StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,117 indexed, latest versions
Container images
6,152
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,105
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,915
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
calicodevtron0.1.14 of 4See more

calico devtron 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.15.2
0.60.0
1.26.9
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.15.2
0.60.0
1.26.9
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.15.2
0.60.0
1.26.9
quay.io/devtron/calico-networking:pod2daemon-flexvol-v3.19.1c1f36b6e18e0
stdlib@go1.15.2
1.26.9

Open the chart page →

14,907
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.6
0.60.0
1.26.9

Open the chart page →

8,075
discord-alertmanagerdevtron-labs0.10.01 of 1See more

discord-alertmanager devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/devtron/discord-alertmanager:ceceb475-65-35203586419ca31
stdlib@go1.18.1
1.26.9

Open the chart page →

1,809
dex-serverdex-server1.19.12 of 3See more

dex-server dex-server 1.19.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
golang.org/x/net@v0.24.0
stdlib@go1.21.6
0.60.0
1.26.9
public.ecr.aws/cloudnatix/llmariner/database-creator:1.19.162375abc3c56
stdlib@go1.23.12
1.26.9

Open the chart page →

3,357
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

9,890
matomodigitalist-open-cloud-matomo12.0.211 of 3See more

matomo digitalist-open-cloud-matomo 12.0.21

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
hipages/php-fpm_exporter:2.2.09b5be9d3d955
stdlib@go1.17.10
1.26.9

Open the chart page →

3,657
directusdirectus-io2.1.03 of 3See more

directus directus-io 2.1.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
stdlib@go1.24.6
1.26.9
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.9
directus/directus:12.0.29c8470ea465c
stdlib@go1.23.12
1.26.9

Open the chart page →

9,943
alertmanager-ntfydjjudas21Verified publisher0.1.21 of 1See more

alertmanager-ntfy djjudas21 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/alexbakker/alertmanager-ntfy:1.0.12f4db8064595
golang.org/x/net@v0.41.0
stdlib@go1.24.4
0.60.0
1.26.9

Open the chart page →

1,146
dkim-managerdkim-managerVerified publisher0.2.01 of 1See more

dkim-manager dkim-manager 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/hsn723/dkim-manager:1.4.00312232b31a2
golang.org/x/net@v0.50.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

716
myappdl-grafana-webappVerified publisher0.1.01 of 2See more

myapp dl-grafana-webapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
onkar17/grafana:latestaef3ebd6e24e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.1
0.60.0
1.26.9

Open the chart page →

3,743
dnation-pingdnationcloud0.1.94 of 5See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/net@v0.0.0-20201022231255-08b38378de70
stdlib@go1.15.5
0.60.0
1.26.9
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.9
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.15.2
0.60.0
1.26.9
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

15,324
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
golang.org/x/net@v0.8.0
stdlib@go1.20.4
0.60.0
1.26.9

Open the chart page →

3,376
docker-registrydocker-repository0.1.01 of 1See more

docker-registry docker-repository 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/registry:latestddf754342cfc
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

256
dockyarddockyardVerified publisher0.5.01 of 1See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
golang.org/x/net@v0.29.0
stdlib@go1.22.7
0.60.0
1.26.9

Open the chart page →

2,159
thermitedollarshaveclubOfficialVerified publisher0.1.171 of 1See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dollarshaveclub/thermite:0.0.31663cbf25fcfe
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.1
0.60.0
1.26.9

Open the chart page →

3,874
domain-lockerdomain-locker0.3.41See more

domain-locker domain-locker 0.3.4

1 container image this version deploys carries CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9

Open the chart page →

—
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
stdlib@go1.24.6
1.26.9

Open the chart page →

10,150
archerydoubanVerified publisher0.4.32 of 6See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
golang.org/x/net@v0.23.0
stdlib@go1.22.1
0.60.0
1.26.9
hhyo/archery:v1.9.11aa41843419e
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.6
0.60.0
1.26.9

Open the chart page →

7,976
karmadoubanVerified publisher1.9.21 of 1See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/prymitive/karma:v0.85d06892218680
golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420
stdlib@go1.16.3
0.60.0
1.26.9

Open the chart page →

3,362
agent-sandboxdovakiin0Verified publisher1.0.51 of 2See more

agent-sandbox dovakiin0 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v1.0.2dc700a37ecf4
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

