StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,117 indexed, latest versions
Container images
6,152
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,105
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,915
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

3,054
rke2-canalrke2-charts3.13.32 of 2See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.60.0
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.60.0

Open the chart page →

7,404
rke2-ingress-nginxrke2-charts4.15.1122 of 2See more

rke2-ingress-nginx rke2-charts 4.15.112

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
golang.org/x/net@v0.52.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

1,727
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.60.0
1.26.9

Open the chart page →

2,499
hcloud-fip-controllerrlex0.2.51 of 1See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa
stdlib@go1.15.3
0.60.0
1.26.9

Open the chart page →

4,206
prometheus-webhook-dingtalkrlex0.0.31 of 1See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
stdlib@go1.13.5
1.26.9

Open the chart page →

3,024
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
stdlib@go1.22.6
1.26.9

Open the chart page →

10,864
kimai2robjuz5.0.151 of 2See more

kimai2 robjuz 5.0.15

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
stdlib@go1.19.7
1.26.9

Open the chart page →

5,670
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f
stdlib@go1.17.6
0.60.0
1.26.9

Open the chart page →

3,951
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.60.0
1.26.9

Open the chart page →

2,698
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.60.0
1.26.9

Open the chart page →

2,643
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
golang.org/x/net@v0.40.0
stdlib@go1.24.5
0.60.0
1.26.9

Open the chart page →

3,441
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.26.9

Open the chart page →

8,643
node-exporterromanow-helm-chartsVerified publisher1.7.11 of 1See more

node-exporter romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.60.0
1.26.9

Open the chart page →

1,433
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:15724292da1f2e
stdlib@go1.24.6
1.26.9

Open the chart page →

1,924
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/net@v0.24.0
stdlib@go1.22.3
0.60.0
1.26.9

Open the chart page →

1,756
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.26.9
timescale/timescaledb-ha:pg16e9f34d8dd276
golang.org/x/net@v0.26.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

15,352
rstudio-pmrstudioVerified publisher0.20.61 of 1See more

rstudio-pm rstudio 0.20.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04641d5874ccd3
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

35,179
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
stdlib@go1.24.4
1.26.9

Open the chart page →

4,860
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

34,408
s3-encryption-gateways3-encryption-gatewayVerified publisher0.12.31 of 1See more

s3-encryption-gateway s3-encryption-gateway 0.12.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cloud37io/s3-encryption-gateway:0.12.310e791e98b62
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

225
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17
0.60.0
1.26.9

Open the chart page →

3,154
conference-appsalaboy1.0.04 of 7See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
stdlib@go1.20.1
1.26.9
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
stdlib@go1.20.1
1.26.9
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned1ff7c90845e4
stdlib@go1.20.1
1.26.9
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
stdlib@go1.20.1
1.26.9

Open the chart page →

14,225
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
golang.org/x/net@v0.11.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

2,483
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

45,192
scale-sentryscale-sentryVerified publisher0.5.01 of 1See more

scale-sentry scale-sentry 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/scale-sentry:0.5.017a54e1f7c0b
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

209
scaleway-csiscaleway-charts0.2.28 of 8See more

scaleway-csi scaleway-charts 0.2.2

8 of the 8 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
scaleway/scaleway-csi:v0.3.411135998e31c
golang.org/x/net@v0.42.0
stdlib@go1.24.12
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

7,800
teamcityscalified-teamcityVerified publisher2026.2.11 of 3See more

teamcity scalified-teamcity 2026.2.1

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.9

Open the chart page →

1,806
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
stdlib@go1.25.12
1.26.9
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
golang.org/x/net@v0.56.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

5,779
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

2,865
scienceboxsciencebox0.0.72 of 17See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
golang.org/x/net@v0.0.0-20220325170049-de3da57026de
stdlib@go1.17.3
0.60.0
1.26.9
osixia/openldap:1.5.018742e9c449c
golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb
stdlib@go1.15.5
0.60.0
1.26.9

Open the chart page →

9,671
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9

Open the chart page →

4,915
seatsurfingseatsurfing0.1.21 of 1See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
seatsurfing/backend:1.119.39952e80048b0
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

970
secrethorsecrethor1.1.21 of 1See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bonovoo/secrethor:1.1.2bb93b68fcd17
golang.org/x/net@v0.38.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

1,039
secrets-store-csi-driver-provider-infisicalsecrets-store-csi-driver-provider-infisicalVerified publisher1.1.41 of 1See more

secrets-store-csi-driver-provider-infisical secrets-store-csi-driver-provider-infisical 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gidoichi/secrets-store-csi-driver-provider-infisical:v1.1.42dd5322a0610
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

582
securosecuroVerified publisher0.16.41See more

securo securo 0.16.4

1 container image this version deploys carries CVE-2026-78660.

