CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.8	512bb8a21483	stdlib@go1.19.10	1.26.9
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.26.9

Open the chart page →

16,969

geo-checkergeo-checker

5.0.0

1 of 1 See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ymuski/geo-checker :5.0.0	5ba7fd8c7bdc	stdlib@go1.25.3	1.26.9

Open the chart page →

1,968

ghostfolioghostfolio

0.5.4

1 of 3 See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

3,830

gigapipegigapipe

0.3.0

1 of 1 See more

gigapipe gigapipe 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/metrico/gigapipe :v4.1.6	caeb2652ce5e	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

1,096

leantimegissilabs

1.3.0

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.21	8a16204dc96c	stdlib@go1.18.2	1.26.9

Open the chart page →

7,647

gitea-sonarqube-botgitea-sonarqube-bot

0.4.0

1 of 1 See more

gitea-sonarqube-bot gitea-sonarqube-bot 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
justusbunsi/gitea-sonarqube-bot :v0.4.0	18dd43b470d9	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,692

github-platform-operatorgithub-platform-operator

0.7.9

1 of 1 See more

github-platform-operator github-platform-operator 0.7.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/pierinho13/github-platform-operator :v0.7.9	cd69de76b3d2	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

120

github-stsgithub-sts-helm

0.1.1

1 of 1 See more

github-sts github-sts-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/depthmark/github-sts :0.1.1	29fda68298da	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

264

gitops-reversergitops-reverser

0.52.0

1 of 1 See more

gitops-reverser gitops-reverser 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/configbutler/gitops-reverser :0.52.0	a44138514b30	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

prometheus-kafka-exportergkarthiks

0.1.3

1 of 1 See more

prometheus-kafka-exporter gkarthiks 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :latest	d1014f41712d	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

temporalglasskube

0.45.2-gk.1

10 of 14 See more

temporal glasskube 0.45.2-gk.1

10 of the 14 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	golang.org/x/net@v0.27.0 stdlib@go1.22.3	0.60.0 1.26.9
temporalio/server :1.25.0	8a5798191dea	golang.org/x/net@v0.28.0 stdlib@go1.22.3	0.60.0 1.26.9
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/net@v0.28.0 stdlib@go1.22.1	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

23,334

daos-operatorgluesys

0.1.6

1 See more

daos-operator gluesys 0.1.6

1 container image this version deploys carries CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/gluesys/daos-operator :v0.1.0-rc.4	c38bd9a7691c	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

—

go-hello-world-chartgo-hello-world

1.8.3

1 of 1 See more

go-hello-world-chart go-hello-world 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/wasilak/go-hello-world :1.8.3	66d353e7693f	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,245

gomenhashaigomenhashai

1.3.4

1 of 1 See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/gomenhashai/gomenhashai :v1.3.3	6f031172a5ec	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

1,070

gorse-enterprisegorse-io

0.4.2

3 of 5 See more

gorse-enterprise gorse-io 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

6,828

gotosocialgotosocial

0.2.32

1 of 1 See more

gotosocial gotosocial 0.2.32

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
superseriousbusiness/gotosocial :0.22.1	0078ca451dda	golang.org/x/net@v0.56.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

664

meta-monitoringgrafana

1.3.0

2 of 2 See more

meta-monitoring grafana 1.3.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.4.3	06bdcbb51fc2	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.60.0 1.26.9
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.26.9

Open the chart page →

4,911

phlaregrafana

0.5.4

1 of 1 See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/phlare :0.5.1	330f990cdad9	golang.org/x/net@v0.5.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

2,894

gkograviteeio

4.12.21

1 of 1 See more

gko graviteeio 4.12.21

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
graviteeio/kubernetes-operator :4.12.21	82548747c6c5	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

324

greenkubegreenkube

0.3.0

1 of 3 See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18-alpine	77f585114c32	stdlib@go1.24.6	1.26.9

