CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-549w-3rfh-p826 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-xjhf-9jv7-7x78
Trending: Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

zabbixcetic

3.1.3

3 of 5 See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :14	c2427de38f99	stdlib@go1.24.6	1.26.9
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.60.0 1.26.9
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9

Open the chart page →

37,580

chatwootchatwoot

2.0.27

2 of 3 See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.26.9
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.26.9

Open the chart page →

8,839

plugin-barman-cloudcloudnative-pg

0.8.1

1 of 1 See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud :v0.15.1	c75acad19a36	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

210

csi-driver-smbcsi-driver-smb

1.20.3

5 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

4,876

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,312

flux-operatorflux-operator

0.61.0

1 of 1 See more

flux-operator flux-operator 0.61.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/controlplaneio-fluxcd/flux-operator :v0.61.0	71041d9fff7f	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

212

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.26.9

Open the chart page →

9,064

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.26.9

Open the chart page →

7,627

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
google/cloud-sdk :alpine	ef78619c8239	stdlib@go1.26.6	1.26.9

Open the chart page →

9,033

hpe-csi-driverhpe-storage

3.3.0

13 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

13 of the 14 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

5,267

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

3,119

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

2,044

trident-operatornetapp-trident

100.2606.2

1 of 1 See more

trident-operator netapp-trident 100.2606.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netapp/trident-operator :26.06.2	4cef5a737bcf	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

ngrok-operatorngrok

0.24.0

2 of 2 See more

ngrok-operator ngrok 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
ngrok/ngrok-operator :0.22.0	db8e6fecc52c	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

596

openbaoopenbao

0.30.1

2 of 2 See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/openbao/openbao :2.7.0	71156a1c6623	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,861

prometheus-snmp-exporterprometheus-community

9.18.1

1 of 1 See more

prometheus-snmp-exporter prometheus-community 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

933

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

6,981

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

3,185

trivytrivy-operator

0.27.0

1 of 1 See more

trivy trivy-operator 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.75.0	af6acf9a6b85	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

312

zotzot

0.1.128

1 of 1 See more

zot zot 0.1.128

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.22	96cda11459ce	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

571

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

14,353

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

3,829

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

9,237

netbirdjaconi

0.15.1

4 of 4 See more

netbird jaconi 0.15.1

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/golang :latest	e0174e51e812	stdlib@go1.27.1	1.27.2
netbirdio/management :0.45.1	0c9994b393ea	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/relay :0.45.1	872e3add0e1e	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/signal :0.45.1	46ce5a45538f	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

10,554

k8upk8up

4.10.0

1 of 1 See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.16.0	29458113b8b6	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,092

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

1,092

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

6,377

localstacklocalstack

0.7.1

1 of 1 See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
localstack/localstack-pro :latest	801a3dff7f6a	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:nojsonv2	0.60.0 1.27.2

Open the chart page →

2,267

gotenbergmaikumori

1.25.0

1 of 1 See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

15,373

renovate-operatormogenius

6.5.1

1 See more

renovate-operator mogenius 6.5.1

1 container image this version deploys carries CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

—

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	golang.org/x/net@v0.40.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

7,316

oneuptimeoneuptime

14.0.48

1 See more

oneuptime oneuptime 14.0.48

1 container image this version deploys carries CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

—

open-feature-operatoropen-feature-operator

0.9.3

1 of 1 See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

391

postgres-operatorpostgres-operator

2.0.3

1 of 1 See more

postgres-operator postgres-operator 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

281

telepresence-osstelepresence-oss

2.32.2

1 of 2 See more

telepresence-oss telepresence-oss 2.32.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/telepresenceio/tel2 :2.32.2	96f5a0f413b1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,001

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.26.9

Open the chart page →

7,390

karmawiremind

2.13.1

1 of 1 See more

karma wiremind 2.13.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.131	90a10c5c6793	stdlib@go1.26.3	1.26.9

Open the chart page →

361

yugabyteyugabyte

2026.1.2

1 of 1 See more

yugabyte yugabyte 2026.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

437

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,752

autheliaauthelia

0.11.22

1 of 1 See more

authelia authelia 0.11.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

8,172

camel-kcamel-k

2.11.0

1 of 1 See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/camel-k :2.11.0	d173e7efe258	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,858

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,742

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

2,352

flagsmithflagsmith

0.83.0

1 of 4 See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,493

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

5,415

beylagrafana

1.16.11

1 of 1 See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/beyla :3.32.0	3ff0f7cf2bbf	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

