StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,325
of 18,108 indexed, latest versions
Container images
6,126
deployed by those charts
Fix available
2 of 4
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,104
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,888
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
OSV records
CGA-549w-3rfh-p826DEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-xjhf-9jv7-7x78
Trending
Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars
ChartLatestAffected imagesRadar Score
toxiproxyhelm-charts-nr1.3.91 of 2See more

toxiproxy helm-charts-nr 1.3.9

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/shopify/toxiproxy:2.7.0fc2d40f4904c
stdlib@go1.19.13
1.26.9

Open the chart page →

1,147
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.13.5
0.60.0
1.26.9

Open the chart page →

10,818
helm-controllerhelm-controllerVerified publisher0.1.41 of 1See more

helm-controller helm-controller 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/helm-controller:v0.17.4946ae0d13229
golang.org/x/net@v0.55.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

516
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

4,874
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

2,377
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dannielkil/book-db:latest433290c5c1db
stdlib@go1.18.2
1.26.9

Open the chart page →

10,727
jasperreportshelm-dojo8.0.0-v1.31 of 2See more

jasperreports helm-dojo 8.0.0-v1.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
palopalepalo/jasperreports:8-v1.356b99b194d20
stdlib@go1.19.6
1.26.9

Open the chart page →

7,775
dwpkhelm-dwpkVerified publisher1.0.03 of 3See more

dwpk helm-dwpk 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/dwpk:1.0.0d76dbf82a81d
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/devops-ia/dwpk-gateway:1.0.02911d8b02c64
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/devops-ia/dwpk-ui:1.0.0b1af8311eba8
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

690
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.993 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.99

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
alpine/git:v2.54.0832b1cd1a271
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
fluxcd/flux-cli:v2.9.6b1ac18156f22
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/helmfile/helmfile:v1.8.19c29ece2fb6e
golang.org/x/net@v0.57.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

2,833
adguard-homehelmforgeVerified publisher1.5.21 of 2See more

adguard-home helmforge 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

417
affinehelmforgeVerified publisher1.0.21 of 3See more

affine helmforge 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.6-pg16-bookwormccc6e83d6e35
stdlib@go1.24.6
1.26.9

Open the chart page →

4,852
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

2,538
answerhelmforgeVerified publisher1.5.31 of 1See more

answer helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
apache/answer:2.0.2a0d71b0e30a5
golang.org/x/net@v0.56.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

886
appwritehelmforgeVerified publisher2.0.32 of 5See more

appwrite helmforge 2.0.3

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
appwrite/appwrite:2.3.034ef77fb6e87
golang.org/x/net@v0.51.0
stdlib@go1.26.8
0.60.0
1.26.9
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

5,361
automatischhelmforgeVerified publisher1.3.92 of 4See more

automatisch helmforge 1.3.9

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
stdlib@go1.23.8
1.26.9
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

6,607
booklorehelmforgeVerified publisher2.0.21 of 3See more

booklore helmforge 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mariadb:13.0.2d4fdec0510ad
stdlib@go1.26.7
1.26.9

Open the chart page →

2,560
castopodhelmforgeVerified publisher1.2.102 of 3See more

castopod helmforge 1.2.10

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.60.0
1.26.9
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

10,831
certimatehelmforgeVerified publisher1.0.91 of 1See more

certimate helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
certimate/certimate:v0.4.34ff42541a047b
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

258
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

8,763
ckanhelmforgeVerified publisher1.3.102 of 6See more

ckan helmforge 1.3.10

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
stdlib@go1.18.1
1.26.9
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

11,614
cloudflaredhelmforgeVerified publisher1.5.171 of 1See more

cloudflared helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.3072c067d25cc
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

624
countlyhelmforgeVerified publisher1.2.82 of 3See more

countly helmforge 1.2.8

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
stdlib@go1.21.11
1.26.9
library/mongo:8.3.115d7043a4ffe0
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

76,314
dawarichhelmforgeVerified publisher1.0.32 of 4See more

dawarich helmforge 1.0.3

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
stdlib@go1.24.4
1.26.9
postgis/postgis:18-3.67e00e8c3539f
stdlib@go1.24.6
1.26.9

Open the chart page →

12,667
ddns-updaterhelmforgeVerified publisher1.4.121 of 1See more

ddns-updater helmforge 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
qmcgaw/ddns-updater:2.10.03e2aa558946b
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

574
discount-bandithelmforgeVerified publisher2.0.92 of 3See more

discount-bandit helmforge 2.0.9

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/net@v0.43.0
stdlib@go1.25.4
0.60.0
1.26.9
library/mysql:26.7.0ade067ae2fb1
stdlib@go1.24.6
1.26.9

