CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78660 GO-2026-6610
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.60.0 1.26.9
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.60.0 1.26.9
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

16,821

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

1,508

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0 stdlib@go1.23.12	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,546

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,572

llo-natseclipse-aerios

1.0.0

1 of 1 See more

llo-nats eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats :2.11.4	c8cd23806eef	stdlib@go1.24.3	1.26.9

Open the chart page →

1,259

mintakaeclipse-aerios

1.0.0

1 of 2 See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9

Open the chart page →

12,877

openfaas2eclipse-aerios

12.0.5

6 of 6 See more

openfaas2 eclipse-aerios 12.0.5

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.26.9
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.26.9
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

10,260

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eclipseaerios/openldap :2.6.3	0208743f315e	stdlib@go1.18.2	1.26.9

Open the chart page →

9,437

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.26.9

Open the chart page →

10,927

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

3,965

edge-accessedge-access

0.1.0

1 of 1 See more

edge-access edge-access 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.13.0	56e3daedf765	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,123

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,402

marblerunedgelesssys

1.9.2

1 of 1 See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	golang.org/x/net@v0.58.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,379

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

12,483

privatemode-proxyedgelesssys

1.58.0

1 of 1 See more

privatemode-proxy edgelesssys 1.58.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/privatemode/privatemode-proxydigest-pinned	be97a17a37ed	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

205

pagesedgwarepages

1.0.0

1 of 3 See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,310

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9

Open the chart page →

4,459

prometheusedu

11.6.0

4 of 6 See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.60.0 1.26.9
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

13,375

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,327

adguard-homeegeback

2.0.14

1 of 2 See more

adguard-home egeback 2.0.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.79	aba9e3bf0613	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

417

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.60.0 1.26.9

Open the chart page →

1,862

home-assistantegeback

2.0.35

1 of 1 See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,268

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	stdlib@go1.24.6	1.26.9

Open the chart page →

8,406

uptime-kumaegeback

2.0.12

1 of 1 See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,792

egeria-baseegeria-charts

4.3.0

1 of 5 See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

4,469

egeria-lineageegeria-charts

4.1.0

1 of 3 See more

egeria-lineage egeria-charts 4.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

218

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,320

eg-universal-agent-operatoreg-universal-agent-operator

0.0.5

1 of 1 See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
eginnovations/universal-agent-operator :0.0.11	b8e3e26dca1b	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,064

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,491

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,419

mongodb-charteks-3-tier-app-chart

0.1.0

1 of 1 See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.9

Open the chart page →

9,318

eks-auto-pod-id-assoceks-auto-pod-id-assoc

0.6.0

1 of 1 See more

eks-auto-pod-id-assoc eks-auto-pod-id-assoc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/eks-auto-pod-id-assoc :0.6.0	196ef68af380	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,259

postgresqleks-storageclass

0.1.0

1 of 1 See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9

Open the chart page →

1,802

elastic-agentelastic

9.5.5

1 of 2 See more

elastic-agent elastic 9.5.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,257

kube-state-metricselastic

6.1.0

1 of 1 See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,257

netobserv-flowelastiflow

0.12.0

1 of 1 See more

netobserv-flow elastiflow 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
elastiflow/flow-collector :7.26.3	d80d974a806e	golang.org/x/net@v0.53.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

1,467

seafileeleksbai

0.1.1

2 of 3 See more

seafile eleksbai 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :10.6	23616f0bd3af	stdlib@go1.24.6	1.26.9
seafileltd/seafile-mc :9.0.10	6693911bcc40	stdlib@go1.19	1.26.9

Open the chart page →

94,477

elk-stackelk-stack-test

1.0.2

1 of 9 See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/logstash :9.1.2	33eae14f0867	stdlib@go1.23.12	1.26.9

Open the chart page →

4,029

elsaelsa

0.1.0

2 of 4 See more

elsa elsa 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
geldata/gel :6	b3a2815a3956	stdlib@go1.19.8	1.26.9
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	golang.org/x/net@v0.39.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,473

rabbitmqemberstack

1.0.22

1 of 1 See more

rabbitmq emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/rabbitmq :management	6ec83ef56205	stdlib@go1.22.2	1.26.9

Open the chart page →

1,348

emissary-ingressemissary-ingress

4.1.0

1 of 1 See more

emissary-ingress emissary-ingress 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	golang.org/x/net@v0.50.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,505