426

helm-dashboardkomodor

2.0.7

1 of 1 See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
komodorio/helm-dashboard :2.1.3	258a9044e658	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

668

kube-prometheus-stackkube-prometheus-stack-oci

92.3.0

5 of 6 See more

kube-prometheus-stack kube-prometheus-stack-oci 92.3.0

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,434

kubescape-operatorkubescape

1.40.5

6 of 6 See more

kubescape-operator kubescape 1.40.5

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/kubescape/http-request :v0.2.23	4ff502a33423	stdlib@go1.26.7	1.26.9
quay.io/kubescape/kubescape :v4.0.14	418fa941ecc0	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/kubescape/kubevuln :v0.3.430	9bed2f723ea0	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kubescape/node-agent :v0.3.219	2044ed750f5e	golang.org/x/net@v0.56.0 stdlib@go1.25.14	0.60.0 1.26.9
quay.io/kubescape/operator :v0.2.172	1ddcd2788e1e	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
quay.io/kubescape/storage :v0.0.348	6333d7845589	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

2,414

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9	1
ghcr.io/stenic/well-known :1.11.0	ae85f257a10f	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/storax/kubedoom :0.6.0	851ba8c80b93	stdlib@go1.17.6	1.26.9	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0 stdlib@go1.22.1	0.60.0 1.26.9	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.60.0 1.26.9	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.24.5	0.60.0 1.26.9	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.60.0 1.26.9	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9	1
ghcr.io/strrl/supabase-operator :2026.7.25	87d083ab8980	golang.org/x/net@v0.46.0 stdlib@go1.25.12	0.60.0 1.26.9	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	golang.org/x/net@v0.46.0 stdlib@go1.25.11	0.60.0 1.26.9	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/net@v0.28.0 stdlib@go1.21.13	0.60.0 1.26.9	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/net@v0.22.0 stdlib@go1.22.5	0.60.0 1.26.9	1
ghcr.io/supabase-community/supabase-operator :v0.1.3	253a6dcbf4f0	golang.org/x/net@v0.47.0 stdlib@go1.25.12	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.60.0 1.26.9	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	golang.org/x/net@v0.19.0 stdlib@go1.20.14	0.60.0 1.26.9	1
ghcr.io/syself/hetzner-cloud-controller-manager :v2.0.7	7d4a5e29c387	golang.org/x/net@v0.49.0 stdlib@go1.24.5	0.60.0 1.26.9	1
ghcr.io/taekjaskyli/kafka-canary :0.9.0	16b91402a5ca	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/net@v0.1.0 stdlib@go1.19.2-ts3fd24dee31	0.60.0 1.26.9	1
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	stdlib@go1.23.4	1.26.9	1
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	golang.org/x/net@v0.42.0 stdlib@go1.25.1	0.60.0 1.26.9	1
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.26.9	1
ghcr.io/tarampampam/error-pages :4.2.6	87434ca4b646	stdlib@go1.27.1	1.27.2	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	stdlib@go1.27.0	1.27.2	1
ghcr.io/tarampampam/webhook-tester :2.3.0	85818267b450	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/taskmedia/kubectl-gpg-ncftp :main	b0c678260457	golang.org/x/net@v0.23.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9	1
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
ghcr.io/telepresenceio/tel2 :2.32.2	96f5a0f413b1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/terminus-io/enforcer :v1.1.0	f21b905610d6	golang.org/x/net@v0.51.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/theduffman85/crowdsec-web-ui :2026.10.2	c334d8fdf7a8	stdlib@go1.24.4	1.26.9	1
ghcr.io/thereisnotime/warpgate-operator :0.4.15	e3ce6905a7a4	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ghcr.io/thetredev/steamcmd :srcds-20240309	dbb0f042cb31	stdlib@go1.18.2	1.26.9	1
ghcr.io/thm-mni-ii/fbs-core :v2.0.9	18e54463756e	stdlib@go1.26.7	1.26.9	1
ghcr.io/thm-mni-ii/fbs-core-web :v2.0.9	daeca3604040	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/thm-mni-ii/fbs-identity-service :v2.0.9	45929f5c1a12	stdlib@go1.26.7	1.26.9	1
ghcr.io/thm-mni-ii/fbs-qcm-frontend :v2.0.9	083d81d517e7	stdlib@go1.20.12	1.26.9	1
ghcr.io/thm-mni-ii/fbs-runner :v2.0.9	ffaf49a4d687	golang.org/x/net@v0.8.0 stdlib@go1.20.11	0.60.0 1.26.9	1