CVE-2026-78659

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-pjc7-rhj8-2m9q DEBIAN-CVE-2026-78659 GO-2026-6603
Also known as: CGA-w7mj-m6pj-r2xq
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.60.0 1.26.9
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

13,206

ttl-controllerttl-controller

1.9.1

1 of 1 See more

ttl-controller ttl-controller 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller :1.9.1	8092dd72f073	golang.org/x/net@v0.57.0 stdlib@go1.27.0-X:nodwarf5	0.60.0 1.27.2

Open the chart page →

201

k8s-ttl-controllertwin

0.4.0

1 of 1 See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/twin/k8s-ttl-controller :v1.4.0	0525a7def93d	golang.org/x/net@v0.26.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

990

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0 stdlib@go1.19.6	0.60.0 1.26.9
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

12,595

crossplaneupbound-stable

2.4.2-up.1

1 of 5 See more

crossplane upbound-stable 2.4.2-up.1

1 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :14	14bfab572eec	stdlib@go1.24.6	1.26.9

Open the chart page →

1,801

uptraceuptrace

2.0.2

2 of 2 See more

uptrace uptrace 2.0.2

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :latest	fd328de25524	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0 stdlib@go1.24.10	0.60.0 1.26.9

Open the chart page →

2,321

valkey-operatorvalkey

0.7.0

1 of 1 See more

valkey-operator valkey 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/valkey-io/valkey-operator :v0.7.1	bfa3be0b1173	golang.org/x/net@v0.49.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

389

vaultvault

1.22.0

4 of 4 See more

vault vault 1.22.0

4 of the 4 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.60.0 1.26.9
hashicorp/vault :2.0.1	755355002715	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.60.0 1.26.9
ghcr.io/bank-vaults/bank-vaults :v1.33.1	98b6ea2ed319	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

6,263

victoria-logs-clustervictoriametrics

0.2.9

1 of 1 See more

victoria-logs-cluster victoriametrics 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-logs :v1.53.0	251121fa882a	stdlib@go1.27.1	1.27.2

Open the chart page →

141

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

1,856

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

2,068

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

3,154

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,505

wallarm-ingresswallarm

5.3.10-1

2 of 2 See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0 stdlib@go1.22.8	0.60.0 1.26.9

Open the chart page →

2,350

wallarm-sidecarwallarm

6.13.2

2 of 3 See more

wallarm-sidecar wallarm 6.13.2

2 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.13.2	290a87f01799	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

1,813

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.26.9

Open the chart page →

4,212

prometheuswener

29.36.1

6 of 6 See more

prometheus wener 29.36.1

6 of the 6 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.15.0	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,606

argo-cdwenerme

10.10.3

1 See more

argo-cd wenerme 10.10.3

1 container image this version deploys carries CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

—

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.17.4	0.60.0 1.26.9

Open the chart page →

7,312

wgerwger

2.0.0

1 of 7 See more

9,259

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18.1	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

14,101

windmillwindmill

4.0.280

1 of 3 See more

windmill windmill 4.0.280

1 of the 3 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,801

buildkitdwiremind

0.33.1

1 of 1 See more

buildkitd wiremind 0.33.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/net@v0.43.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,663

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.8	0.60.0 1.26.9

Open the chart page →

6,036

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.4	0.60.0 1.26.9

Open the chart page →

5,856

yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter

0.38.0

1 of 1 See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.26.9

Open the chart page →

1,357

nocodbzekker6

1.10.0

1 of 1 See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.301.5	d9516f0bf546	stdlib@go1.23.12	1.26.9

Open the chart page →

5,377

paperlesszekker6

11.11.0

1 of 1 See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.3.0	6b94799bc769	stdlib@go1.24.4	1.26.9

Open the chart page →

5,101

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9

Open the chart page →

1,386

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

2,509

no-latest-tag-webhookadmission-webhook-no-latest

1.0.14

1 of 1 See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

484

paperless-ngxadnoctem

0.5.0

3 of 5 See more

paperless-ngx adnoctem 0.5.0

3 of the 5 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/paperless-ngx/paperless-ngx :3.3.0	6b94799bc769	stdlib@go1.24.4	1.26.9

Open the chart page →

26,558

agentareaagentarea

0.0.26

8 of 17 See more

agentarea agentarea 0.0.26

8 of the 17 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
agentarea/agentarea-events :latest	71a89daaa2c6	stdlib@go1.25.14	1.26.9
agentarea/agentarea-mcp-manager :latest	0e7e53fef298	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9
agentarea/agentarea-mcp-runner :latest	9030cc19a0fc	stdlib@go1.19.8	1.26.9
library/postgres :16-alpine	721873c34ceb	stdlib@go1.24.6	1.26.9
library/postgres :alpine	77f585114c32	stdlib@go1.24.6	1.26.9
openfga/openfga :v1.18.0	36097b960f66	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/net@v0.35.0 stdlib@go1.25.0	0.60.0 1.26.9

Open the chart page →

18,218

traefikaigisuk

0.1.1

1 of 1 See more

traefik aigisuk 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/traefik :2.7.0-rc2	b70710baceeb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

3,951

ais-operatoraistore

4.1.0

1 of 1 See more

ais-operator aistore 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
aistorage/ais-operator :v4.1.0	151fc5b9f917	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

201

akeyless-api-gatewayakeyless-services-helm

1.62.29

1 See more

akeyless-api-gateway akeyless-services-helm 1.62.29

1 container image this version deploys carries CVE-2026-78659.