Open the chart page →

36,249
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
library/zookeeper:3.9.5e6b279d01350
stdlib@go1.18.1
1.26.9

Open the chart page →

10,115
drupalhelmforgeVerified publisher1.2.151 of 2See more

drupal helmforge 1.2.15

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
stdlib@go1.24.6
1.26.9

Open the chart page →

4,535
entehelmforgeVerified publisher1.0.22 of 4See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

5,245
ghosthelmforgeVerified publisher1.2.102 of 3See more

ghost helmforge 1.2.10

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/ghost:6.65.090592b712b6b
stdlib@go1.24.6
1.26.9
library/mysql:8.4.110744ee5ef89c
stdlib@go1.24.6
1.26.9

Open the chart page →

3,916
ghostfoliohelmforgeVerified publisher1.0.11 of 4See more

ghostfolio helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

5,154
giteahelmforgeVerified publisher1.1.211 of 1See more

gitea helmforge 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gitea/gitea:1.27.3-rootless1c17ecaead42
golang.org/x/net@v0.56.0
stdlib@go1.26.7-X:jsonv2
0.60.0
1.26.9

Open the chart page →

905
github-mcp-serverhelmforgeVerified publisher1.0.31 of 1See more

github-mcp-server helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/github/github-mcp-server:v1.9.0881b53d6f75f
golang.org/x/net@v0.55.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

744
glancehelmforgeVerified publisher1.0.01 of 1See more

glance helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.69dfb09470b20
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

376
gophishhelmforgeVerified publisher0.1.61 of 1See more

gophish helmforge 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gophish/gophish:0.12.18a57cd171999
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

4,205
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
stdlib@go1.24.4
1.26.9

Open the chart page →

6,975
hoppscotchhelmforgeVerified publisher1.1.122 of 2See more

hoppscotch helmforge 1.1.12

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.2e7ba6061a286
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

2,689
immichhelmforgeVerified publisher1.2.101 of 5See more

immich helmforge 1.2.10

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
stdlib@go1.18.2
1.26.9

Open the chart page →

13,216
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
golang.org/x/net@v0.38.0
stdlib@go1.25.3
0.60.0
1.26.9

Open the chart page →

3,470
komgahelmforgeVerified publisher1.4.161 of 1See more

komga helmforge 1.4.16

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gotson/komga:1.27.19cf102f5fb78
stdlib@go1.17.8
1.26.9

Open the chart page →

37,594
kubernetes-mcp-serverhelmforgeVerified publisher1.0.71 of 1See more

kubernetes-mcp-server helmforge 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/containers/kubernetes-mcp-server:v0.0.67e47f6ccc5347
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

311
listmonkhelmforgeVerified publisher1.1.143 of 3See more

listmonk helmforge 1.1.14

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9
listmonk/listmonk:v6.2.0f535d59e1499
golang.org/x/net@v0.47.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

3,709
medikeephelmforgeVerified publisher2.0.22 of 3See more

medikeep helmforge 2.0.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
stdlib@go1.19.8
1.26.9

Open the chart page →

6,699
memoshelmforgeVerified publisher2.0.21 of 2See more

memos helmforge 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
neosmemo/memos:0.31.024c2707ddd8f
golang.org/x/net@v0.58.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

509
metabasehelmforgeVerified publisher1.2.301 of 3See more

metabase helmforge 1.2.30

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

1,950
metrics-serverhelmforgeVerified publisher1.0.41 of 1See more

metrics-server helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

462
middlewarehelmforgeVerified publisher1.2.82 of 4See more

middleware helmforge 1.2.8

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9
middlewareeng/middleware:0.3.1747d880812f1
stdlib@go1.17.13
1.26.9

Open the chart page →

10,731
minecrafthelmforgeVerified publisher1.5.51 of 1See more

minecraft helmforge 1.5.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.2de5d1b1a83eb
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

5,168
mongodbhelmforgeVerified publisher1.8.21 of 1See more

mongodb helmforge 1.8.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mongo:8.3.11d731d77bfd7a
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,322
moodlehelmforgeVerified publisher1.1.31 of 2See more

moodle helmforge 1.1.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

7,283
mysqlhelmforgeVerified publisher2.0.41 of 1See more

mysql helmforge 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:26.7.09d48c42f8341
stdlib@go1.24.6
1.26.9