Navidromeemmas-charts

0.0.4

1 of 1 See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

3,727

parrot-mirroremmas-charts

1.0.0

1 of 1 See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

3,005

cost-reportempathyco

0.7.8

1 of 1 See more

cost-report empathyco 0.7.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
empathyco/cost-report :0.0.12	4f1e26eaacbf	stdlib@go1.15.15	1.26.9

Open the chart page →

2,132

deadman-switchempathyco

0.0.2

1 of 1 See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gcr.io/pingcap-public/deadmansswitch :1.0	4861d81aa528	stdlib@go1.16.3	1.26.9

Open the chart page →

2,286

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.26.9

Open the chart page →

11,945

yace-exporterempathyco

0.1.0

1 of 1 See more

yace-exporter empathyco 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.26.9

Open the chart page →

2,570

edge-operatoremqx-operator

0.0.5

1 of 1 See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/net@v0.1.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,050

kube-ecp-stackemqx-operator

2.5.1

11 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/net@v0.23.0 stdlib@go1.23.3	0.60.0 1.26.9
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/net@v0.30.0 stdlib@go1.22.0	0.60.0 1.26.9
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.60.0 1.26.9
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.60.0 1.26.9
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

31,310

cnpg-monitoringenix

0.3.0

1 of 1 See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,381

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
atlassian/bamboo-agent-base :12.1.12	a8d7b10b667a	stdlib@go1.22.2	1.26.9	1
authelia/authelia :4.39.28	bd97cff4fcbf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
authzed/spicedb :latest	aa96009a0477	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	1
automatischio/automatisch :0.15.0	3bace7a12d5f	stdlib@go1.23.8	1.26.9	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	1
aveshasystems/spiffe-csi-driver :0.2.7	53fc6d009e04	golang.org/x/net@v0.21.0 stdlib@go1.22.2	0.60.0 1.26.9	1
axllent/mailpit :v1.31.1	98b916bd3c8d	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
axllent/mailpit :v1.31.0	c96991d9bef7	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ayushsobti/kube-monkey :v0.7.0	fc181870c60f	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
b3log/siyuan :v3.1.25	95c0d129bc19	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.60.0 1.26.9	1
b3log/siyuan :v3.8.5	d740a1d3ed6b	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
basa/spki-fingerprint-exporter :0.7.2	34cadcaa29c4	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
baserow/backend :2.4.0	af9aa6fe8482	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1
baserow/backend :1.31.1	e0b3c8130b91	stdlib@go1.19.8	1.26.9	1
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9	1
bbernhard/signal-cli-rest-api :latest	2cf09d66a86f	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.60.0 1.26.9	1
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.26.9	1
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.60.0 1.26.9	1
beopenit/door-agent :v3.0.5	d24c323fe7c3	golang.org/x/net@v0.37.0 stdlib@go1.23.12	0.60.0 1.26.9	1
beopenit/door-cd-operator :v3.0.4	d3999cb8d026	golang.org/x/net@v0.17.0 stdlib@go1.23.9	0.60.0 1.26.9	1
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.60.0 1.26.9	1
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9	1
berkeleyskypilot/skypilot :0.14.0	a8362d205365	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	golang.org/x/net@v0.38.0 stdlib@go1.23.5	0.60.0 1.26.9	1
betterdb/monitor :0.49.0-no-ai	97dcd2d2192f	stdlib@go1.26.8	1.26.9	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.6	0.60.0 1.26.9	1
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/net@v0.2.0 stdlib@go1.17.6	0.60.0 1.26.9	1
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/net@v0.0.0-20220418201149-a630d4f3e7a2 stdlib@go1.19.3	0.60.0 1.26.9	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.26.9	1
binrc/headcni :1.0.10	e199c334b957	golang.org/x/net@v0.53.0 stdlib@go1.22.10	0.60.0 1.26.9	1
binwiederhier/ntfy :v2.28.0	6ef4b819f722	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2	1
binwiederhier/ntfy :v2.6.2	83e2e43d9956	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9	1
bitnami/haproxy :latest	5b57bac338a2	golang.org/x/net@v0.59.0	0.60.0	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.60.0 1.26.9	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9	1
bitnamilegacy/git :latest	4b08d0c5af8d	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.60.0 1.26.9	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.26.9	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.19.6	1.26.9	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.26.9	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.60.0 1.26.9	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.26.9	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	stdlib@go1.21.10	1.26.9	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	stdlib@go1.25.0	1.26.9	1
bitnamilegacy/kubectl :1.30	1249fc292e84	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9	1
bitnamilegacy/kubectl :1.31	64614ef8290f	golang.org/x/net@v0.26.0 stdlib@go1.23.4	0.60.0 1.26.9	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9	1