CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,373; of 18,117 indexed, latest versions
Container images: 6,208; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,150
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,957
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars

Chart

Latest

Affected images

Radar Score

akto-mini-runtime-shaakto

0.7.23

1 of 3 See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinned	d20bd62f0182	stdlib@go1.25.4	1.26.9

Open the chart page →

4,181

akto-mini-testingakto

1.46.1

3 of 5 See more

akto-mini-testing akto 1.46.1

3 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.75.1_local	8eff42336169	stdlib@go1.26.7	1.26.9
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.26.9
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

6,146

akto-mini-testing-kafkaakto

1.42.1

1 of 5 See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

7,780

akto-mrs-runtime-combinedakto

0.0.2

1 of 2 See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.1.0-1-ubi9	9026dbbf280d	stdlib@go1.24.6	1.26.9

Open the chart page →

2,587

akto-protectionakto

0.1.0

1 of 4 See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

12,630

akto-regional-setupakto

1.4.11

4 of 9 See more

akto-regional-setup akto 1.4.11

4 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aktosecurity/guardrails-service :2.40.8	75f8d87ec4d9	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
aktosecurity/mini-runtime :1.72.15	498e3e35ecc2	stdlib@go1.26.5	1.26.9
public.ecr.aws/aktosecurity/akto-threat-detection :1.18.7	55b1bd20ef02	stdlib@go1.26.7	1.26.9
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2	8e01c0305844	stdlib@go1.26.4	1.26.9

Open the chart page →

32,859

akto-runtimeakto

0.1.8

2 of 2 See more

akto-runtime akto 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :latest	6b75164ae737	stdlib@go1.26.7	1.26.9
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.26.9

Open the chart page →

1,935

akto-source-code-analyserakto

0.1.5

1 of 3 See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	stdlib@go1.22.5	1.26.9

Open the chart page →

6,223

akto-testing-db-layerakto

1.42.17

1 of 2 See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

41,721

akto-threat-backendakto

0.1.5

2 of 2 See more

akto-threat-backend akto 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aktosecurity/akto-threat-detection-backend :latest	d9d0e7c78578	stdlib@go1.26.7	1.26.9
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.26.9

Open the chart page →

2,011

akto-threat-clientakto

0.2.0

2 of 2 See more

akto-threat-client akto 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-threat-detection :latest	f14d68a2b1cf	stdlib@go1.26.7	1.26.9
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.26.9

Open the chart page →

2,042

api-gateway-loggingakto

0.1.2

1 of 1 See more

api-gateway-logging akto 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aktosecurity/mirror-api-logging :api-gateway-logging-openapi	12ed2544756f	stdlib@go1.23.3	1.26.9

Open the chart page →

828

browserlessalekc

1.3.0

1 of 1 See more

browserless alekc 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chrome :v2.57.0	f4fcb054396a	stdlib@go1.26.7	1.26.9

Open the chart page →

1,494

cliproxyapialekc

1.0.11

1 of 1 See more

cliproxyapi alekc 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eceasy/cli-proxy-api :v8.0.27	b7cf456bf6ef	golang.org/x/net@v0.57.0	0.60.0

Open the chart page →

1,286

gitlab-runner-operatoralekc

2.5.2

1 of 2 See more

gitlab-runner-operator alekc 2.5.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

226

gostalekc

0.3.0

1 of 1 See more

gost alekc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gogost/gost :3.3.0	f7a958c45192	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

462

kpubberalekc

0.0.4

1 of 1 See more

kpubber alekc 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alekc/kpubber :v0.0.2	a462d5797e14	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.60.0 1.26.9

Open the chart page →

3,347

plexalekc

2.10.1

1 of 1 See more

plex alekc 2.10.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
linuxserver/plex :1.43.4	06e07af2851e	stdlib@go1.26.7	1.26.9

Open the chart page →

731

rabbitmq-cluster-operatoralekc

2.9.0

1 of 1 See more

rabbitmq-cluster-operator alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rabbitmqoperator/cluster-operator :2.19.2	840be4bad78e	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

645

smokeping-exporteralekc

0.3.0

1 of 1 See more

smokeping-exporter alekc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/superq/smokeping-prober :v0.12.0	2524b895bdae	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

