CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,530; of 18,090 indexed, latest versions
Container images: 6,374; deployed by those charts
Fix available: 5 of 9; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,530 of 18,090 indexed charts deploy, on 6,374 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,355
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,126
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	no fix listed	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: DEBIAN-CVE-2026-78660 GO-2026-6610 CGA-4487-7phw-q6ph CGA-4c7c-vv7v-68rj CGA-8m3g-7799-mp4m CGA-8vqq-r2ff-395m CGA-f7qm-qm58-qq95 CGA-gwrf-q2qw-xxw8
Also known as: CGA-35vx-wppw-x7qp, CGA-3h29-84h2-fpvm, CGA-549w-3rfh-p826, CGA-5m57-vjc9-f9p9, CGA-674h-jc7r-4mj3, CGA-69vp-383p-x5ch, CGA-75m2-prw5-hwgv, CGA-77wf-8wxg-xgm9, CGA-8p8v-px44-9x8q, CGA-ch87-vjh7-q5c4, CGA-f6rm-vx2j-c4p8, CGA-g5qq-3wrm-946q, CGA-hhf5-4h2f-jxg6, CGA-hmfx-cqg4-6jpq, CGA-hw83-h7jc-7pmj, CGA-pxv9-259f-f7j4, CGA-q8wf-wv9q-7fmv, CGA-qfx8-xwj3-frq2, CGA-qp96-gpwf-9v2h, CGA-qrx4-5cp4-7xhr, CGA-rpwc-c4h5-9frv, CGA-rr68-65r8-g5vv, CGA-v6p6-9m54-x5pc, CGA-x66q-68px-v2f4, CGA-x9jv-g6mg-h4jq, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,530 by stars

Chart

Latest

Affected images

Radar Score

user-componentuser-component

1.2.0

1 of 4 See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,227

user-manager-serveruser-manager-server

1.27.1

1 of 1 See more

user-manager-server user-manager-server 1.27.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,181

phonebook-chartusuladams

0.1.5

1 of 3 See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9

Open the chart page →

3,975

v2ray-proxyv2ray-proxy

0.2.4

1 of 1 See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
pinclr/v2ray-proxy :latest	f37f250b7091	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.60.0 1.26.9

Open the chart page →

2,672

vault-config-operatorvault-config-operator

1.0.3

1 of 1 See more

vault-config-operator vault-config-operator 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/vault-config-operator :v1.0.3	f93c876596d4	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

192

vault-gcp-secretsvault-gcp-secrets

1.19.5

1 of 1 See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

3,047

vearchvearch

3.3.4

2 of 4 See more

vearch vearch 3.3.4

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.60.0 1.26.9
vearch/vearch :3.3.4	0768af33f9d9	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.60.0 1.26.9

Open the chart page →

6,902

vector-store-manager-servervector-store-manager-server

1.8.0

1 of 1 See more

vector-store-manager-server vector-store-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server :1.8.0	ced619de4c6d	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,116

devportal-admin-uiveecode-platform

0.5.4

1 of 1 See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
veecode/devportal-admin-ui :0.4.30	c69fd286b489	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

6,158

victoria-traces-clustervictoriametrics

0.2.10

1 of 1 See more

victoria-traces-cluster victoriametrics 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-traces :v0.11.0	9947b14b6b9b	stdlib@go1.26.5	1.26.9

Open the chart page →

197

riveruivirtualroot

0.1.3

1 of 1 See more

riverui virtualroot 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0 stdlib@go1.23.0	0.60.0 1.26.9

Open the chart page →

1,618

go-egvoid-xmh

1.1.1

3 of 3 See more

go-eg void-xmh 1.1.1

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
voidxmh/xmh-auther :v1	93e42a569ca8	stdlib@go1.16.5	1.26.9
voidxmh/xmh-cacher :v1	1b7397412320	stdlib@go1.16.5	1.26.9
voidxmh/xmh-ui :v1	2ff3f2146547	stdlib@go1.16.5	1.26.9