Open the chart page →

2,179

gremlingremlin

0.30.0

1 of 2 See more

gremlin gremlin 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gremlin/chao :latest	298100e062b8	golang.org/x/net@v0.56.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

376

armada-operatorgresearch

0.7.0

2 of 2 See more

armada-operator gresearch 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gresearch/armada-operator :latest	6c43743e2b2d	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9
kubebuilder/kube-rbac-proxy :v0.16.0	3c4f708c6204	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,792

carettagroundcover

0.0.16

3 of 3 See more

caretta groundcover 0.0.16

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/groundcover/caretta :v0.0.16	ed8f5118e3a4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18	0.60.0 1.26.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/groundcover/victoria-metrics :v1.85.3	80ddeb90d18d	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

9,908

ghostgroundhog2k

0.212.16

1 of 1 See more

ghost groundhog2k 0.212.16

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/ghost :6.69.0	55131b90d48c	stdlib@go1.24.6	1.26.9

Open the chart page →

2,030

growthbookgrowthbook

5.1.0

1 of 2 See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,504

IMgrycap

1.8.0

1 of 3 See more

5,155

oscargrycap

4.2.0

1 of 2 See more

oscar grycap 4.2.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/grycap/oscar :latest	1afdce33dacf	golang.org/x/net@v0.51.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

653

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	stdlib@go1.21.13	1.26.9

Open the chart page →

11,469

haproxy-unified-gatewayhaproxytech

1.2.0

1 of 1 See more

haproxy-unified-gateway haproxytech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-unified-gateway :1.0.7	b9bffe2d0fd1	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,009

boundary-controllerhashicorp

0.2.0

1 of 1 See more

boundary-controller hashicorp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/boundary-enterprise :1.0.2-ent	3a8061968ee4	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

428

boundary-workerhashicorp

0.2.0

1 of 1 See more

boundary-worker hashicorp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/boundary-enterprise :1.0.2-ent	3a8061968ee4	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

428

terraform-cloud-operatorhashicorp

2.5.0

2 of 2 See more

terraform-cloud-operator hashicorp 2.5.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/terraform-cloud-operator :2.5.0	c2f78a575a8a	golang.org/x/net@v0.24.0 stdlib@go1.22.4	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,618

hawkhawk

1.1.5

3 of 4 See more

hawk hawk 1.1.5

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.60.0 1.26.9
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.26.9
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	golang.org/x/net@v0.19.0 stdlib@go1.20.11	0.60.0 1.26.9

Open the chart page →

17,597

hcloud-cloud-controller-managerhcloud

1.39.0

1 of 1 See more

hcloud-cloud-controller-manager hcloud 1.39.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.39.0	d6fee5698759	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

322

clickstackhdx-oss-v2

1.1.1

1 of 5 See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :5.0.32-focal	3b6c281e1c08	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

5,505

guacamolehelmforge

1.5.3

2 of 5 See more

guacamole helmforge 1.5.3

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	74935e722416	stdlib@go1.24.6	1.26.9
library/postgres :17.5-bookworm	fbcea1bd13b6	stdlib@go1.18.2	1.26.9

Open the chart page →

10,735

mariadbhelmforge

2.1.2

1 of 1 See more

mariadb helmforge 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :13.0.2	f1bba652ba57	stdlib@go1.26.7	1.26.9

Open the chart page →

1,841

opencloudhelmforge

1.0.0

1 of 1 See more

opencloud helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
opencloudeu/opencloud :7.2.4	6d992ccc5f1c	golang.org/x/net@v0.55.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

1,176

uptime-kumahelmforge

1.5.15

1 of 1 See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.5	c74379ac4509	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,650

velerohelmforge

1.4.12

2 of 2 See more

velero helmforge 1.4.12

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.4	c89fb5b6d1fd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,905

uptimekumahelm-l3st86

0.1.10

1 of 1 See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.13	96510915e6be	golang.org/x/net@v0.19.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

