CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78660 GO-2026-6610
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.60.0 1.26.9
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.60.0 1.26.9
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

16,821

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

1,508

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0 stdlib@go1.23.12	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,546

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,572

llo-natseclipse-aerios

1.0.0

1 of 1 See more

llo-nats eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats :2.11.4	c8cd23806eef	stdlib@go1.24.3	1.26.9

Open the chart page →

1,259

mintakaeclipse-aerios

1.0.0

1 of 2 See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9

Open the chart page →

12,877

openfaas2eclipse-aerios

12.0.5

6 of 6 See more

openfaas2 eclipse-aerios 12.0.5

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.26.9
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.26.9
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

10,260

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/openldap :2.6.3	0208743f315e	stdlib@go1.18.2	1.26.9

Open the chart page →

9,437

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.26.9

Open the chart page →

10,927

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

3,965

edge-accessedge-access

0.1.0

1 of 1 See more

edge-access edge-access 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.13.0	56e3daedf765	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,123

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,402

marblerunedgelesssys

1.9.2

1 of 1 See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	golang.org/x/net@v0.58.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,379

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

12,483

privatemode-proxyedgelesssys

1.58.0

1 of 1 See more

privatemode-proxy edgelesssys 1.58.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/privatemode/privatemode-proxydigest-pinned	be97a17a37ed	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

205

pagesedgwarepages

1.0.0

1 of 3 See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,310

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9

Open the chart page →

4,459

prometheusedu

11.6.0

4 of 6 See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.60.0 1.26.9
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

13,375

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,327

adguard-homeegeback

2.0.14

1 of 2 See more

adguard-home egeback 2.0.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.79	aba9e3bf0613	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

417

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.60.0 1.26.9

Open the chart page →

1,862

home-assistantegeback

2.0.35

1 of 1 See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,268

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	stdlib@go1.24.6	1.26.9

Open the chart page →

8,406

uptime-kumaegeback

2.0.12

1 of 1 See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,792

egeria-baseegeria-charts

4.3.0

1 of 5 See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

4,469

egeria-lineageegeria-charts

4.1.0

1 of 3 See more

egeria-lineage egeria-charts 4.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

218

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,320

eg-universal-agent-operatoreg-universal-agent-operator

0.0.5

1 of 1 See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eginnovations/universal-agent-operator :0.0.11	b8e3e26dca1b	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,064

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,491

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,419

mongodb-charteks-3-tier-app-chart

0.1.0

1 of 1 See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.9

Open the chart page →

9,318

eks-auto-pod-id-assoceks-auto-pod-id-assoc

0.6.0

1 of 1 See more

eks-auto-pod-id-assoc eks-auto-pod-id-assoc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/eks-auto-pod-id-assoc :0.6.0	196ef68af380	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,259

postgresqleks-storageclass

0.1.0

1 of 1 See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9

Open the chart page →

1,802

elastic-agentelastic

9.5.5

1 of 2 See more

elastic-agent elastic 9.5.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,257

kube-state-metricselastic

6.1.0

1 of 1 See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,257

netobserv-flowelastiflow

0.12.0

1 of 1 See more

netobserv-flow elastiflow 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
elastiflow/flow-collector :7.26.3	d80d974a806e	golang.org/x/net@v0.53.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

1,467

seafileeleksbai

0.1.1

2 of 3 See more

seafile eleksbai 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :10.6	23616f0bd3af	stdlib@go1.24.6	1.26.9
seafileltd/seafile-mc :9.0.10	6693911bcc40	stdlib@go1.19	1.26.9

Open the chart page →

94,477

elk-stackelk-stack-test

1.0.2

1 of 9 See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/logstash :9.1.2	33eae14f0867	stdlib@go1.23.12	1.26.9

Open the chart page →

4,029

elsaelsa

0.1.0

2 of 4 See more

elsa elsa 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
geldata/gel :6	b3a2815a3956	stdlib@go1.19.8	1.26.9
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	golang.org/x/net@v0.39.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,473

rabbitmqemberstack

1.0.22

1 of 1 See more

rabbitmq emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/rabbitmq :management	6ec83ef56205	stdlib@go1.22.2	1.26.9

Open the chart page →

1,348

emissary-ingressemissary-ingress

4.1.0

1 of 1 See more

emissary-ingress emissary-ingress 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	golang.org/x/net@v0.50.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,505

