CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78660 GO-2026-6610
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmmyweather

1.3.11

1 of 7 See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

20,272

fargate-sidecar-injectormziyabo

0.1.5

1 of 1 See more

fargate-sidecar-injector mziyabo 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

2,087

haproxy-ingressn42-gateway

0.16.2

1 of 1 See more

haproxy-ingress n42-gateway 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

236

victoria-metrics-singlenaps

0.0.6

1 of 1 See more

victoria-metrics-single naps 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.34.7	b50d5c0153f9	stdlib@go1.14.1	1.26.9

Open the chart page →

2,398

pagesnarain

1.0.0

1 of 3 See more

21,310

pagesnarasimha-pages

1.0.0

1 of 3 See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,310

traefik-forward-auth-openidnas-helm-charts

1.0.1

1 of 1 See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

3,430

nats-kafkanats

0.15.4

1 of 1 See more

nats-kafka nats 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
natsio/nats-kafka :1.4.2	bb241956b0dc	golang.org/x/net@v0.18.0 stdlib@go1.20	0.60.0 1.26.9

Open the chart page →

2,579

nats-operatornats

0.8.3

1 of 1 See more

nats-operator nats 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
natsio/nats-operator :0.8.3	1261dae38389	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

3,451

account-servernatz-operator

0.9.5

1 of 1 See more

account-server natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,279

navidromenavidrome

0.2.5

1 of 1 See more

navidrome navidrome 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.41.1	fc4d8b6ad9f9	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,603

pagesnavin-brixton

1.0.0

1 of 3 See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,310

incorencsa

1.38.0

2 of 29 See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	stdlib@go1.21.10	1.26.9
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	stdlib@go1.15.8	1.26.9

Open the chart page →

19,094

jupyterhub-metricsncsa

1.3.0

5 of 5 See more

jupyterhub-metrics ncsa 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	b28bae15e219	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
migrate/migrate :latest	76cc2074cb66	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.26.9
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

4,463

uptime-kumancsa

1.7.3

1 of 1 See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.5	c74379ac4509	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,641

neo4j-reverse-proxyneo4j-helm-charts

2026.9.0

1 of 1 See more

neo4j-reverse-proxy neo4j-helm-charts 2026.9.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
neo4j/helm-charts-reverse-proxy :2026.09.0	0c6c9ee5f7dc	stdlib@go1.24.13	1.26.9

Open the chart page →

815

redisneomanexlabs

1.1.0

1 of 1 See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.26.9

Open the chart page →

2,349

neosyncneosync

0.5.41

2 of 3 See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

8,935

apineosync-api

0.5.41

1 of 1 See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

3,632

workerneosync-worker

0.5.41

1 of 1 See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

3,617

bluesky-pdsnerkho-helm-charts

0.4.2

1 of 1 See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/bluesky-social/pds :0.4.204	cbc6e3ea157d	stdlib@go1.25.6	1.26.9

Open the chart page →

3,066

core-keeper-dedicatednerkho-helm-charts

0.1.1

1 of 1 See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
escaping/core-keeper-dedicated :latest	87fa79255962	stdlib@go1.24.4	1.26.9

Open the chart page →

4,842

kubernetes-operatornetbird

0.3.1

1 of 1 See more

kubernetes-operator netbird 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netbirdio/kubernetes-operator :0.3.1	57740157b4d7	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

570

netbirdnetbird

1.9.0

3 of 4 See more

netbird netbird 1.9.0

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netbirdio/management :0.46.0	b0adc4ad4ec6	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/relay :0.46.0	d32f82514a24	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/signal :0.46.0	e8f392611152	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

8,402

netris-dpu-agentnetrisai

0.1.0

1 of 1 See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netrisai/bare-metal-dpu-agent :4.7.0.003	c271efe749d0	golang.org/x/net@v0.50.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,155

iamdnetsoc

0.6.1

1 of 2 See more

iamd netsoc 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,038

shhdnetsoc

0.1.7

1 of 1 See more

shhd netsoc 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

5,187

webspacednetsoc

0.2.8

2 of 2 See more

webspaced netsoc 0.2.8

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.60.0 1.26.9
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.16.8	0.60.0 1.26.9

Open the chart page →

7,455

neurofaceneuroface

1.4.2

1 of 3 See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
openvino/model_server :2025.2.1	1e7cd1d70cc1	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

8,986

agent-controlnewrelic

0.0.92

1 of 1 See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
newrelic/newrelic-agent-control-cli :0.48.0	1a448492b55a	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

4,774

agent-control-bootstrapnewrelic

1.8.19

1 of 1 See more

agent-control-bootstrap newrelic 1.8.19

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
newrelic/newrelic-agent-control-cli :1.25.1	88442266f192	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,026

agent-control-cdnewrelic

1.0.0

3 of 3 See more

agent-control-cd newrelic 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.5.1	274a179fd402	golang.org/x/net@v0.35.0 stdlib@go1.23.6	0.60.0 1.26.9
ghcr.io/fluxcd/helm-controller :v1.2.0	62eaa9c9a929	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9
ghcr.io/fluxcd/source-controller :v1.5.0	00cd9316a379	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