Open the chart page →

10,317

phpipamvquie

1.0.3

1 of 3 See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.26.9

Open the chart page →

8,241

vultr-ccmvultr

1.3.0

1 of 1 See more

vultr-ccm vultr 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

4,099

waardepapierenwaardepapieren

1.0.0

1 of 3 See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

10,108

waardepapieren-baliewaardepapieren-balie

1.0.0

1 of 3 See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,783

waardepapieren-registerwaardepapieren-register

1.1.0

1 of 4 See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,311

wachdwachd

0.4.37

1 of 1 See more

wachd wachd 0.4.37

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/wachd/wachd :0.4.18	05b05c56da94	stdlib@go1.25.10	1.26.9

Open the chart page →

1,565

waldurwaldur-charts

8.1.2

1 of 3 See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17	d74eeac9a635	stdlib@go1.24.6	1.26.9

Open the chart page →

6,085

warpgate-operatorwarpgate-operator

0.4.11

1 of 1 See more

warpgate-operator warpgate-operator 0.4.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/thereisnotime/warpgate-operator :0.4.15	e3ce6905a7a4	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

132

azure-metrics-exporterwebdevops

1.2.11

1 of 1 See more

azure-metrics-exporter webdevops 1.2.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
webdevops/azure-metrics-exporter :25.12.0	1d3b453fba99	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

857

webhookrelay-operatorwebhookrelay-operator

0.7.0

1 of 1 See more

webhookrelay-operator webhookrelay-operator 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
webhookrelay/webhookrelay-operator :0.8.0	afffa826f068	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

124

webhookswebhooks

0.1.5

1 of 1 See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	stdlib@go1.20.1	1.26.9

Open the chart page →

2,615

webhook-testerwebhook-tester

2.3.0

1 of 1 See more

webhook-tester webhook-tester 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/webhook-tester :2.3.0	85818267b450	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

501

well-knownwell-known

1.11.0

1 of 1 See more

well-known well-known 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/well-known :1.11.0	ae85f257a10f	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

572

frpcwener

1.0.1

1 of 1 See more

frpc wener 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
wener/frpc :v0.37.0	cc9fd4da44c0	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

4,389

frpswener

1.0.1

1 of 1 See more

frps wener 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
wener/frps :v0.37.0	5c92cc9e8597	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

4,389

harborwener

1.19.2

5 of 8 See more

harbor wener 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.60.0 1.26.9
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,986

prometheus-snmp-exporterwener

9.18.1

1 of 1 See more

prometheus-snmp-exporter wener 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

857

seaweedfswener

2.92.0

1 of 1 See more

seaweedfs wener 2.92.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :2.92	db095fe8a8d6	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

3,783

cockroachdbwenerme

22.0.4

1 of 3 See more

cockroachdb wenerme 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

620

frpswenerme

1.0.1

1 of 1 See more

frps wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
wener/frps :v0.37.0	5c92cc9e8597	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

4,389

ingress-nginxwenerme

4.15.1

2 of 2 See more

ingress-nginx wenerme 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,200

kube-prometheus-stackwenerme

92.3.0

5 of 6 See more

kube-prometheus-stack wenerme 92.3.0

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,050

natswenerme

2.15.0

3 of 3 See more

nats wenerme 2.15.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats :2.15.0-alpine	ac8f88a6494b	stdlib@go1.27.1	1.27.2
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.9

Open the chart page →

2,805

prometheus-blackbox-exporterwenerme

11.20.0

1 of 1 See more

prometheus-blackbox-exporter wenerme 11.20.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.29.0	9613f2884689	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

128

yugabytewenerme

2026.1.2

1 of 1 See more

yugabyte wenerme 2026.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

359

wharf-ainowharf-helm

0.1.5

5 of 7 See more

wharf-aino wharf-helm 0.1.5

5 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18.1	0.60.0 1.26.9
quay.io/iver-wharf/wharf-cmd :v0.8.2	e98d13459cdc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

