CVE-2026-78660

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,530; of 18,090 indexed, latest versions
Container images: 6,374; deployed by those charts
Fix available: 5 of 9; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,530 of 18,090 indexed charts deploy, on 6,374 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,355
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,126
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	no fix listed	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-4487-7phw-q6ph CGA-4c7c-vv7v-68rj CGA-8m3g-7799-mp4m CGA-8vqq-r2ff-395m CGA-f7qm-qm58-qq95 CGA-gwrf-q2qw-xxw8 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-35vx-wppw-x7qp, CGA-3h29-84h2-fpvm, CGA-549w-3rfh-p826, CGA-5m57-vjc9-f9p9, CGA-674h-jc7r-4mj3, CGA-69vp-383p-x5ch, CGA-75m2-prw5-hwgv, CGA-77wf-8wxg-xgm9, CGA-8p8v-px44-9x8q, CGA-ch87-vjh7-q5c4, CGA-f6rm-vx2j-c4p8, CGA-g5qq-3wrm-946q, CGA-hhf5-4h2f-jxg6, CGA-hmfx-cqg4-6jpq, CGA-hw83-h7jc-7pmj, CGA-pxv9-259f-f7j4, CGA-q8wf-wv9q-7fmv, CGA-qfx8-xwj3-frq2, CGA-qp96-gpwf-9v2h, CGA-qrx4-5cp4-7xhr, CGA-rpwc-c4h5-9frv, CGA-rr68-65r8-g5vv, CGA-v6p6-9m54-x5pc, CGA-x66q-68px-v2f4, CGA-x9jv-g6mg-h4jq, CGA-xjhf-9jv7-7x78
Trending: Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,530 by stars

Chart

Latest

Affected images

Radar Score

flyte-coreflyte

2.0.51

1 of 3 See more

flyte-core flyte 2.0.51

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9

Open the chart page →

879

frp-operatorfrp

1.0.4

1 of 1 See more

frp-operator frp 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

695

frp-operatorfrp-operator

1.10.1

1 of 1 See more

frp-operator frp-operator 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zufardhiyaulhaq/frp-operator :v0.12.1	c78d5bc90a8f	golang.org/x/net@v0.23.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

956

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	stdlib@go1.24.0	1.26.9

Open the chart page →

1,570

domain-watchgabe565

1.1.0

1 of 1 See more

domain-watch gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

1,443

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

4,026

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.26.9

Open the chart page →

1,971

intel-gpu-plugingeek-cookbook

4.4.2

1 of 1 See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
intel/intel-gpu-plugin :0.20.0	143f0a45e174	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.60.0 1.26.9

Open the chart page →

2,842

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

9,278

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.26.9
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

6,949

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.26.9

Open the chart page →

10,764

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

11,673

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

3,430

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.60.0 1.26.9

Open the chart page →

4,518

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

3,676

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.26.9

Open the chart page →

12,145

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

3,413

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.26.9

Open the chart page →

13,047

ghost-on-kubernetesghost-on-kubernetes-helm

2.0.2

2 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.4	6ea90827b110	stdlib@go1.24.6	1.26.9
ghcr.io/sredevopsorg/ghost-on-kubernetes :main	8da4c9948421	stdlib@go1.26.4	1.26.9

Open the chart page →

1,732

openbaogitlab

0.20.0

1 of 1 See more

openbao gitlab 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.6.2-gitlab1	77907fa18465	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

1,769

gitlab-runnergitlab-jh

0.93.0

1 of 1 See more

gitlab-runner gitlab-jh 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

575

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.26.9

Open the chart page →

7,171

etcdgroundhog2k

1.1.14

1 of 2 See more

etcd groundhog2k 1.1.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.7.2	e9afa62b1e91	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

161

giteagroundhog2k

0.16.5

1 of 1 See more

gitea groundhog2k 0.16.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gitea/gitea :28.1.0	f505a0d3a413	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

141

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	stdlib@go1.26.5	1.26.9

Open the chart page →

2,569

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.26.9

Open the chart page →

7,805

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.60.0 1.26.9

Open the chart page →

2,797

haproxyhaproxytech

1.30.2

1 of 1 See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :3.4.4	1fe3f201ebb5	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

727

whoamiharrytang

0.2.0

1 of 1 See more

whoami harrytang 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.26.9

Open the chart page →

700

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,570

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,019

headscaleheadscale

1.0.20

3 of 3 See more

headscale headscale 1.0.20

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4-debug	2380cdb4951e	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/juanfont/headscale :0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,634

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

2,586

netbirdhelmforge

1.0.11

2 of 4 See more

netbird helmforge 1.0.11

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	5a5a84b19854	stdlib@go1.24.6	1.26.9
netbirdio/netbird-server :0.79.0	d1da0c0179c9	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

3,325

simple-krr-dashboardhelm-simple-krr-dashboard

1.6.2

1 of 3 See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,893

helm-watchdog-pod-deletehelm-watchdog-pod-delete

0.3.0

1 of 1 See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,588

hermes-agenthermes-agent

1.18.0

1 of 1 See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
nousresearch/hermes-agent :v2026.9.24	fca358f12efd	stdlib@go1.24.4	1.26.9

Open the chart page →

6,913

home-assistanthome-assistant

0.5.13

2 of 3 See more

home-assistant home-assistant 0.5.13

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats :2.15.0-scratch	c0d27f305460	stdlib@go1.27.1	1.27.2
ghcr.io/home-assistant/home-assistant :2026.10.0	1b64d38f38d9	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

