StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,341
of 18,137 indexed, latest versions
Container images
6,191
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,341 of 18,137 indexed charts deploy, on 6,191 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.9, 1.27.26,115
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,943
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,341 by stars
ChartLatestAffected imagesRadar Score
eth2-fork-monethereum-helm-chartsVerified publisher0.1.31 of 1See more

eth2-fork-mon ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ralexstokes/eth2-fork-mon:latestc0d4bbefd31f
stdlib@go1.16.7
1.26.9

Open the chart page →

2,950
ethereum-address-metrics-exporterethereum-helm-chartsVerified publisher0.2.01 of 1See more

ethereum-address-metrics-exporter ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
stdlib@go1.26.1
1.26.9

Open the chart page →

861
ethereum-metrics-exporterethereum-helm-chartsVerified publisher0.2.11 of 1See more

ethereum-metrics-exporter ethereum-helm-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
samcm/ethereum-metrics-exporter:latestdc6cedebb24b
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

329
ethereum-validator-metrics-exporterethereum-helm-chartsVerified publisher0.0.11 of 1See more

ethereum-validator-metrics-exporter ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/ethereum-validator-metrics-exporter:latest38448e9d4aef
stdlib@go1.19.10
1.26.9

Open the chart page →

1,199
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
stdlib@go1.17.13
1.26.9

Open the chart page →

2,783
execution-processorethereum-helm-chartsVerified publisher0.0.31 of 1See more

execution-processor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/execution-processor:latest5c4832e9588f
stdlib@go1.25.4
1.26.9

Open the chart page →

1,067
forkmonethereum-helm-chartsVerified publisher0.1.61 of 1See more

forkmon ethereum-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
holiman/nodemonitor:latest5cd609761065
golang.org/x/net@v0.9.0
stdlib@go1.20.3
0.60.0
1.26.9

Open the chart page →

2,457
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

2,349
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestc13eac6aada7
stdlib@go1.23.1
1.26.9

Open the chart page →

3,365
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
nethermind/nethermind:latest25f72063f6fc
stdlib@go1.26.7
1.26.9

Open the chart page →

888
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
golang.org/x/net@v0.38.0
stdlib@go1.23.11
0.60.0
1.26.9

Open the chart page →

2,018
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
golang.org/x/net@v0.43.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

2,088
slashoorethereum-helm-chartsVerified publisher0.1.01 of 1See more

slashoor ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/slashoor:latesta71967db581f
stdlib@go1.23.12
1.26.9

Open the chart page →

684
spamoorethereum-helm-chartsVerified publisher1.0.11 of 1See more

spamoor ethereum-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/spamoor:latestc8c6ab0816c4
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,327
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
golang.org/x/net@v0.38.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

1,783
stubbiesethereum-helm-chartsVerified publisher0.0.21 of 1See more

stubbies ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/stubbies:latest9f1d6aec0d04
stdlib@go1.19.8
1.26.9

Open the chart page →

1,284
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

1,472
testnet-homepageethereum-helm-chartsVerified publisher0.2.31 of 1See more

testnet-homepage ethereum-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
skylenet/ethereum-testnet-homepage:latest8698903e379f
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17.2
0.60.0
1.26.9

Open the chart page →

3,892
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
golang.org/x/net@v0.58.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

566
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
golang.org/x/net@v0.58.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

566
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latest89424dbe2d6b
golang.org/x/net@v0.58.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

566
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
consensys/web3signer:latest0a64d3b00613
stdlib@go1.26.7
1.26.9

Open the chart page →

758
xatuethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-cannonethereum-helm-chartsVerified publisher0.2.21 of 1See more

xatu-cannon ethereum-helm-charts 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.60.0
1.26.9

Open the chart page →

1,781
xatu-cl-mimicryethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-cl-mimicry ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethpandaops/xatu:latestef8eb43af9bb
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

669
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
golang.org/x/net@v0.25.0
stdlib@go1.22.7
0.60.0
1.26.9

Open the chart page →

4,290
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste3bc0da9ffde
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

2,033
ethexporterethersphereVerified publisher0.3.01 of 1See more

ethexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
darkobas/ethexporter:latest62e6464491ba
stdlib@go1.19.1
1.26.9

Open the chart page →

3,954
ethproxyethersphereVerified publisher0.2.01 of 1See more

ethproxy ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethersphere/ethproxy:latest3a8a3926caa2
stdlib@go1.18.7
1.26.9

Open the chart page →

2,249
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.186d6d12a40465
golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f
stdlib@go1.18.2
0.60.0
1.26.9

Open the chart page →

6,084
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
stdlib@go1.18.2
1.26.9

Open the chart page →

4,339
tokenexporterethersphereVerified publisher0.3.01 of 1See more

tokenexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
darkobas/tokenexporter:latestf26e016a9d7e
stdlib@go1.27.1
1.27.2

Open the chart page →

3,392
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
golang.org/x/net@v0.38.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

880
snyk-farcaster-agenteugen1.0.11 of 1See more

snyk-farcaster-agent eugen 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
probely/farcaster-onprem-agent:v3741b34e8166f
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

1,624
whatsmyipeugen1.3.21 of 1See more

whatsmyip eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/eugenmayer/whatsmyip:0.0.14b6700cc0e2d
stdlib@go1.22.1
1.26.9

Open the chart page →

970
whoamieugen1.0.31 of 1See more

whoami eugen 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
traefik/whoami:v1.101699d99cb4b9
stdlib@go1.23.5
1.26.9

Open the chart page →

760
whoami-tlseugen0.1.31 of 1See more

whoami-tls eugen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/eugenmayer/whoami-tls:0.1.0477be2d05aba
stdlib@go1.24.1
1.26.9

Open the chart page →

759
evcc-kubernetesevcc-kubernetesVerified publisher1.7.111 of 1See more

evcc-kubernetes evcc-kubernetes 1.7.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
evcc/evcc:0.317.1c50cd4f83c22
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

736
evicted-pod-reaperevicted-pod-reaper0.1.01 of 1See more

evicted-pod-reaper evicted-pod-reaper 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
public.ecr.aws/kyos/evicted-pod-reaper:1.0.0b9d047442ce2
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

867
eviction-guardeviction-guard0.2.31 of 1See more

eviction-guard eviction-guard 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/whitemug/eviction-guard:0.2.3b511e913c5c4
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

209
domain_exporterevilgn0me0.1.41 of 1See more

domain_exporter evilgn0me 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
caarlos0/domain_exporter:v1.23.0d11dec138900
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.60.0
1.26.9

Open the chart page →

1,942
ingressmonitorcontrollerevilgn0me0.0.51 of 1See more

ingressmonitorcontroller evilgn0me 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

998

Container images carrying it

6,191 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

No deployed image carries CVE-2026-78660.

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.