7,379

nexus-freenexus-free

1.0.3

1 of 1 See more

nexus-free nexus-free 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/fossa/postgres :17.2-1	5af45ac79f38	stdlib@go1.18.2	1.26.9

Open the chart page →

2,017

nexus-tasksnexus-tasks

2.0.0

2 of 5 See more

nexus-tasks nexus-tasks 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
ghcr.io/ashvinbambhaniya/nexus-tasks-backend :2.0.0	f80349eb018b	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

4,959

nginx-examplengrok-ingress-helm

0.3.0

1 of 2 See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
wernight/ngrok :latest	d211f29ebcfe	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.60.0 1.26.9

Open the chart page →

3,548

digikamnicholaswilde

1.0.0

1 of 1 See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.60.0 1.26.9

Open the chart page →

26,647

doublecommandernicholaswilde

1.0.2

1 of 1 See more

doublecommander nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.60.0 1.26.9

Open the chart page →

27,814

filezillanicholaswilde

1.0.1

1 of 1 See more

filezilla nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/filezilla :version-3.51.0-r1	5103cdd266ce	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

4,470

golinksnicholaswilde

1.0.0

1 of 1 See more

golinks nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/golinks :version-154c581	8e67b26324c5	stdlib@go1.16.5	1.26.9

Open the chart page →

2,099

notesnicholaswilde

1.0.0

1 of 1 See more

notes nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

2,610

olivetinnicholaswilde

1.0.2

1 of 1 See more

olivetin nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/olivetin :version-2021-07-19	e1d5c8a01008	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

2,800

podgrabnicholaswilde

0.1.0

1 of 1 See more

podgrab nicholaswilde 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

3,626

remminanicholaswilde

0.1.4

1 of 1 See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.11	0.60.0 1.26.9

Open the chart page →

24,523

sqlitebrowsernicholaswilde

1.0.1

1 of 1 See more

sqlitebrowser nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/sqlitebrowser :version-3.12.2-02876202105241947ubuntu18.04.1	426e79828c4b	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.12	0.60.0 1.26.9

Open the chart page →

25,866

staticnicholaswilde

1.0.0

1 of 1 See more

static nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/static :version-ee8a20c	d1d47c730bc4	stdlib@go1.16.5	1.26.9

Open the chart page →

2,135

todonicholaswilde

0.1.0

1 of 1 See more

todo nicholaswilde 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/todo :941c0d3-ls1	d7ba1341a940	stdlib@go1.14.15	1.26.9

Open the chart page →

2,264

twtxtnicholaswilde

1.0.0

1 of 1 See more

twtxt nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/twtxt :version-0.1.1	58736a73ca10	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

3,547

wikinicholaswilde

1.0.0

1 of 1 See more

wiki nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/wiki :version-900b76a	6c4f261d8f5e	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

2,923

cert-managernicklasfrahm-cert-manager

0.1.2

4 of 4 See more

cert-manager nicklasfrahm-cert-manager 0.1.2

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.18.2	1075e0974151	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.18.2	9431f0d8b510	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

4,886

ciliumnicklasfrahm-cilium

0.7.4

5 of 6 See more

cilium nicklasfrahm-cilium 0.7.4

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	golang.org/x/net@v0.41.0 stdlib@go1.24.2	0.60.0 1.26.9
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	golang.org/x/net@v0.41.0 stdlib@go1.24.7	0.60.0 1.26.9
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	golang.org/x/net@v0.42.0 stdlib@go1.24.7	0.60.0 1.26.9
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	golang.org/x/net@v0.42.0 stdlib@go1.24.7	0.60.0 1.26.9

Open the chart page →

10,131

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9	7
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	7
bitnami/kubectl :latest	ab90e1058e5a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	6
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.9	6
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	6
cloudflare/cloudflared :2026.10.0 :latest	9b49eed8f628	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	6
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9	6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9	6
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.60.0 1.26.9	6
library/mariadb :10 :10.11	7db29378d4fd	stdlib@go1.24.6	1.26.9	6
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9	6
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.26.9	6
library/postgres :17	d74eeac9a635	stdlib@go1.24.6	1.26.9	6
library/registry :2 :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9	6
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.9	6
postgis/postgis :17-3.5 :latest	01a6a70e41e6	stdlib@go1.18.2	1.26.9	6
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9	6
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9	6
traefik/whoami :latest :v1.12.0	c4717a8d1f01	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	6
victoriametrics/operator :v0.75.0	78da26b41a81	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	6
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.60.0 1.26.9	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.60.0 1.26.9	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.60.0 1.26.9	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.60.0 1.26.9	6
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.60.0 1.26.9	6
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.60.0 1.26.9	6
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9	6
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9	6
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	6
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	6
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.60.0 1.26.9	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	6