Navidromeemmas-charts

0.0.4

1 of 1 See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

3,727

parrot-mirroremmas-charts

1.0.0

1 of 1 See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

3,005

cost-reportempathyco

0.7.8

1 of 1 See more

cost-report empathyco 0.7.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
empathyco/cost-report :0.0.12	4f1e26eaacbf	stdlib@go1.15.15	1.26.9

Open the chart page →

2,132

deadman-switchempathyco

0.0.2

1 of 1 See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gcr.io/pingcap-public/deadmansswitch :1.0	4861d81aa528	stdlib@go1.16.3	1.26.9

Open the chart page →

2,286

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.26.9

Open the chart page →

11,945

yace-exporterempathyco

0.1.0

1 of 1 See more

yace-exporter empathyco 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.26.9

Open the chart page →

2,570

edge-operatoremqx-operator

0.0.5

1 of 1 See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/net@v0.1.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,050

kube-ecp-stackemqx-operator

2.5.1

11 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/net@v0.23.0 stdlib@go1.23.3	0.60.0 1.26.9
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/net@v0.30.0 stdlib@go1.22.0	0.60.0 1.26.9
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.60.0 1.26.9
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.60.0 1.26.9
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

31,310

cnpg-monitoringenix

0.3.0

1 of 1 See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,381

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
appwrite/appwrite :1.9.0	1aaa70127114	golang.org/x/net@v0.40.0 stdlib@go1.25.7	0.60.0 1.26.9	1
appwrite/appwrite :2.3.0	34ef77fb6e87	golang.org/x/net@v0.51.0 stdlib@go1.26.8	0.60.0 1.26.9	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.16.4	0.60.0 1.26.9	1
aquasec/kube-bench :v0.6.17	6672264accce	stdlib@go1.20.4	1.26.9	1
aquasec/kube-bench :v0.15.0	7a8fa32dce21	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9	1
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.26.9	1
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9	1
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9	1
aquasec/starboard-operator :0.15.4	be34f709e1ce	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
aquasec/starboard-operator :0.15.38	e0b1c7ddc843	golang.org/x/net@v0.41.0 stdlib@go1.26.3	0.60.0 1.26.9	1
aquasec/tracee :0.24.1	cfbbfee972e6	golang.org/x/net@v0.42.0 stdlib@go1.24.9	0.60.0 1.26.9	1
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9	1
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.60.0 1.26.9	1
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9	1
aquasec/trivy :0.75.0	af6acf9a6b85	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
arangodb/kube-arangodb :1.2.41	08d1720cec3b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9	1
arbuzov/claude-code-api :0.1.0	2d7dd8070610	stdlib@go1.23.10	1.26.9	1
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/net@v0.34.0 stdlib@go1.22.10	0.60.0 1.26.9	1
arigaio/atlas-operator :0.7.11	1c4caa13c92b	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9	1
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/net@v0.7.0 stdlib@go1.22.5	0.60.0 1.26.9	1
articomio/articom-cx-operator :v1.2.3	89efda334136	golang.org/x/net@v0.47.0 stdlib@go1.25.14	0.60.0 1.26.9	1
artifacthub/db-migrator :v1.23.0	28c13565ac5c	stdlib@go1.26.4	1.26.9	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.26.9	1
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
artifacthub/hub :v1.23.0	7d3a91c539dc	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
artifacthub/scanner :v1.23.0	2d8365601f0e	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9	1
artifacthub/tracker :v1.23.0	5368d21a6e5c	golang.org/x/net@v0.44.0 stdlib@go1.24.4	0.60.0 1.26.9	1
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.26.9	1
arunvelsriram/utils :latest	655ad18fd8d6	golang.org/x/net@v0.24.0 stdlib@go1.23.8	0.60.0 1.26.9	1
ashupednekar535/litefunctions-ingestor :latest	d605f539da90	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ashupednekar535/litefunctions-operator :latest	83c884ce260b	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ashupednekar535/litefunctions-portal :latest	460f010659fe	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.60.0 1.26.9	1
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.26.9	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	stdlib@go1.18.2	1.26.9	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.60.0 1.26.9	1
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.60.0 1.26.9	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.60.0 1.26.9	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.26.9	1
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.26.9	1
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.13	0.60.0 1.26.9	1
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.60.0 1.26.9	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.22.1	1.26.9	1
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/net@v0.30.0 stdlib@go1.24.13	0.60.0 1.26.9	1
atlassian/bamboo :12.1.12	eb98d6fbeee7	stdlib@go1.22.2	1.26.9	1