CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-549w-3rfh-p826 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

matrix-stackrock8s

0.8.1

4 of 7 See more

matrix-stack rock8s 0.8.1

4 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	stdlib@go1.19.8	1.26.9
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

11,943

resource-binding-operatorrock8s

0.1.0

1 of 1 See more

resource-binding-operator rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

1,608

reviewboardrock8s

0.0.1

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.26.9

Open the chart page →

7,210

zentaorock8s

0.0.1

1 of 1 See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
easysoft/quickon-zentao :18.5	592ad5df1f8b	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.20.3	0.60.0 1.26.9

Open the chart page →

2,459

monitoringrocketchat-server

0.0.17

7 of 9 See more

monitoring rocketchat-server 0.0.17

7 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.3	cd6e176883a9	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

10,731

jaegerromanow-helm-charts

1.7.3

1 of 1 See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.9.0	e128b9adbb29	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

2,172

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

11,062

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.60.0 1.26.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.60.0 1.26.9

Open the chart page →

14,135

argocd-certificate-refreshromholdings

0.10.8

1 of 1 See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

14,593

argo-workflowromholdings

0.1.6

1 of 1 See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

2,330

caddy-reverse-proxyromholdings

0.10.1

1 of 1 See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/caddy :latest	f2a1290d0463	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

218

calertromholdings

0.0.1

1 of 1 See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.26.9

Open the chart page →

5,789

calicoromholdings

0.1.1

4 of 4 See more

calico romholdings 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.60.0 1.26.9
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.60.0 1.26.9
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.60.0 1.26.9
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.26.9

Open the chart page →

14,877

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.60.0 1.26.9

Open the chart page →

8,067

devtron-enterpriseromholdings

48.0.0

22 of 28 See more

devtron-enterprise romholdings 48.0.0

22 of the 28 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	golang.org/x/net@v0.48.0 stdlib@go1.24.0	0.60.0 1.26.9
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.60.0 1.26.9
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.60.0 1.26.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.60.0 1.26.9
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.60.0 1.26.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.26.9
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.60.0 1.26.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.26.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.60.0 1.26.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.26.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/net@v0.28.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

89,149

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.60.0 1.26.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

7,010

devtron-logs-dumpromholdings

0.1.0

1 of 1 See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

5,886

devtron-operatorromholdings

0.23.3

10 of 11 See more

devtron-operator romholdings 0.23.3

10 of the 11 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.60.0 1.26.9
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.60.0 1.26.9
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.60.0 1.26.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.60.0 1.26.9

Open the chart page →

42,418

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

13,472

discord-alertmanagerromholdings

0.10.0

1 of 1 See more

discord-alertmanager romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.26.9

Open the chart page →

1,801

jaeger-all-in-one-opentelemetryromholdings

0.1.2

1 of 1 See more

jaeger-all-in-one-opentelemetry romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector :latest	310a800ad69e	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

217

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

2,083

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

12,195

migrantromholdings

0.0.3

1 of 1 See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	76cc2074cb66	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

362

migration-incluster-cdromholdings

0.10.0

1 of 1 See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.26.9

Open the chart page →

5,063

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

3,525

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

1,996

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.60.0 1.26.9

Open the chart page →

2,319

rommromm-helm-chart

1.5.5

1 of 3 See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :11	6422478cb8e1	stdlib@go1.24.6	1.26.9

Open the chart page →

3,740

pagesronan-pages

1.0.0

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,682

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,659

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.60.0 1.26.9

Open the chart page →

3,355

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

5,341

acme-linoderotational

1.0.4

1 of 1 See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,782

beaconrotational

0.2.0

1 of 1 See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/beacon :0.2.0	f8d8b694515a	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,492

endeavorrotational

1.4.2

2 of 2 See more

endeavor rotational 1.4.2

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/endeavor :1.4.2	1a73cb9620ef	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
rotationalio/quarterdeck :0.17.1	0fc322d2dfc5	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,988

genoarotational

1.4.0

1 of 1 See more

genoa rotational 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/genoa :1.2.0	3ab583519215	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,372

geopingrotational

1.3.2

1 of 1 See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/geoping :1.3.0	34bcb6fc3cb7	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,194

honurotational

0.5.3

1 of 1 See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/honu :0.5.0	69fd30c2e31c	stdlib@go1.25.1	1.26.9

