CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-p32r-2pjm-q43g CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq, CGA-wxcm-45pg-2cp8
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

resource-managerfrinx-helm-charts

2.3.1

1 of 4 See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
frinx/resource-manager :6.1.0	9cd0147a09bd	stdlib@go1.21.7	1.26.9

Open the chart page →

10,496

uniresourcefrinx-helm-charts

1.1.1

2 of 3 See more

uniresource frinx-helm-charts 1.1.1

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
frinx/resource-manager :1.0.4	55575caebd01	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.17.9	0.60.0 1.26.9
library/postgres :alpine	77f585114c32	stdlib@go1.24.6	1.26.9

Open the chart page →

5,320

workflow-managerfrinx-helm-charts

3.2.1

1 of 5 See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
frinx/schellar :6.1.0	4693dc627d32	stdlib@go1.21.11	1.26.9

Open the chart page →

9,963

powerdnsfsdrw08

0.1.3

1 of 4 See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pschiffe/pdns-mysql :alpine	a7d2d021c788	stdlib@go1.21.5	1.26.9

Open the chart page →

2,578

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.26.9

Open the chart page →

5,897

icinga2g0dscookie

0.2.0

1 of 1 See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

6,052

passboltg0dscookie

0.5.2

2 of 2 See more

passbolt g0dscookie 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.26.9
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.26.9

Open the chart page →

10,653

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.26.9

Open the chart page →

3,129

castsponsorskipgabe565

0.8.1

1 of 1 See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,991

generic-device-plugingabe565

0.1.3

1 of 1 See more

generic-device-plugin gabe565 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

628

gotifygabe565

0.4.0

1 of 1 See more

gotify gabe565 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,306

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

2,526

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.26.9

Open the chart page →

1,872

matrimonygabe565

0.7.0

1 of 1 See more

matrimony gabe565 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.26.9

Open the chart page →

1,678

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

3,639

relax-soundsgabe565

1.1.0

1 of 1 See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/relax-sounds :latest	d9330eda7d8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

625

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.26.9

Open the chart page →

15,152

smarter-device-managergabe565

0.5.2

1 of 1 See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.1	0.60.0 1.26.9

Open the chart page →

2,097

transsmutegabe565

1.1.0

1 of 1 See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

1,352

guacamolegabibbo97

0.3.0

1 of 3 See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.26.9

Open the chart page →

8,596

galoygaloymoney

0.34.7

4 of 24 See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

11,828

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.60.0 1.26.9
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

17,748

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

2,744

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

8,167

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

11,828

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.60.0 1.26.9
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

17,748

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

2,744

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

8,167

gameserver-operatorgameserver-operator

0.3.0

1 of 1 See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/idebeijer/gameserver-operator :latest	1b099cfe9e5e	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

775

pagesgary-pages

1.0.0

1 of 3 See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,318

alertmanager-discordgeek-cookbook

1.3.2

1 of 1 See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.26.9

Open the chart page →

1,983

anonaddygeek-cookbook

6.0.0

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	stdlib@go1.18.3	1.26.9

Open the chart page →

5,714

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.26.9

Open the chart page →

16,196

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

3,099

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.26.9

Open the chart page →

18,161

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

3,102

duplicatigeek-cookbook

5.4.2

1 of 1 See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/duplicati :latest	78883c4ea7a3	stdlib@go1.24.9	1.26.9

Open the chart page →

1,885

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.26.9

Open the chart page →

9,956

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

2,938

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

4,790

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

4,896

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	stdlib@go1.15	1.26.9

Open the chart page →

12,554

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	stdlib@go1.18.3	1.26.9

Open the chart page →

10,987

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	stdlib@go1.16.7	1.26.9

Open the chart page →

15,861

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0 stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

3,770

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

3,493

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

4,915

nullservgeek-cookbook

2.4.2

1 of 1 See more

nullserv geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nullserv :v1.3.0	0792c7e6d814	stdlib@go1.16.5	1.26.9

Open the chart page →

2,110

nzbgetgeek-cookbook

12.4.2

1 of 1 See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	stdlib@go1.18.4	1.26.9

Open the chart page →

13,496

nzbhydra2geek-cookbook

10.4.2

1 of 1 See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	stdlib@go1.15	1.26.9

Open the chart page →

19,392

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/net@v0.33.0 stdlib@go1.21.13	0.60.0 1.26.9	1
timescale/timescaledb-ha :pg16	e9f34d8dd276	golang.org/x/net@v0.26.0 stdlib@go1.27.1	0.60.0 1.27.2	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.26.9	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.26.9	1
tinymediamanager/tinymediamanager :5.3.4	48c15784a127	stdlib@go1.24.4	1.26.9	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.60.0 1.26.9	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5 stdlib@go1.13.10	0.60.0 1.26.9	1
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/net@v0.37.0 stdlib@go1.24.0	0.60.0 1.26.9	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9	1
toniblyx/prowler :stable	9dbcc3c9abd7	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.60.0 1.26.9	1
trackerforce/switcher-gitops :latest	20235fe419e4	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.60.0 1.26.9	1
traefik/traefikee :v2.12.11	6259bdda7aa6	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9	1
traefik/whoami :v1.10	1699d99cb4b9	stdlib@go1.23.5	1.26.9	1
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.26.9	1
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.26.9	1
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.26.9	1
traggo/server :0.2.3	f1ced637510e	stdlib@go1.13.1	1.26.9	1
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.60.0 1.26.9	1
treeverse/everest-lakefs-csi-driver :1.4.0	556a05af968c	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
treeverse/lakefs :1.88.0	237a17c6b2d8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.8	0.60.0 1.26.9	1
treskon/portrait :DEV-latest	88e813f22347	stdlib@go1.26.5	1.26.9	1
trinodb/trino :481	5b5e0a97f599	stdlib@go1.26.2	1.26.9	1
trinodb/trino :479	6af989b0846d	stdlib@go1.25.4	1.26.9	1
trinodb/trino :483	db58cc93e593	stdlib@go1.26.4	1.26.9	1
truebyteinnovationllp/redis-exporter :v1.86.0	1c6a945af653	stdlib@go1.25.11	1.26.9	1
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.3	0.60.0 1.26.9	1
tusproject/tusd :v1.10.0	1e457b59fd5b	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.60.0 1.26.9	1
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.60.0 1.26.9	1
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.60.0 1.26.9	1
twinproduction/gatus :v5.34.0	3fff895e77d3	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9	1
tykio/portal :v1.19.0	78ffedae485e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
tykio/tyk-operator :v1.5.0	10f678bfdc27	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
uderelier19/pardus-nginx :25-nodeport	8ab640b44e3f	stdlib@go1.24.4	1.26.9	1
udhos/apiping :1.5.0	41ab9bae6f3b	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
udhos/eks-auto-pod-id-assoc :0.6.0	196ef68af380	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9	1
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
udhos/gateboard-discovery :1.9.5	5567c9363c4c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
udhos/k8s-mutating-admission-webhook :1.15.1	e588db500edf	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
udhos/kubecache :0.14.1	f44ef986df49	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1