StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,384
of 18,108 indexed, latest versions
Container images
6,227
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,384 of 18,108 indexed charts deploy, on 6,227 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,174
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,974
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,384 by stars
ChartLatestAffected imagesRadar Score
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
golang.org/x/net@v0.18.0
stdlib@go1.21.4
0.60.0
1.26.9

Open the chart page →

5,516
prometheus-universal-exporterprometheus-universal-exporterVerified publisher1.6.01 of 1See more

prometheus-universal-exporter prometheus-universal-exporter 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/eenchev/prometheus-universal-exporter:1.6.0c7ffe36f13c6
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

702
alertmanagerprometheus-worawutchan0.3.01 of 1See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.60.0
1.26.9

Open the chart page →

3,575
prometheus-blackbox-exporterprometheus-worawutchan4.10.11 of 1See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

3,491
prometheus-druid-exporterprometheus-worawutchan0.9.01 of 1See more

prometheus-druid-exporter prometheus-worawutchan 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
stdlib@go1.14.6
1.26.9

Open the chart page →

3,175
prometheus-kafka-exporterprometheus-worawutchan0.2.01 of 3See more

prometheus-kafka-exporter prometheus-worawutchan 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:latestd1014f41712d
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

213
prometheus-node-exporterprometheus-worawutchan1.12.01 of 1See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.60.0
1.26.9

Open the chart page →

3,457
prometheus-pushgatewayprometheus-worawutchan1.5.01 of 1See more

prometheus-pushgateway prometheus-worawutchan 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.26.9

Open the chart page →

2,350
prometheus-redis-exporterprometheus-worawutchan4.0.01 of 1See more

prometheus-redis-exporter prometheus-worawutchan 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.26.9

Open the chart page →

2,386
prometheus-statsd-exporterprometheus-worawutchan0.1.01 of 1See more

prometheus-statsd-exporter prometheus-worawutchan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.18.0d23aca343b86
stdlib@go1.14.7
1.26.9

Open the chart page →

2,386
github-exporterpromhippieVerified publisher21.2.01 of 1See more

github-exporter promhippie 21.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/promhippie/github-exporter:20.3.0c84bdb2b4576
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

225
hetzner-exporterpromhippieVerified publisher2.19.01 of 1See more

hetzner-exporter promhippie 2.19.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/promhippie/hetzner-exporter:2.19.001a5a222d0a6
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
jenkins-exporterpromhippieVerified publisher2.18.01 of 1See more

jenkins-exporter promhippie 2.18.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/promhippie/jenkins-exporter:2.18.0bd83d17ed173
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
scw-exporterpromhippieVerified publisher3.19.01 of 1See more

scw-exporter promhippie 3.19.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/promhippie/scw-exporter:2.19.0192bb0fd1aea
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

4,159
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

11,339
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

9,503
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
golang.org/x/net@v0.58.0
stdlib@go1.26.6-X:jsonv2
0.60.0
1.26.9

Open the chart page →

2,106
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

3,809
kspanpuckpuck0.2.41 of 1See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.20.1
0.60.0
1.26.9

Open the chart page →

2,499
powerdnspuckpuck2.0.03 of 4See more

powerdns puckpuck 2.0.0

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.9
pschiffe/pdns-admin:0.4.137ebba8c2b8f
stdlib@go1.21.5
1.26.9
pschiffe/pdns-pgsql:5.0a227d41bc665
stdlib@go1.21.5
1.26.9

Open the chart page →

6,005
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.20.10
0.60.0
1.26.9

Open the chart page →

4,935
pulumi-esc-csi-providerpulumi-esc-csi-provider0.1.61 of 1See more

pulumi-esc-csi-provider pulumi-esc-csi-provider 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
golang.org/x/net@v0.32.0
stdlib@go1.23.1
0.60.0
1.26.9

Open the chart page →

1,366
pulumi-exporterpulumi-exporter0.1.61 of 1See more

pulumi-exporter pulumi-exporter 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

413
pumperlypumperlyVerified publisher0.2.01 of 3See more

pumperly pumperly 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
stdlib@go1.18.2
1.26.9

Open the chart page →

2,941
punch-boardpunchplatform298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev1 of 1See more

punch-board punchplatform 298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b
stdlib@go1.21.3
0.60.0
1.26.9

Open the chart page →

2,072
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest0c09bc50031e
golang.org/x/net@v0.58.0
stdlib@go1.22.2
0.60.0
1.26.9