225
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.9

Open the chart page →

77,317
dragonfly-stackdragonflyVerified publisher0.1.24 of 7See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
golang.org/x/net@v0.19.0
stdlib@go1.21.5
0.60.0
1.26.9
dragonflyoss/manager:v2.1.49c3ef7f10698d
golang.org/x/net@v0.19.0
stdlib@go1.21.1
0.60.0
1.26.9
dragonflyoss/scheduler:v2.1.49523785c77787
golang.org/x/net@v0.19.0
stdlib@go1.21.1
0.60.0
1.26.9
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
golang.org/x/net@v0.8.0
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

22,846
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
golang.org/x/net@v0.8.0
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

4,534
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
stdlib@go1.20.12
1.26.9

Open the chart page →

76,446
gaxyduyet0.1.11 of 1See more

gaxy duyet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/duyet/gaxy:latest31d658a22bd1
stdlib@go1.27.1
1.27.2

Open the chart page →

148
dyff-operatordyff-operatorVerified publisher0.24.221 of 1See more

dyff-operator dyff-operator 0.24.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-operator:0.24.227f930cdae40d
golang.org/x/net@v0.44.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

674
gethdysnixVerified publisher1.1.21 of 1See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethereum/client-go:v1.14.8886ec69b35b0
golang.org/x/net@v0.24.0
stdlib@go1.22.6
0.60.0
1.26.9

Open the chart page →

2,197
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

4,119
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mariadb:12.3.2a02fe89cb597
stdlib@go1.24.6
1.26.9

Open the chart page →

3,801
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

1,802
glideeinstackOfficialVerified publisher0.0.21 of 1See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
golang.org/x/net@v0.19.0
stdlib@go1.21.6
0.60.0
1.26.9

Open the chart page →

2,001
elaraelaraVerified publisher0.5.21 of 1See more

elara elara 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/sergeyslonimsky/elara:0.5.2a410a7ed1ee8
golang.org/x/net@v0.58.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

228
elchi-discoveryelchi1.0.01 of 1See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jhonbrownn/elchi-discovery:v1.0.08f6551ecc98c
golang.org/x/net@v0.13.0
stdlib@go1.23.1
0.60.0
1.26.9

Open the chart page →

1,189
elchi-stackelchi2.0.64 of 10See more

elchi-stack elchi 2.0.6

4 of the 10 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
library/mongo:6.0.12646902910d6a
stdlib@go1.18.2
1.26.9
otel/opentelemetry-collector-contrib:0.89.0995f17004231
golang.org/x/net@v0.18.0
stdlib@go1.21.4
0.60.0
1.26.9
victoriametrics/victoria-metrics:v1.93.577a9815d0640
golang.org/x/net@v0.15.0
stdlib@go1.21.1
0.60.0
1.26.9

Open the chart page →

17,710
navidromeemmas-chartsVerified publisher0.0.61 of 1See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
deluan/navidrome:0.50.02cf4442b0099
golang.org/x/net@v0.18.0
stdlib@go1.21.0
0.60.0
1.26.9

Open the chart page →

2,906
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.60.0
1.26.9
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
stdlib@go1.15.8
1.26.9

Open the chart page →

37,129
eoapieoapiOfficialVerified publisher0.17.31 of 7See more

eoapi eoapi 0.17.3

1 of the 7 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

4,584
nexus-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.11 of 1See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
epamedp/nexus-operator:2.11.0-MDTU-DDM-SNAPSHOT.1449a53804699
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.17.2
0.60.0
1.26.9

Open the chart page →

3,406
error-pageserror-pagesOfficialVerified publisher4.2.61 of 1See more

error-pages error-pages 4.2.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/error-pages:4.2.687434ca4b646
stdlib@go1.27.1
1.27.2

Open the chart page →

148
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stablea6aba08c21fa
stdlib@go1.26.7
1.26.9

Open the chart page →

1,001
httpbingoestahnVerified publisher0.1.11 of 1See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
mccutchen/go-httpbin:v2.2.25994403ef75b
stdlib@go1.16.2
1.26.9

Open the chart page →

2,484
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

3,857
erigonethereum-helm-chartsVerified publisher2.0.21 of 2See more

erigon ethereum-helm-charts 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
erigontech/erigon:latest28ee51ce29ec
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

1,374
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
stdlib@go1.23.12
1.26.9

Open the chart page →

2,207
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
stdlib@go1.17.13
1.26.9