2,887

keycloak-operatorhostzero-keycloak-operator

0.13.1

1 of 1 See more

keycloak-operator hostzero-keycloak-operator 0.13.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/hostzero-gmbh/keycloak-operator :v0.13.1	ab4ee2b45444	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

124

hpe-cosi-driverhpe-storage

2.0.0

2 of 2 See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	golang.org/x/net@v0.48.0 stdlib@go1.25.0	0.60.0 1.26.9
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	golang.org/x/net@v0.40.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

2,494

inference-manager-engineinference-manager-engine

1.46.0

1 of 1 See more

inference-manager-engine inference-manager-engine 1.46.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

551

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

3,683

infrahub-enterpriseinfrahub-enterprise

4.21.3

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.21.3

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.9

Open the chart page →

12,618

inlets-operatorinlets

0.17.20

1 of 1 See more

inlets-operator inlets 0.17.20

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/inlets/inlets-operator :0.17.22	08265c006973	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

808

coreinstill-ai

0.1.75

7 of 15 See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.60.0 1.26.9
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

13,856

intel-gpu-resource-driverintel

0.7.0

1 of 1 See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,012

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

3,358

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

4,999

amazon-eks-pod-identity-webhookjkroepke

2.6.5

1 of 1 See more

amazon-eks-pod-identity-webhook jkroepke 2.6.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

394

k8s-ephemeral-storage-metricsk8s-ephemeral-storage-metrics

1.21.3

1 of 1 See more

k8s-ephemeral-storage-metrics k8s-ephemeral-storage-metrics 1.21.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics :1.21.3	8297aa4a9278	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

232

Container images carrying it

6,374 by charts deploying them

A fixed version is listed for 5 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
flanksource/canary-checker-ui :v1.4.281	764c84e550db	stdlib@go1.20.7	1.26.9	1
flanksource/vcluster-sync-host-secrets :v0.1.6	bd3294c20a60	golang.org/x/net@v0.7.0 stdlib@go1.17.13	0.60.0 1.26.9	1
flashbots/mev-boost :1.8.0	7c486b5789da	stdlib@go1.22.6	1.26.9	1
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.60.0 1.26.9	1
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	golang.org/x/net@v0.34.0 stdlib@go1.23.9	0.60.0 1.26.9	1
fleetdm/fleet :v4.66.0	12e644b7f40e	golang.org/x/net@v0.36.0 stdlib@go1.23.4	0.60.0 1.26.9	1
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.60.0 1.26.9	1
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.60.0 1.26.9	1
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
flomesh/osm-edge-preinstall :1.3.9	bd224d55ed0f	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
fluxcd/flux-cli :v2.9.5	704d55295355	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
fluxcd/flux-cli :v2.9.6	b1ac18156f22	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.60.0 1.26.9	1
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.60.0 1.26.9	1
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
fonoster/routr-edgeport :2.13.6	d08a8a574a50	golang.org/x/net@v0.7.0 stdlib@go1.21.0	0.60.0 1.26.9	1
foomo/contentserver :1.21.2	8da4b33610c6	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9	1
foomo/csp-reporter :1.3.0	e436da524785	stdlib@go1.18	1.26.9	1
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.26.9	1
fortio/fortio :latest_release	fc8221136fe2	golang.org/x/net@v0.40.0 stdlib@go1.23.9	0.60.0 1.26.9	1
fosrl/newt :1.10.4	ccd2b0e9a049	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.60.0 1.26.9	1
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0 stdlib@go1.19.13	0.60.0 1.26.9	1
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0 stdlib@go1.17.2	0.60.0 1.26.9	1
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.60.0 1.26.9	1
foxcpp/maddy :0.8.2	eeb5813fc4d1	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.60.0 1.26.9	1
freikin/dawarich :1.15.2	e58334ca5697	stdlib@go1.24.4	1.26.9	1
frinx/resource-manager :1.0.4	55575caebd01	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.17.9	0.60.0 1.26.9	1
gabekangas/owncast :0.0.7	97461aedb580	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.15.2	0.60.0 1.26.9	1
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.13	0.60.0 1.26.9	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/net@v0.33.0 stdlib@go1.22.7	0.60.0 1.26.9	1
galexrt/extended-ceph-exporter :v1.8.0	5373078a3a08	stdlib@go1.24.8	1.26.9	1
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.13	0.60.0 1.26.9	1
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	stdlib@go1.15.2	1.26.9	1
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9	1
gdxbsv/traktor :0.0.17	675693335054	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9	1
geldata/gel :6	b3a2815a3956	stdlib@go1.19.8	1.26.9	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	golang.org/x/net@v0.11.0 stdlib@go1.19.11	0.60.0 1.26.9	1
geoservercloud/geoserver-cloud-gateway :3.0.1.1	de0b20bd2a43	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-gwc :3.0.1.1	b04ed89b5d2b	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-rest :3.0.1.1	318254b52f96	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-wcs :3.0.1.1	4f077124f591	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-webui :3.0.1.1	4f91e3048ac8	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-wfs :3.0.1.1	299f0d6232d1	stdlib@go1.26.5	1.26.9	1
geoservercloud/geoserver-cloud-wms :3.0.1.1	5164f687ce4d	stdlib@go1.26.5	1.26.9	1
gesellix/couchdb-prometheus-exporter :v27.2.0	5b891f1fc2b9	stdlib@go1.13.10	1.26.9	1
gesellix/couchdb-prometheus-exporter :v28	6266d063f5d5	stdlib@go1.13.13	1.26.9	1
getconvoy/convoy :v26.7.6	f4934cc05e31	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9	1
getsentry/relay :24.10.0	ba7bf9163219	stdlib@go1.19.8	1.26.9	1