1.26.9	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	stdlib@go1.21.6	1.26.9	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9	1
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
syepes/network_exporter :1.8.0	00af1691570e	golang.org/x/net@v0.39.0 stdlib@go1.25.1	0.60.0 1.26.9	1
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	1
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.60.0 1.26.9	1
sysadminsmedia/homebox :0.26.0	56e880b62309	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
sysdiglabs/harbor-scanner-sysdig-secure :0.8.0	10b56ec35a7c	golang.org/x/net@v0.25.0 stdlib@go1.22.1	0.60.0 1.26.9	1
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0 stdlib@go1.19.3	0.60.0 1.26.9	1
sysnet4admin/colosseum-nti :log	c947c3629371	stdlib@go1.23.12	1.26.9	1
t3nde/tideways :1.7.27	77e008f764db	stdlib@go1.16.4	1.26.9	1
tailscale/k8s-operator :v1.104.1	38351d6333ed	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
tailscale/k8s-operator :v1.70.0	8edd06cf5bac	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	1
tailscale/k8s-operator :unstable	dfde498cd7ab	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
tailscale/tailscale :stable	c507f3a2a6ab	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9	1
tailscale/tailscale :v1.96.5	dbeff02d2337	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.60.0 1.26.9	1
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.60.0 1.26.9	1
tautulli/tautulli :latest	a4323bc09b27	stdlib@go1.24.4	1.26.9	1
tchiotludo/akhq :0.28.0	c2824dc2ae44	stdlib@go1.26.5	1.26.9	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.6	0.60.0 1.26.9	1
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.60.0 1.26.9	1
tektonops/ipup-dynu :latest	c2198746cf8f	stdlib@go1.22.6	1.26.9	1
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0 stdlib@go1.20.10	0.60.0 1.26.9	1
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/net@v0.31.0 stdlib@go1.22.5	0.60.0 1.26.9	1
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.60.0 1.26.9	1
temporalio/admin-tools :1.32.1	9ef0dc5b063b	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	golang.org/x/net@v0.39.0 stdlib@go1.25.0	0.60.0 1.26.9	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	golang.org/x/net@v0.27.0 stdlib@go1.22.3	0.60.0 1.26.9	1
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9	1
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/net@v0.35.0 stdlib@go1.25.0	0.60.0 1.26.9	1
temporalio/auto-setup :1.27.2	b44cbfeb43db	golang.org/x/net@v0.34.0 stdlib@go1.23.2	0.60.0 1.26.9	1
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/net@v0.31.0 stdlib@go1.23.2	0.60.0 1.26.9	1
temporalio/server :1.25.0	8a5798191dea	golang.org/x/net@v0.28.0 stdlib@go1.22.3	0.60.0 1.26.9	1
temporalio/server :1.32.1	acecbab5b0b8	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
temporalio/server :1.29.1	c1e3326b2ce1	golang.org/x/net@v0.40.0 stdlib@go1.25.0	0.60.0 1.26.9	1
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.60.0 1.26.9	1
temporalio/temporal-proxy :v0.5.0	e9dc65181b93	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9	1
temporalio/ui :2.44.0	0b36e00aad30	golang.org/x/net@v0.34.0 stdlib@go1.24.11	0.60.0 1.26.9	1
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/net@v0.28.0 stdlib@go1.22.1	0.60.0 1.26.9	1
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/net@v0.17.0 stdlib@go1.23.0	0.60.0 1.26.9	1
temporalio/ui :2.56.0	66d55d383bfb	golang.org/x/net@v0.49.0	0.60.0	1
temporalio/ui :2.54.1	ff0943fe532b	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9	1
tensorzero/ui :2026.6.0	f2563d54724e	stdlib@go1.23.12	1.26.9	1