585

valkey-operatoralekc

0.4.0

1 of 1 See more

valkey-operator alekc 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9

Open the chart page →

778

vault-operatoralekc

1.26.2

1 of 1 See more

vault-operator alekc 1.26.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/bank-vaults/vault-operator :v1.24.1	b5529976f0f6	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

262

alertmanager-graph-bridgealertmanager-graph-bridge

1.0.0

1 of 1 See more

alertmanager-graph-bridge alertmanager-graph-bridge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/slauger/alertmanager-graph-bridge :1.0.0	ccca112b6557	stdlib@go1.27.1	1.27.2

Open the chart page →

257

mautrix-signalalexanderbadel

0.1.1

1 of 2 See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
signald/signald :0.18.2	0ffad7ccc2eb	stdlib@go1.18.1	1.26.9

Open the chart page →

3,412

pushproxalexmorbo-pushprox

1.0.0

1 of 1 See more

pushprox alexmorbo-pushprox 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prometheuscommunity/pushprox :v0.2.0	2f32058f4fae	stdlib@go1.22.1	1.26.9

Open the chart page →

974

qbittorrentalexmorbo-qbittorrent

1.2.1

1 of 1 See more

qbittorrent alexmorbo-qbittorrent 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :36bfc606bba2064de6ede0ff2764cbb52edff70d	ba6f0b4cf6c8	golang.org/x/net@v0.17.0 stdlib@go1.20.2	0.60.0 1.26.9

Open the chart page →

1,666

quialexmorbo-qui

0.1.0

1 of 1 See more

qui alexmorbo-qui 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,111

rabbitmq-cluster-operatoralexmorbo-rabbitmq-cluster-operator

1.0.0

1 of 1 See more

rabbitmq-cluster-operator alexmorbo-rabbitmq-cluster-operator 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rabbitmqoperator/cluster-operator :2.22.5	2727b84b835a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

250

rabbitmq-messaging-topology-operatoralexmorbo-rabbitmq-messaging-topology-operator

1.0.1

1 of 1 See more

rabbitmq-messaging-topology-operator alexmorbo-rabbitmq-messaging-topology-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rabbitmqoperator/messaging-topology-operator :1.20.2	29174b668012	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

250

slskdalexmorbo-slskd

0.3.0

1 of 1 See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	stdlib@go1.22.2	1.26.9

Open the chart page →

2,429

wireguardalexpresso

0.1.7

1 of 2 See more

wireguard alexpresso 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :latest	216ca1ce9da7	golang.org/x/net@v0.47.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

754

gotifyalexvanderberkel

0.7.2

1 of 1 See more

gotify alexvanderberkel 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :3.1.1	44fc5bbd1c06	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

734

alibaba-rsocket-brokeralibaba-rsocket-broker

0.1.3

1 of 1 See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
linuxchina/alibaba-rsocket-broker :1.1.3-k8s	f758e2e567ee	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

94,086

book-serveral-masood-helm-charts

0.1.0

1 of 1 See more

book-server al-masood-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
almasood/book-server :latest	6ffac9b63cdf	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

971

gitlab-code-review-notifieralmorgv

0.1.2

1 of 2 See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.60.0 1.26.9

Open the chart page →

3,354

flux-suspension-exporteralpineworks

0.1.1

1 of 1 See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,096

flux-suspensions-exporteralpineworks

0.1.0

1 of 1 See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,096

glancealpineworks

0.1.1

1 of 1 See more

glance alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
glanceapp/glance :v0.8.4	6df86a7e8868	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,737

ipalpineworks

0.1.2

1 of 1 See more

ip alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/ip :v1.0.0	4e0d4d51f0bc	golang.org/x/net@v0.34.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,062

katalogalpineworks

0.1.2

2 of 5 See more

katalog alpineworks 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

5,929

katalog-agentalpineworks

0.1.2

1 of 1 See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,125

versitygwalpineworks

0.1.2

1 of 1 See more

versitygw alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,860

versitygw-webhook-pulsar-proxyalpineworks

0.1.1

1 of 1 See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy :v1.0.0	6e9ced773732	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,463

pagesalstom-pages-app

1.0.0

1 of 3 See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,421

alustan-helmalustan-helm

1.0.0

1 of 1 See more

alustan-helm alustan-helm 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alustan/install-argocd :1.0.0	c16c34f46ad3	golang.org/x/net@v0.19.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