Open the chart page →

4,956
cdmswebapppyalive-cdmswebappVerified publisher0.1.02 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9
sarwansharma/minio:v359d1da9385d1
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.18.3
0.60.0
1.26.9

Open the chart page →

8,674
loki-stackpyalive-cdmswebappVerified publisher2.6.54 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
grafana/loki:2.5.0f9ef133793af
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.8
0.60.0
1.26.9
grafana/promtail:2.4.2626900031c4e
golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3
stdlib@go1.17.2
0.60.0
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

8,937
node-exporterpyalive-cdmswebappVerified publisher0.1.01 of 1See more

node-exporter pyalive-cdmswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:latest1b4e4438faca
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

357
rancher-metricspy-kube-downscalerVerified publisher0.0.81 of 4See more

rancher-metrics py-kube-downscaler 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

1,273
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.9

Open the chart page →

1,806
open-terminalqaoruVerified publisher0.2.51 of 1See more

open-terminal qaoru 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.14.0-slimba7a67129bba
stdlib@go1.24.4
1.26.9

Open the chart page →

2,798
unifiqaoruVerified publisher1.1.72 of 2See more

unifi qaoru 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mongo:7.0-jammyf71f6d0913c9
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
linuxserver/unifi-network-application:10.6.106-ls149bb0510fedc3b
stdlib@go1.26.7
1.26.9

Open the chart page →

4,027
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.3
0.60.0
1.26.9
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.4
0.60.0
1.26.9

Open the chart page →

17,236
quarksquarks7.0.1+0.g5396b114 of 5See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.13.15
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.14.7
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

27,521
quarks-statefulsetquarks0.0.1304-g4b4f2ac51 of 1See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

6,133
qubivaqubiva0.3.22 of 3See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
golang.org/x/net@v0.30.0
stdlib@go1.23.4
0.60.0
1.26.9
library/mongo:71f995ad6fdb9
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

8,222
ingress-nginxquench-ingress-nginxVerified publisher0.0.111 of 1See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinnedbfc9db97a1e7
ingress-nginx-controller-1.15@1.15.10-r9
no fix listed

Open the chart page →

549
ingress-stackquench-ingress-stackVerified publisher0.0.61 of 5See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinnedbfc9db97a1e7
ingress-nginx-controller-1.15@1.15.10-r9
no fix listed

Open the chart page →

786
versitygwquench-versitygwVerified publisher0.0.21 of 1See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned783ea36fcc7a
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

213
ingress-controllerqumine0.8.5001 of 1See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
qumine/ingress-controller:v0.8.5f2c8a2148381
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19
0.60.0
1.26.9

Open the chart page →

2,428
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
stdlib@go1.19.8
1.26.9

Open the chart page →

9,208
rabbitmq-cluster-operatorrabbitmq-cluster-operator4.8.02 of 2See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator:4.823d259e0c93e
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.60.0
1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator:4.8d13e3304bda8
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

2,296
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

1,755
kubemirrorraczylo-comVerified publisher0.10.231 of 1See more

kubemirror raczylo-com 0.10.23

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubemirror:0.10.23093fae89438a
stdlib@go1.26.8
1.26.9

Open the chart page →

148
rad-pluginsradOfficialVerified publisher2.4.155 of 5See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.34adc2f5d5996b
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.44f30f0dc32205
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.38bbba62c5a110
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.504e25d84332fc
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

1,112
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
stdlib@go1.22.7
1.26.9
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
stdlib@go1.20.6
1.26.9

Open the chart page →

24,029
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
golang.org/x/net@v0.35.0
stdlib@go1.24.0
0.60.0
1.26.9