Open the chart page →

4,561
ipfs-clusterethereum-helm-chartsVerified publisher0.1.143 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ipfs/ipfs-cluster:latesta83266c524f1
golang.org/x/net@v0.53.0
stdlib@go1.26.3
0.60.0
1.26.9
ipfs/kubo:latestb293923d66e4
golang.org/x/net@v0.59.0
stdlib@go1.26.5
0.60.0
1.26.9
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

6,658
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
stdlib@go1.19.8
1.26.9

Open the chart page →

13,331
evccevccVerified publisher1.0.471 of 1See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
evcc/evcc:0.300.8ddf2a25afce5
golang.org/x/net@v0.49.0
stdlib@go1.25.6
0.60.0
1.26.9

Open the chart page →

1,637
event-exporterevent-exporterVerified publisher0.1.171 of 1See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
kubestar/event-exporter:latest656606941255
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

1,863
events-exporterevents-exporter0.0.41 of 1See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.19.5
0.60.0
1.26.9

Open the chart page →

2,966

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
golang.org/x/net@v0.20.0
stdlib@go1.20.12
0.60.0
1.26.9
1
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
golang.org/x/net@v0.0.0-20220621193019-9d032be2e588
stdlib@go1.16.5
0.60.0
1.26.9
1
quay.io/argoproj/argocd:v2.10.783c86003b781
golang.org/x/net@v0.17.0
stdlib@go1.20.10
0.60.0
1.26.9
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
golang.org/x/net@v0.33.0
stdlib@go1.22.7
0.60.0
1.26.9
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
golang.org/x/net@v0.40.0
stdlib@go1.22.7
0.60.0
1.26.9
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
golang.org/x/net@v0.17.0
stdlib@go1.20.4
0.60.0
1.26.9
1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.60.0
1.26.9
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
golang.org/x/net@v0.49.0
stdlib@go1.24.11
0.60.0
1.26.9
1
quay.io/argoprojlabs/argocd-extension-metrics:v1.0.30d614816c4b7
golang.org/x/net@v0.10.0
stdlib@go1.21.11
0.60.0
1.26.9
1
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
golang.org/x/net@v0.49.0
stdlib@go1.25.10
0.60.0
1.26.9
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
golang.org/x/net@v0.0.0-20220621193019-9d032be2e588
stdlib@go1.18.4
0.60.0
1.26.9
1
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
golang.org/x/net@v0.40.0
stdlib@go1.24.9
0.60.0
1.26.9
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.60.0
1.26.9
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.12
0.60.0
1.26.9
1
quay.io/backube/snapscheduler:3.5.035ac95c51780
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.60.0
1.26.9
1
quay.io/backube/volsync:0.16.00d03a6aad575
golang.org/x/net@v0.55.0
stdlib@go1.25.11
0.60.0
1.26.9
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.18.4
0.60.0
1.26.9
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.60.0
1.26.9
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.60.0
1.26.9
1
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
golang.org/x/net@v0.21.0
stdlib@go1.21.7
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.21.18ee55a15d8b0
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.23.0a6075902738e
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9
1
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
golang.org/x/net@v0.52.0
stdlib@go1.25.9
0.60.0
1.26.9
1
quay.io/camel-tooling/camel-monitor-operator:latest6a2e094f9cc2
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.5
0.60.0
1.26.9
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.60.0
1.26.9
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
stdlib@go1.15.7
1.26.9
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
golang.org/x/net@v0.41.0
stdlib@go1.24.2
0.60.0
1.26.9
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
golang.org/x/net@v0.47.0
stdlib@go1.25.8
0.60.0
1.26.9
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.60.0
1.26.9
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
golang.org/x/net@v0.41.0
stdlib@go1.24.7
0.60.0
1.26.9
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
golang.org/x/net@v0.42.0
stdlib@go1.24.7
0.60.0
1.26.9
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
golang.org/x/net@v0.42.0
stdlib@go1.24.5
0.60.0
1.26.9
1
quay.io/cilium/operator-generic:v1.17.14773886ec9337
golang.org/x/net@v0.47.0
stdlib@go1.25.8
0.60.0
1.26.9
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
golang.org/x/net@v0.19.0
stdlib@go1.21.6
0.60.0
1.26.9
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
golang.org/x/net@v0.42.0
stdlib@go1.24.7
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.