Container imageDigestPackageFixed in
pgvector/pgvector:pg167b822b0aac60
stdlib@go1.24.6
1.26.9

Open the chart page →

—
selenosis-deployselenosisVerified publisher2.1.44 of 4See more

selenosis-deploy selenosis 2.1.4

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
alcounit/browser-controller:v1.0.1c64222f9e663
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
alcounit/browser-service:v0.0.94bd10defc324
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
alcounit/browser-ui:v1.0.0668e7aee5e5c
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
alcounit/selenosis:v2.1.2f0964cda6da6
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9

Open the chart page →

3,542
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.26.9

Open the chart page →

6,252
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.9
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.26.9
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
stdlib@go1.19.8
1.26.9

Open the chart page →

20,792
sentry-operatorsentry-operator1.2.51 of 1See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/agjmills/sentry-operator:v1.2.500389ef6a00e
golang.org/x/net@v0.30.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

979
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

2,235
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.60.0
1.26.9
dserio83/velero-ui:0.3.1b4e1ec6664d3
stdlib@go1.23.7
1.26.9

Open the chart page →

13,624
session-manager-agentsession-manager-agent1.9.01 of 2See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent:1.9.0b9f23db99051
golang.org/x/net@v0.38.0
stdlib@go1.23.11
0.60.0
1.26.9

Open the chart page →

978
session-manager-serversession-manager-server0.1.0-gfu-dev1 of 1See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
golang.org/x/net@v0.35.0
stdlib@go1.23.7
0.60.0
1.26.9

Open the chart page →

1,327
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9

Open the chart page →

1,997
clickhousesignoz24.1.183 of 3See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
golang.org/x/net@v0.7.0
stdlib@go1.19.10
0.60.0
1.26.9
altinity/metrics-exporter:0.21.2df3d57215356
golang.org/x/net@v0.7.0
stdlib@go1.19.10
0.60.0
1.26.9
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.9

Open the chart page →

6,944
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.17.9
0.60.0
1.26.9
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.17.9
0.60.0
1.26.9

Open the chart page →

7,548
rekor-tilessigstoreVerified publisher1.2.61 of 1See more

rekor-tiles sigstore 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor-tiles/gcp:v2.2.1e401cfe033c9
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

693
scaffoldsigstoreVerified publisher0.6.11711 of 15See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.9
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.9
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
golang.org/x/net@v0.57.0
stdlib@go1.26.4
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned4d64dac937e2
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33e591f98e3899
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.334c845ced03d8
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3324293fa1ed50
golang.org/x/net@v0.47.0
stdlib@go1.25.0
0.60.0
1.26.9
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
golang.org/x/net@v0.59.0
stdlib@go1.27.0
0.60.0
1.27.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
golang.org/x/net@v0.59.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

12,089
octopusdeploysimcube1.0.211 of 2See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

226

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/opnpulse/prom-label-proxy:v2026.9.2247afd6372838
golang.org/x/net@v0.52.0
stdlib@go1.25.14
0.60.0
1.26.9
1
ghcr.io/opnpulse/tenant-operator:v0.0.38fe9b4157ed2
golang.org/x/net@v0.54.0
stdlib@go1.25.14
0.60.0
1.26.9
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
golang.org/x/net@v0.49.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/orkspace/orkestra:0.7.1863356a41fbef
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/orkspace/orkestra-cc:0.7.18ebb9654ac4d2
stdlib@go1.26.6
1.26.9
1
ghcr.io/oscrx/tlsa-dnsendpoint-controllerddd9b71b2d98
golang.org/x/net@v0.58.0
0.60.0
1
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
golang.org/x/net@v0.24.0
stdlib@go1.21.12
0.60.0
1.26.9
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/oxidecomputer/cluster-api-provider-oxide:0.2.37b05d3bbfbfa
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/p10node/p10logs-agent:1.1.44bc72bd8ff5a
stdlib@go1.26.8
1.26.9
1
ghcr.io/p10node/p10logs-hub:1.1.44385afd18845
stdlib@go1.26.8
1.26.9
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.15.12
0.60.0
1.26.9
1
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.9
1
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
golang.org/x/net@v0.55.0
stdlib@go1.25.0
0.60.0
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.26.9
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
stdlib@go1.20.7
1.26.9
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.60.0
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
golang.org/x/net@v0.19.0
stdlib@go1.21.4
0.60.0
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
golang.org/x/net@v0.43.0
stdlib@go1.24.7
0.60.0
1.26.9
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.1e58c98b4d28a
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.26.9
1
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
golang.org/x/net@v0.45.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/peak-scale/capsule-argo-addon:0.8.064b8c5389b33
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
golang.org/x/net@v0.57.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/peimanja/artifactory_exporter:v1.16.0d3e3929a3d2b
stdlib@go1.21.13
1.26.9
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18.4
0.60.0
1.26.9
1
ghcr.io/performancecopilot/archive-analysis:latest8bb7902a3e4b
golang.org/x/net@v0.19.0
0.60.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/pgdogdev/pgdog:v0.1.6025d1908886f5
stdlib@go1.26.7
1.26.9
1
ghcr.io/phoeluga/synology-proxy-operator:0.0.9a0b74674d0e3
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/pierinho13/github-platform-operator:v0.7.9cd69de76b3d2
golang.org/x/net@v0.59.0
0.60.0
1
ghcr.io/pii-shield/pii-shield-operator:2.2.71d21a4b3683c
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
stdlib@go1.14.6
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.0b26d85c68aa8
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook:v0.12.0fbb6df9ad2af
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.