18,138

wharf-cmdwharf-helm

0.3.3

1 of 1 See more

wharf-cmd wharf-helm 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-cmd :v0.8.2	e98d13459cdc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

4,364

spark-operatorwikimedia

2.2.7

1 of 1 See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

57,719

external-monitoringwiremind

0.3.0

1 of 1 See more

external-monitoring wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

1,932

kubemodwiremind

0.1.5

1 of 2 See more

kubemod wiremind 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.13.0	cadca39288ad	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

4,191

db-backup-retentionwjentner-charts

1.1.0

1 of 1 See more

db-backup-retention wjentner-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/wjentner/k8s-db-backup-retention :v1.1.0	8027bb46d1f4	golang.org/x/net@v0.26.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

1,547

wordpress-e2e-setupwoocommerce-e2e-setup

0.1.1

1 of 2 See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

9,456

wordpress-helmwordpress-helm

0.2.9

2 of 4 See more

wordpress-helm wordpress-helm 0.2.9

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
library/mysql :8	0744ee5ef89c	stdlib@go1.24.6	1.26.9

Open the chart page →

10,117

workflows-aggregatorworkflows-aggregator

0.16.12

1 of 1 See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/workflows-aggregator :0.16.12	ce790a4023b6	stdlib@go1.26.7	1.26.9

Open the chart page →

991

workflows-informerworkflows-informer

0.4.4

1 of 1 See more

workflows-informer workflows-informer 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

1,823

wraftwraft

0.1.12

2 of 9 See more

wraft wraft 0.1.12

2 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :14-alpine	4ea9e5ed0659	stdlib@go1.24.6	1.26.9
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	stdlib@go1.23.10	1.26.9

Open the chart page →

5,987

pi-hole-exporterwyrihaximusnet

0.1.3

1 of 1 See more

pi-hole-exporter wyrihaximusnet 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ekofr/pihole-exporter :0.0.10	9fdad6f352e0	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

2,942

redis-db-assignment-operatorwyrihaximusnet

1.0.6

1 of 1 See more

redis-db-assignment-operator wyrihaximusnet 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.16.15	0.60.0 1.26.9

Open the chart page →

3,210

Container images carrying it

6,374 by charts deploying them

A fixed version is listed for 5 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0 stdlib@go1.23.10	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.60.0 1.26.9	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9	2
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9	2
registry.k8s.io/nfd/node-feature-discovery :v0.19.0	2fa1c99ad09b	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-attacher :v4.9.0	5aaefc24f315	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	2
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	2
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.60.0 1.26.9	1
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9	1
1dev/server :11.9.0	cd5b12fe5471	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.60.0 1.26.9	1
1password/connect-api :1.8.3	656e4b10df83	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
1password/connect-api :1.7.2	6aa94cf713f9	golang.org/x/net@v0.14.0 stdlib@go1.20.6	0.60.0 1.26.9	1
1password/connect-sync :1.8.3	a760350c941a	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
1password/connect-sync :1.7.2	fe527ed9d81f	golang.org/x/net@v0.14.0 stdlib@go1.20.6	0.60.0 1.26.9	1
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9	1
42wim/matterircd :latest	23c951580801	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	1
aavishay/right-sizer :0.6.2	3d7c4d79595c	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9	1
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.60.0 1.26.9	1
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.26.9	1
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.14.8	0.60.0 1.26.9	1
activepieces/activepieces :0.92.2	87295caa32a1	stdlib@go1.23.5	1.26.9	1
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :4.8	23d259e0c93e	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9	1
adeptiainc/adeptia-connect-rabbitmq-cluster-operator :5.2	cf610f8c614c	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :5.2	7cdf6ac2e738	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator :4.8	d13e3304bda8	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.60.0 1.26.9	1
adguard/adguardhome :v0.107.38	43ec119419a9	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9	1
adguard/adguardhome :v0.107.59	5d5e3aef39a8	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.60.0 1.26.9	1
adguard/adguardhome :v0.107.76	7157eb1dc3b2	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	1