Open the chart page →

1,398
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

1,019

Container images carrying it

6,227 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.10.3e7e110a421c2
golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf
stdlib@go1.16.6
0.60.0
1.26.9
1
istio/pilot:1.29.1f8b0e412ac4a
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.60.0
1.26.9
1
istio/proxyv2:1.14.1df69c1a7af7c
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.18.2
0.60.0
1.26.9
1
itscontained/secret-manager:0.3.07ec3e93c6469
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.15.3
0.60.0
1.26.9
1
itzg/bungeecord:latest7b7ff61d2a60
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9
1
itzg/mc-router:latest64ae69eaa7a6
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9
1
itzg/mc-router:1.16.1bb552b59fb53
golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf
stdlib@go1.18.4
0.60.0
1.26.9
1
itzg/minecraft-server:2026.9.2de5d1b1a83eb
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9
1
itzmanish/ecr-token-renew:latest02154d1c05b5
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.6
0.60.0
1.26.9
1
ixsystems/truecommand:3.2.019c218455cd2
golang.org/x/net@v0.42.0
stdlib@go1.25.0
0.60.0
1.26.9
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17.2
0.60.0
1.26.9
1
jacobalberty/unifi:v7.1.664a3616625dda
stdlib@go1.18
1.26.9
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
stdlib@go1.20.4
1.26.9
1
jaegertracing/all-in-one:1.2942822be7888b
golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf
stdlib@go1.17.3
0.60.0
1.26.9
1
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/net@v0.19.0
stdlib@go1.21.5
0.60.0
1.26.9
1
jaegertracing/all-in-one:1.42.07d32a4eddec7
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9
1
jaegertracing/all-in-one:1.22.0ca6b73330616
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15.8
0.60.0
1.26.9
1
jaegertracing/all-in-one:1.18db45c07f2e1b
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.4
0.60.0
1.26.9
1
jaegertracing/all-in-one:1.55f6b5d09073f1
golang.org/x/net@v0.21.0
stdlib@go1.22.0
0.60.0
1.26.9
1
jaegertracing/jaeger:2.20.046a886260e04
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
jaegertracing/jaeger:2.22.0836b967b5abc
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
jaegertracing/jaeger:2.9.0e128b9adbb29
golang.org/x/net@v0.42.0
stdlib@go1.24.5
0.60.0
1.26.9
1
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.60.0
1.26.9
1
jaegertracing/jaeger-operator:1.61.03f036ec60e61
golang.org/x/net@v0.29.0
stdlib@go1.22.3
0.60.0
1.26.9
1
jaegertracing/jaeger-query:1.41.0b636f0f464bc
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.60.0
1.26.9
1
jakuboskera/todo-operator:v0.1.0a305b8ce5bff
golang.org/x/net@v0.47.0
stdlib@go1.25.3
0.60.0
1.26.9
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
golang.org/x/net@v0.29.0
stdlib@go1.22.8
0.60.0
1.26.9
1
jamesread/olivetin:3000.19.0af9d7c4db6dc
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
jamesread/olivetin:3000.20.0f3066e207efd
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
jdschulze/restinthemiddle:v2.3.143dbf284b288b
stdlib@go1.27.1
1.27.2
1
jdvalencia422/observabilitysec:latesta80b6e47a7b8
stdlib@go1.18.4
1.26.9
1
jeboehm/mailserver-filter:5.0.92e756949e537d
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9
1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
golang.org/x/net@v0.17.0
stdlib@go1.21.8
0.60.0
1.26.9
1
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
golang.org/x/net@v0.38.0
stdlib@go1.25.3
0.60.0
1.26.9
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
golang.org/x/net@v0.17.0
stdlib@go1.21.8
0.60.0
1.26.9
1
jhaals/yopass:11.17.026873480863b
stdlib@go1.20.5
1.26.9
1
jhaals/yopass:11.15.16bca8d5a4914
stdlib@go1.20.5
1.26.9
1
jhaals/yopass:14.10.06c33d9c813f7
stdlib@go1.27.1
1.27.2
1
jhaals/yopass:12.5.0916a1cf45d36
stdlib@go1.25.5
1.26.9
1
jhaals/yopass:14.9.0934e4f2c016f
stdlib@go1.27.0
1.27.2
1
jhaals/yopass:11.4.69516e3b3e88c
stdlib@go1.19.1
1.26.9
1
jhaals/yopass:12.4.0b64a1a8ace1b
stdlib@go1.25.3
1.26.9
1
jhidalgo3/kafka-offset-lag-for-prometheus:latest0390e155c46d
golang.org/x/net@v0.1.0
stdlib@go1.17.13
0.60.0
1.26.9
1
jhonbrownn/elchi-discovery:latest:v1.0.08f6551ecc98c
golang.org/x/net@v0.13.0
stdlib@go1.23.1
0.60.0
1.26.9
1
jhonbrownn/merge-pilot-backend:1.6.068d6223ea366
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9
1
jitesoft/kubectl:latest7f25594d4f33
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
jkaninda/grafana:11.0.08cfda26ecb7d
golang.org/x/net@v0.23.0
stdlib@go1.21.10
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.