5,451

helm-operatorhelm-operator

0.0.2

1 of 1 See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

8,358

spirehelm-spire

0.30.3

7 of 10 See more

spire helm-spire 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/oidc-discovery-provider :1.15.3	bb95f13c2b4e	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.60.0 1.26.9
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	golang.org/x/net@v0.42.0 stdlib@go1.25.3	0.60.0 1.26.9
ghcr.io/spiffe/spire-agent :1.15.3	41b0dcd8b258	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9
ghcr.io/spiffe/spire-controller-manager :0.8.0	19e418e9d7f2	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/spiffe/spire-server :1.15.3	4082f30d3e0d	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

3,949

helmuphelmup

0.1.0

1 of 3 See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/net@v0.15.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

18,913

buildbarnhermetiq-buildbarn

0.9.5

2 of 4 See more

buildbarn hermetiq-buildbarn 0.9.5

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/buildbarn/bb-scheduler :20260908T142432Z-77f7642	f627ab242890	golang.org/x/net@v0.55.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/buildbarn/bb-storage :20260908T142448Z-db62041	32ebc54b769b	golang.org/x/net@v0.55.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

700

hivemq-platform-operatorhivemq

0.2.26

1 of 1 See more

hivemq-platform-operator hivemq 0.2.26

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hivemq/hivemq-platform-operator :2.2.2	a919f990141b	stdlib@go1.26.5	1.26.9

Open the chart page →

1,481

hivemq-swarmhivemq

0.2.71

1 of 1 See more

hivemq-swarm hivemq 0.2.71

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hivemq/hivemq-swarm :4.56.0	8d5f6a6f48b0	stdlib@go1.26.7	1.26.9

Open the chart page →

735

hiverhiver

0.1.45

9 of 10 See more

hiver hiver 0.1.45

9 of the 10 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hiversh/antigravity :0.1.45-microvm	0e36d98402bc	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/browser :0.1.45-microvm	b5048c6342ce	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/claude :0.1.45-microvm	2fbf9f264498	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/codex :0.1.45-microvm	4f43130f51e5	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/controller :0.1.45	b0b85f8942c7	golang.org/x/net@v0.56.0 stdlib@go1.19.8	0.60.0 1.26.9
hiversh/copilot :0.1.45-microvm	50c07b84f298	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/node :0.1.45-alpine-microvm	836a37641941	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
hiversh/openclaw :0.1.45-microvm	958b7ebb4eb4	golang.org/x/net@v0.56.0 stdlib@go1.19.8	0.60.0 1.26.9
hiversh/python :0.1.45-3.13-alpine-microvm	63a5ae179a9f	golang.org/x/net@v0.56.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

30,787

cratedb-adapter-v2hmdmph

0.2.1

1 of 1 See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

4,130

holoinsightholoinsight

0.2.5

3 of 6 See more

holoinsight holoinsight 0.2.5

3 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
holoinsight/otelcontribcol :latest	42ba8dc3113c	golang.org/x/net@v0.8.0 stdlib@go1.19	0.60.0 1.26.9
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9
quay.io/prometheus/prometheus :latest	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

30,187

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	golang.org/x/net@v0.49.0 stdlib@go1.26.4	0.60.0 1.26.9	1
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9	1
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	golang.org/x/net@v0.48.0 stdlib@go1.25.10	0.60.0 1.26.9	1
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	golang.org/x/net@v0.48.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.60.0 1.26.9	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.60.0 1.26.9	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9	1
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	golang.org/x/net@v0.17.0 stdlib@go1.18.10	0.60.0 1.26.9	1
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.60.0 1.26.9	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-approver-policy :v0.28.0	1a955b0a5c41	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.20.0	6a620381d995	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.12.0	e0a5b06b231c	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.20.0	b9009aa6b45b	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-csi-driver-spiffe :v0.15.0	1755a3802efd	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-csi-driver-spiffe-approver :v0.15.0	5f7a9bbb95fb	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.60.0 1.26.9	1
quay.io/jetstack/cert-manager-ctl :v1.12.0	8d54fe9d0c0d	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	1