Open the chart page →

797

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
kubeshop/testkube-kubectl:1.37.15011b74081fa
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
kubeshop/testkube-logs-server:latest094186b19698
golang.org/x/net@v0.34.0
stdlib@go1.24.1
0.60.0
1.26.9
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
golang.org/x/net@v0.48.0
stdlib@go1.26.0
0.60.0
1.26.9
1
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
golang.org/x/net@v0.34.0
stdlib@go1.23.9
0.60.0
1.26.9
1
kubeshop/tracetest:v1.7.173d7e3a2db43
golang.org/x/net@v0.17.0
stdlib@go1.21.13
0.60.0
1.26.9
1
kubeskoop/agent:v1.0.0-rc.19031d9f74832
golang.org/x/net@v0.10.0
stdlib@go1.22.1
0.60.0
1.26.9
1
kubeskoop/controller:v1.0.0-rc.137a3eb73325d
golang.org/x/net@v0.10.0
stdlib@go1.22.1
0.60.0
1.26.9
1
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.15
0.60.0
1.26.9
1
kubesphere/fluent-operator:v1.0.2702df77228c6
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.16.6
0.60.0
1.26.9
1
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/net@v0.17.0
stdlib@go1.20.12
0.60.0
1.26.9
1
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/net@v0.23.0
stdlib@go1.18.10
0.60.0
1.26.9
1
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b
stdlib@go1.15.15
0.60.0
1.26.9
1
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.10
0.60.0
1.26.9
1
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.16.10
0.60.0
1.26.9
1
kubestar/event-exporter:latest656606941255
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9
1
kubestar/security-webhook:latest156d495afe77
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9
1
kubesuite/kubereport:latest0262424ee702
golang.org/x/net@v0.29.0
stdlib@go1.22.0
0.60.0
1.26.9
1
kubevious/ui:1.2.16233e84bdd59
golang.org/x/net@v0.0.0-20220812165438-1d4ff48094d1
stdlib@go1.19.1
0.60.0
1.26.9
1
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
golang.org/x/net@v0.37.0
stdlib@go1.24.2
0.60.0
1.26.9
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
golang.org/x/net@v0.49.0
stdlib@go1.25.5
0.60.0
1.26.9
1
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
1
kudobuilder/controller:v0.9.069072d979708
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13
0.60.0
1.26.9
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
golang.org/x/net@v0.7.0
stdlib@go1.21.1
0.60.0
1.26.9
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9
1
kusionstack/karpor:v0.6.4b707d3bf0abd
golang.org/x/net@v0.19.0
stdlib@go1.22.12
0.60.0
1.26.9
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
golang.org/x/net@v0.28.0
stdlib@go1.24.13
0.60.0
1.26.9
1
kusionstack/kusion:v0.14.0126c8f0b0976
golang.org/x/net@v0.31.0
stdlib@go1.22.10
0.60.0
1.26.9
1
kusionstack/operating:v0.5.0c28bd96b986b
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.60.0
1.26.9
1
kvalitetsit/go-loop:1.1.0d07f449d75ed
stdlib@go1.25.1
1.26.9
1
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.60.0
1.26.9
1
kvalitetsit/kitcaddy:1.5.110e66907ea266
golang.org/x/net@v0.55.0
stdlib@go1.26.6
0.60.0
1.26.9
1
kvalitetsit/metadoc-app:maine89e351733ad
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.19.5
0.60.0
1.26.9
1
kvalitetsit/metadoc-web:mainf57e7553f5bd
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16
0.60.0
1.26.9
1
kvalitetsit/myra-cert-manager-webhook:1.2.184ab59a1434e
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
kvalitetsit/nsp-prometheus-exporter:1.0.190b397ff954ec
stdlib@go1.15.3
1.26.9
1
kvalitetsit/oauth2-proxy-injector:1.5.00c906908d632
golang.org/x/net@v0.49.0
stdlib@go1.26.3
0.60.0
1.26.9
1
kvalitetsit/stakit-adapter-alertmanager:0.2.6838db1e90c6b
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9
1
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd
stdlib@go1.19.3
0.60.0
1.26.9
1
l7mp/stunner-auth-server:1.1.02f8114477ba6
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.60.0
1.26.9
1
l7mp/stunner-gateway-operator:1.2.10ea40a1d42d5
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.60.0
1.26.9
1
l7mp/stunner-gateway-operator-premium:1.2.14383766e66c5
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
l7mp/stunner-gateway-operator-premium:devb2726bf5547d
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
labs64/auditflow9c1bd414fcfb
stdlib@go1.26.7
1.26.9
1
labs64/checkout4009b8251b57
stdlib@go1.26.7
1.26.9
1
labs64/payment-gateway5421f763b53e
stdlib@go1.26.7
1.26.9
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9
1
langgenius/dify-api:1.16.1dcefa5f7c47c
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
langgenius/dify-ee-audit:3.9.8-ubi9e99aed151fc5
golang.org/x/net@v0.55.0
stdlib@go1.26.2
0.60.0
1.26.9
1
langgenius/dify-ee-collector:3.9.8-ubi9a9b91fd62c94
golang.org/x/net@v0.55.0
stdlib@go1.26.2
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.