CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-549w-3rfh-p826 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

27,492

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

6,126

qubivaqubiva

0.3.2

2 of 3 See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

8,369

ingress-nginxquench-ingress-nginx

0.0.11

1 of 1 See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

549

ingress-stackquench-ingress-stack

0.0.6

1 of 5 See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

786

versitygwquench-versitygw

0.0.2

1 of 1 See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned	783ea36fcc7a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

2,421

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.26.9

Open the chart page →

9,202

rabbitmq-cluster-operatorrabbitmq-cluster-operator

4.8.0

2 of 2 See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :4.8	23d259e0c93e	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :4.8	d13e3304bda8	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,281

rabbitpingrabbitping

1.3.0

1 of 1 See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/rabbitping :1.3.0	474c467bbf42	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,748

kubemirrorraczylo-com

0.10.19

1 of 1 See more

kubemirror raczylo-com 0.10.19

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/lukaszraczylo/kubemirror :0.10.19	ffd613daa7d3	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

201

rad-pluginsrad

2.4.15

5 of 5 See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.34	adc2f5d5996b	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.44	f30f0dc32205	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.71	0f5aeaf1a77e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.38	bbba62c5a110	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.50	4e25d84332fc	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,074

rada-platformrada-platform

0.1.0

2 of 7 See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.26.9
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.26.9

Open the chart page →

24,015

cloudnative-pgradar-base

0.23.2

1 of 1 See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,390

headlampradar-base

1.0.0

1 of 1 See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.43.0	5d03caa26df7	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,012

hydraradar-base

0.48.0

1 of 1 See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,223

kratosradar-base

0.43.1

1 of 1 See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,453

kubecostradar-base

1.0.0

3 of 7 See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

11,643

management-portalradar-base

1.7.0

1 of 1 See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

4,002

nginx-gateway-fabricradar-base

2.6.6

1 of 1 See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

397

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

2,476

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,768

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

2,133

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,002

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

884

mysqld-exporterrafaelscone

0.0.1

1 of 1 See more

mysqld-exporter rafaelscone 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :latest	abed8dac117b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

350

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,583

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

ratecapratecap

0.1.2

2 of 3 See more

ratecap ratecap 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

802

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,061

rawfile-localpvrawfile

0.15.3

5 of 6 See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

4,787

aws-ec2-runtime-checkerrayselfs-charts

0.1.4

1 of 1 See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rayselfs/aws-ec2-runtime-checker :v0.1.5	562e5b2f81ce	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

709

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,223

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

4,958

mihomos-clusterre8ch-mihomos-cluster

0.1.1

1 of 3 See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
metacubex/mihomo :v1.19.29	e1d7dadaa936	golang.org/x/net@v0.35.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

939

reactive-policyreactive-policy

0.4.1

1 of 1 See more

reactive-policy reactive-policy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/vedooo/reactive-policy :0.4.1	d92eda891c91	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

283

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.26.9

Open the chart page →

4,550

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.26.9

Open the chart page →

5,749

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

16,573

etherpadredhat-cop

0.0.8

1 of 1 See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
etherpad/etherpad :latest	6f87beef31d9	stdlib@go1.26.4	1.26.9

Open the chart page →

484

gitops-operatorredhat-cop

0.10.6

1 of 1 See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,603

ploigosredhat-cop

0.0.9

2 of 2 See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

14,044

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	golang.org/x/net@v0.20.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

17,241

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

31,202

redirectorredirector

0.0.3

1 of 1 See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/chilledornaments/redirector :latest	94d48447d967	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

340

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9

Open the chart page →

2,713

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9	2
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9	2
ghcr.io/browserless/chromium :v2.57.0	6bac628b3d82	stdlib@go1.26.7	1.26.9	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	2
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0 stdlib@go1.24.7	0.60.0 1.26.9	2
ghcr.io/cerbos/cerbos :0.56.0	540643bc67ba	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.19.7	0.60.0 1.26.9	2
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9	2
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.60.0 1.26.9	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9	2
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.15	0.60.0 1.26.9	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.26.9	2
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.26.9	2
ghcr.io/dellnoantechnp/bitnami/redis :8.4.0	29064423c369	stdlib@go1.25.6	1.26.9	2
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.60.0 1.26.9	2
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.60.0 1.26.9	2
ghcr.io/donkie/spoolman :0.27.0	7aba565eff77	stdlib@go1.19.8	1.26.9	2
ghcr.io/eosc-lot-1/curl-jq :8	156beafae7ca	golang.org/x/net@v0.15.0 stdlib@go1.21.10	0.60.0 1.26.9	2
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.60.0 1.26.9	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	2
ghcr.io/gotify/server :3.1.1	44fc5bbd1c06	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9	2
ghcr.io/grafana/grafana-operator :v5.25.0	bc572995823f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0 stdlib@go1.23.6	0.60.0 1.26.9	2
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	2
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	stdlib@go1.18.2	1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.4	76a2170cd0c9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.7.4	7a62bba56a7c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.3	8ce13c365c8e	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.5	d0e80b2f62fe	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/jont828/cluster-api-visualizer :v1.5.0	678ba6833297	golang.org/x/net@v0.42.0 stdlib@go1.24.11	0.60.0 1.26.9	2
ghcr.io/juanfont/headscale :0.29.4 :v0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r5	136348264b41	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9	2
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0 stdlib@go1.23.4	0.60.0 1.26.9	2
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	2
ghcr.io/krateoplatformops/installer/installer :0.6.3	a7e922ddac55	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/krateoplatformops/kubectl :1.32.0	d69cd9c163db	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/kubestash/kubestash :v0.29.0	0686b2a40280	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	2
ghcr.io/kubestash/kubestash :v0.30.0	4ff37f9863d5	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/kyverno/readiness-checker :v1.19.1	31bb42ce7f5b	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	2
ghcr.io/libredb/libredb-studio :0.18.3	7cac22734b0f	stdlib@go1.24.4	1.26.9	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9	2