CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-549w-3rfh-p826 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

27,492

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

6,126

qubivaqubiva

0.3.2

2 of 3 See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

8,369

ingress-nginxquench-ingress-nginx

0.0.11

1 of 1 See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

549

ingress-stackquench-ingress-stack

0.0.6

1 of 5 See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

786

versitygwquench-versitygw

0.0.2

1 of 1 See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned	783ea36fcc7a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

2,421

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.26.9

Open the chart page →

9,202

rabbitmq-cluster-operatorrabbitmq-cluster-operator

4.8.0

2 of 2 See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :4.8	23d259e0c93e	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :4.8	d13e3304bda8	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,281

rabbitpingrabbitping

1.3.0

1 of 1 See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/rabbitping :1.3.0	474c467bbf42	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,748

kubemirrorraczylo-com

0.10.19

1 of 1 See more

kubemirror raczylo-com 0.10.19

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/lukaszraczylo/kubemirror :0.10.19	ffd613daa7d3	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

201

rad-pluginsrad

2.4.15

5 of 5 See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.34	adc2f5d5996b	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.44	f30f0dc32205	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.71	0f5aeaf1a77e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.38	bbba62c5a110	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.50	4e25d84332fc	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,074

rada-platformrada-platform

0.1.0

2 of 7 See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.26.9
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9

Open the chart page →

24,015

cloudnative-pgradar-base

0.23.2

1 of 1 See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,390

headlampradar-base

1.0.0

1 of 1 See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.43.0	5d03caa26df7	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,012

hydraradar-base

0.48.0

1 of 1 See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,223

kratosradar-base

0.43.1

1 of 1 See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,453

kubecostradar-base

1.0.0

3 of 7 See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

11,643

management-portalradar-base

1.7.0

1 of 1 See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

4,002

nginx-gateway-fabricradar-base

2.6.6

1 of 1 See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

397

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

2,476

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,768

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

2,133

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

mysqld-exporterrafaelscone

0.0.1

1 of 1 See more

mysqld-exporter rafaelscone 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :latest	abed8dac117b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

350

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,583

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

ratecapratecap

0.1.2

2 of 3 See more

ratecap ratecap 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

802

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,061

rawfile-localpvrawfile

0.15.3

5 of 6 See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

4,787

aws-ec2-runtime-checkerrayselfs-charts

0.1.4

1 of 1 See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rayselfs/aws-ec2-runtime-checker :v0.1.5	562e5b2f81ce	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

709

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,223

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

4,958

mihomos-clusterre8ch-mihomos-cluster

0.1.1

1 of 3 See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
metacubex/mihomo :v1.19.29	e1d7dadaa936	golang.org/x/net@v0.35.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

939

reactive-policyreactive-policy

0.4.1

1 of 1 See more

reactive-policy reactive-policy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/vedooo/reactive-policy :0.4.1	d92eda891c91	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

283

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.26.9

Open the chart page →

4,550

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.26.9

Open the chart page →

5,749

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

etherpadredhat-cop

0.0.8

1 of 1 See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
etherpad/etherpad :latest	6f87beef31d9	stdlib@go1.26.4	1.26.9

Open the chart page →

484

gitops-operatorredhat-cop

0.10.6

1 of 1 See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,603

ploigosredhat-cop

0.0.9

2 of 2 See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

14,044

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	golang.org/x/net@v0.20.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

17,241

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

31,202

redirectorredirector

0.0.3

1 of 1 See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/chilledornaments/redirector :latest	94d48447d967	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

340

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9

Open the chart page →

2,713

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9	2
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.60.0 1.26.9	2
alpine/git :latest :v2.54.0	832b1cd1a271	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	2
alpine/kubectl :1.35.4	9ccd82364762	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9	2
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9	2
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.60.0 1.26.9	2
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.60.0 1.26.9	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9	2
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9	2
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.60.0 1.26.9	2
apache/doris :operator-latest	3a4422656592	golang.org/x/net@v0.33.0 stdlib@go1.23.12	0.60.0 1.26.9	2
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9	2
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9	2
apecloud/apecloud-mcp :0.1.0	94041b080510	stdlib@go1.23.7	1.26.9	2
apecloud/servicemirror :0.5.3	8c8451abf728	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.60.0 1.26.9	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.60.0 1.26.9	2
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9	2
binwiederhier/ntfy :v2.29.0	4c599cf08189	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	2
bitnami/git :latest	27e3b3fe7123	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.60.0 1.26.9	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.60.0 1.26.9	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.60.0 1.26.9	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	stdlib@go1.23.7	1.26.9	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.26.9	2
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.26.9	2
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.26.9	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9	2
bitnami/redis :latest	33a5a129cadc	stdlib@go1.26.8	1.26.9	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.60.0 1.26.9	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.60.0 1.26.9	2
bloomberg/goldpinger :3.11.5	f7c60d319150	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	2
burningalchemist/sql_exporter :0.24.9 :latest	6c554722facc	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	2
cagriekin/pg-ha :2.1.0-pg18	111ccc617ce7	golang.org/x/net@v0.58.0 stdlib@go1.25.12	0.60.0 1.26.9	2
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.60.0 1.26.9	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.60.0 1.26.9	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.5	0.60.0 1.26.9	2
chrislusf/seaweedfs :2.92	db095fe8a8d6	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.7	0.60.0 1.26.9	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.26.9	2
cloudflare/cloudflared :2022.1.3	61f608cd1123	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9	2
cloudflare/cloudflared :2026.6.1	6d91c121b803	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.26.9	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0 stdlib@go1.25.2	0.60.0 1.26.9	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.60.0 1.26.9	2