2,546

amorphieamorphie

0.1.2

8 of 18 See more

amorphie amorphie 0.1.2

8 of the 18 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.60.0 1.26.9
daprio/dashboard :0.14.0	7ba5d51e5b97	golang.org/x/net@v0.6.0 stdlib@go1.19.13	0.60.0 1.26.9
daprio/injector :1.11.2	763b9b70b0c8	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.60.0 1.26.9
daprio/operator :1.11.2	c584428aa12d	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.60.0 1.26.9
daprio/placement :1.11.2	d8e1446da996	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.60.0 1.26.9
daprio/sentry :1.11.2	1f507c1a181b	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.60.0 1.26.9
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

35,296

ampsamps

0.1.9

5 of 10 See more

amps amps 0.1.9

5 of the 10 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.9.2	ff9b17b0cefe	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.5	0.60.0 1.26.9
library/nats :2.7.2-alpine	8b3fb2423a8c	stdlib@go1.17.6	1.26.9
natsio/nats-box :0.8.1	b7f9328145f4	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.6	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.6.2	ad0374303b13	stdlib@go1.15.14	1.26.9
natsio/prometheus-nats-exporter :0.9.1	4665cdc7e749	stdlib@go1.16.13	1.26.9

Open the chart page →

15,936

sliding-sync-proxyananace-charts

0.2.13

1 of 2 See more

sliding-sync-proxy ananace-charts 0.2.13

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,283

anchore-admission-controlleranchore-charts

0.9.1

1 of 2 See more

anchore-admission-controller anchore-charts 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cfssl/cfssl :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

8,687

kaianchore-charts

0.5.1

1 of 1 See more

kai anchore-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.60.0 1.26.9

Open the chart page →

2,125

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/autoscaling/vpa-updater :1.6.0	b39d1dfa19cb	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9	1
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0 stdlib@go1.20.7	0.60.0 1.26.9	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/net@v0.32.0 stdlib@go1.23.0	0.60.0 1.26.9	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
registry.k8s.io/csi-secrets-store/driver-crds :v1.6.1	cdacfdbe8966	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.60.0 1.26.9	1
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.60.0 1.26.9	1
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
registry.k8s.io/descheduler/descheduler :v0.37.0	88deef34ff5c	golang.org/x/net@v0.58.0 stdlib@go1.26.0	0.60.0 1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0 stdlib@go1.21.7	0.60.0 1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/net@v0.46.0 stdlib@go1.24.8	0.60.0 1.26.9	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	golang.org/x/net@v0.17.0 stdlib@go1.22.3	0.60.0 1.26.9	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9	1
registry.k8s.io/external-dns/external-dns :v0.23.0	1854499e2b08	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2	1
registry.k8s.io/external-dns/external-dns :v0.22.0	5fdcaf7deb5c	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.60.0 1.26.9	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	stdlib@go1.25.1	1.26.9	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.2	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	golang.org/x/net@v0.10.0 stdlib@go1.20.1	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	golang.org/x/net@v0.8.0 stdlib@go1.20.1	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.2	050a34002d5b	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	golang.org/x/net@v0.21.0 stdlib@go1.21.6	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.0	aaafd456bda1	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.1	e63459ec5965	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.60.0 1.26.9	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9	1
registry.k8s.io/kro/kro :v0.9.4	eaf9fbaddd9d	golang.org/x/net@v0.58.0 stdlib@go1.26.3	0.60.0 1.26.9	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9	1
registry.k8s.io/kubectl :1.33.4	261a9ed843eb	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9	1
registry.k8s.io/kubectl :v1.32.7	3c5268158974	golang.org/x/net@v0.30.0 stdlib@go1.23.10	0.60.0 1.26.9	1
registry.k8s.io/kubectl :v1.35.9	436cbaa8a019	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1