Container image	Digest	Package	Fixed in
akeyless/base :latest	759e4289fae8	stdlib@go1.26.3	1.26.9

Open the chart page →

—

visa-k8s-controlleralba-visa-helm-charts

1.0.0

1 of 1 See more

visa-k8s-controller alba-visa-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
misalbasynchrotron/visa-k8s :latest	48e4dcba8f6e	golang.org/x/net@v0.49.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

389

adguard-homealekc

3.2.0

1 of 2 See more

adguard-home alekc 3.2.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.79	aba9e3bf0613	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

417

cloudflaredalekc

1.9.0

1 of 1 See more

cloudflared alekc 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.10.0	9b49eed8f628	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

624

alertmanager-discordalertmanagerdiscord

0.3.2

1 of 1 See more

alertmanager-discord alertmanagerdiscord 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
speckle/alertmanager-discord :latest	f6221ff308e9	stdlib@go1.22.4	1.26.9

Open the chart page →

855

alertmanager-matrixalertmanager-matrix

0.1.16

1 of 1 See more

alertmanager-matrix alertmanager-matrix 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
silkeh/alertmanager_matrix :0.6.1	900010497f8c	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

792

paperless-ngxalexmorbo-paperless-ngx

0.2.0

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	stdlib@go1.24.4	1.26.9

Open the chart page →

14,430

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	stdlib@go1.18.1	1.26.9

Open the chart page →

73,211

clearml-servingallegroai

1.6.2

6 of 9 See more

clearml-serving allegroai 1.6.2

6 of the 9 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.19.6	1.26.9
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	stdlib@go1.18.2	1.26.9
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.26.9
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

25,744

pact-brokeralmorgv

0.1.0

1 of 1 See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.26.9

Open the chart page →

6,188

mariadbalphani-helm-charts

10.10.3

1 of 1 See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.26.9

Open the chart page →

9,661

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

4,018

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,015

cloudflare-operatorankra-charts

0.2.0

1 of 1 See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
adyanth/cloudflare-operatordigest-pinned	6b168dc237d5	golang.org/x/net@v0.39.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

987

hermes-agentankra-charts

0.3.1

1 of 1 See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78659.

Container image	Digest	Package	Fixed in
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	stdlib@go1.24.4	1.26.9

Open the chart page →

7,671

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/middleware-labs/vision-odiglet :middleware-test-0.0.3	bce34c98668e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.7	0.60.0 1.26.9	1
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/mindburn-labs/helm-ai-kernel :v0.11.1	0e7a5cd11858	golang.org/x/net@v0.58.0 stdlib@go1.25.13	0.60.0 1.26.9	1
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9	1
ghcr.io/miropshq/mirops/operator :v0.2.0	4b0b5fef9a6a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/miropshq/mirops/remediation :v0.2.0	976a7319ff4a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-console :v1.6.0	209e966322ab	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-controller :v1.6.0	b547c38dcc9d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-forkd :v1.6.0	979b462ab7d6	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-gateway :v1.6.0	017274a28204	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-kvm-device-plugin :v1.6.0	63e2b78d03c4	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.60.0 1.26.9	1
ghcr.io/mogenius/mogenius-operator :2.30.0	51bebfb32413	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/net@v0.9.0 stdlib@go1.24.4	0.60.0 1.26.9	1
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	stdlib@go1.26.0	1.26.9	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	golang.org/x/net@v0.24.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/mrueg/netcupscp-exporter :v0.5.2	5b86c2c0b0e0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/mschenck/ddns-kubernetes-controller :latest	590d55aab53c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.8	0.60.0 1.26.9	1
ghcr.io/mskazemi/kubeintellect :2.6.0	1d2b74d49f63	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/msueberkrueb/cloudflare-dyndns :1.0.0	e5c945a3b000	stdlib@go1.25.1	1.26.9	1
ghcr.io/muhmmadayan/fake-network-operator :0.1.0	3806b1fd4a4b	golang.org/x/net@v0.28.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/multica-ai/multica-backend :v0.6.1	824d42a4a443	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/music-assistant/server :2.10.6	45fdb050e069	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/music-assistant/server :2.10.3	885872224fa5	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	golang.org/x/net@v0.17.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.15.6	0.60.0 1.26.9	1
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.60.0 1.26.9	1
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9	1
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
ghcr.io/nefelim4ag/k8s-ondemand-proxy :0.0.2	078b25d48cf7	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	golang.org/x/net@v0.23.0 stdlib@go1.21.11	0.60.0 1.26.9	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.26.9	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.26.9	1
ghcr.io/netbirdio/netbird-operator :v0.8.0	ae2c26cfc547	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/netbox-community/netbox :v4.7.2	6f7177d3ff4d	stdlib@go1.26.7	1.26.9	1
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.17	0.60.0 1.26.9	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.16.8	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :2.4.1	80f3a0a51af5	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :edge	e15ba2abf4e6	golang.org/x/net@v0.59.0	0.60.0	1
ghcr.io/nicholaswilde/golinks :version-154c581	8e67b26324c5	stdlib@go1.16.5	1.26.9	1
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.26.9	1
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.5	0.60.0 1.26.9	1