Open the chart page →

2,800

quarterdeckrotational

0.17.1

1 of 1 See more

quarterdeck rotational 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/quarterdeck :0.17.1	0fc322d2dfc5	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,538

rotational-apirotational

1.3.1

1 of 1 See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

2,182

vanityrotational

1.2.2

1 of 1 See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rotationalio/vanity :1.2.0	d77350f69b45	stdlib@go1.25.8	1.26.9

Open the chart page →

1,699

routehub-serverroutehub-helm

1.0.1

2 of 3 See more

routehub-server routehub-helm 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.26.9
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

8,271

routr-connectroutr

0.4.3

1 of 10 See more

routr-connect routr 0.4.3

1 of the 10 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
fonoster/routr-edgeport :2.13.6	d08a8a574a50	golang.org/x/net@v0.7.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

12,567

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.26.9
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.60.0 1.26.9
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.26.9
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.26.9

Open the chart page →

11,771

noderss3

0.7.2

1 of 3 See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.26.9

Open the chart page →

6,055

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.26.9

Open the chart page →

1,800

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.26.9

Open the chart page →

1,800

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.26.9

Open the chart page →

2,648

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :7.0-jammy :7-jammy	f71f6d0913c9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	2
library/mysql :8 :8.4 :8.4.11	0744ee5ef89c	stdlib@go1.24.6	1.26.9	2
library/mysql :8.2.0	212fe73edca5	stdlib@go1.18.2	1.26.9	2
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.26.9	2
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.26.9	2
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.26.9	2
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.26.9	2
library/nats :2.12.3-alpine	88fe8e0e09d6	stdlib@go1.25.5	1.26.9	2
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.26.9	2
library/nats :2.15.0-scratch	c0d27f305460	stdlib@go1.27.1	1.27.2	2
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.26.9	2
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9	2
library/postgres :17-bookworm	3645570cccdf	stdlib@go1.24.6	1.26.9	2
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.26.9	2
library/postgres :18.3-alpine :18.3-alpine3.23	54451ecb8ab3	stdlib@go1.24.6	1.26.9	2
library/postgres :18.0	6f3e42ad37de	stdlib@go1.24.6	1.26.9	2
library/postgres :17.5	aadf2c0696f5	stdlib@go1.18.2	1.26.9	2
library/postgres :14	c2427de38f99	stdlib@go1.24.6	1.26.9	2
library/postgres :17	c6222b54873a	stdlib@go1.24.6	1.26.9	2
library/postgres :16	ca0bd484cb98	stdlib@go1.24.6	1.26.9	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.26.9	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.26.9	2
library/postgres :13-alpine	fb9065b6e3e2	stdlib@go1.24.6	1.26.9	2
library/rabbitmq :4.3.6-management :4-management	8dd6e3570dda	stdlib@go1.22.2	1.26.9	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.26.9	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.26.9	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.26.9	2
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.26.9	2
library/telegraf :1.40-alpine	6606553b5019	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	2
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0 stdlib@go1.25.10	0.60.0 1.26.9	2
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9	2
library/traefik :2.4.8	eda951fd29a8	golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d stdlib@go1.16.2	0.60.0 1.26.9	2
library/traefik :2.2.8	f5af5a5ce17f	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.6	0.60.0 1.26.9	2
library/zookeeper :3.9.5	e6b279d01350	stdlib@go1.18.1	1.26.9	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	2
linuxserver/cloud9 :latest :version-1.29.2	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.60.0 1.26.9	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.60.0 1.26.9	2
localstack/localstack-pro :latest	801a3dff7f6a	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:nojsonv2	0.60.0 1.27.2	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.60.0 1.26.9	2
louislam/uptime-kuma :1.23.13	96510915e6be	golang.org/x/net@v0.19.0 stdlib@go1.19.6	0.60.0 1.26.9	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.60.0 1.26.9	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9	2
louislam/uptime-kuma :2.5.5	c74379ac4509	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9	2
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	golang.org/x/net@v0.7.0 stdlib@go1.21.1	0.60.0 1.26.9	2
maxrocketinternet/datadog-controller :0.1	a867315facf8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	stdlib@go1.14	1.26.9	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	golang.org/x/net@v0.43.0 stdlib@go1.25.5	0.60.0 1.26.9	2