StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
teredixteredix0.0.21 of 1See more

teredix teredix 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/shaharia-lab/teredix:0.0.2ec727be4417a
stdlib@go1.21.5
1.26.9

Open the chart page →

1,605
terminusterminusVerified publisher1.1.01 of 1See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
golang.org/x/net@v0.51.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

1,115
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

6,617
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
stdlib@go1.20.7
1.26.9

Open the chart page →

32,302
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
stdlib@go1.20.12
1.26.9

Open the chart page →

31,797
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
stdlib@go1.20.12
1.26.9

Open the chart page →

32,298
gmctest-opea1.0.01 of 1See more

gmc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
opea/gmcmanager:1.0514af17c495c
golang.org/x/net@v0.25.0
stdlib@go1.21.13
0.60.0
1.26.9

Open the chart page →

1,065
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
stdlib@go1.19.12
1.26.9

Open the chart page →

24,177
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ecadlabs/tezos_exporter:latest4bcbe5d1cdd2
stdlib@go1.16.5
1.26.9

Open the chart page →

6,424
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.42 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
pysga1996/redis:latest3af6d0c7db19
stdlib@go1.18.2
1.26.9

Open the chart page →

6,297
local-path-provisionerth-chartsVerified publisher0.0.291 of 1See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
golang.org/x/net@v0.27.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

1,866
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
golang.org/x/net@v0.38.0
stdlib@go1.23.11
0.60.0
1.26.9

Open the chart page →

1,920
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9

Open the chart page →

11,609
ping-exporterth-chartsVerified publisher0.1.11 of 1See more

ping-exporter th-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

1,887
prusa-exporterth-chartsVerified publisher0.3.01 of 1See more

prusa-exporter th-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
pubeldev/prusa_exporter:2.0.01091665a020a
stdlib@go1.25.5
1.26.9

Open the chart page →

1,255
the0the0Verified publisher0.15.04 of 9See more

the0 the0 0.15.0

4 of the 9 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mongo:7-jammy6200825c6ed5
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.26.9
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.9
pgsty/silo:RELEASE.2026-09-16T00-00-00Z635197cb9f36
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

7,311
trafficlight-apithecampagnards0.1.11 of 1See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
thecampagnards/trafficlight-api:main7dca9d973837
stdlib@go1.16.4
1.26.9

Open the chart page →

5,659
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
stdlib@go1.18.2
1.26.9

Open the chart page →

1,935
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
stdlib@go1.18.2
1.26.9

Open the chart page →

29,874
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
system-upgrade-controllerthis-is-tobi-helm-chartsVerified publisher0.1.01 of 1See more

system-upgrade-controller this-is-tobi-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.261b68d4372ba
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

226
mc-routerthl-chartsVerified publisher0.1.01 of 1See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
itzg/mc-router:1.16.1bb552b59fb53
golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf
stdlib@go1.18.4
0.60.0
1.26.9

Open the chart page →

2,774
monitoringthl-chartsVerified publisher0.1.18 of 10See more

monitoring thl-charts 0.1.1

8 of the 10 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4
stdlib@go1.17.9
0.60.0
1.26.9
grafana/loki:2.5.0f9ef133793af
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.8
0.60.0
1.26.9
grafana/promtail:2.4.2626900031c4e
golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3
stdlib@go1.17.2
0.60.0
1.26.9
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.9
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.16.9
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985
stdlib@go1.16.7
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.17.3
0.60.0
1.26.9
quay.io/prometheus/prometheus:v2.34.0b37103e03399
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

28,163
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
tile38tile380.6.11 of 2See more

tile38 tile38 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
tile38/tile38:1.38.05b61c6f3b32e
golang.org/x/net@v0.48.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

747
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.11
0.60.0
1.26.9

Open the chart page →

8,874
tiny-api-charttiny-api1.0.01 of 1See more

tiny-api-chart tiny-api 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
stubin87/tiny-api:v1.1.02e5c42e92ec8
stdlib@go1.19.1
1.26.9

Open the chart page →

1,857
tlsa-dnsendpoint-controllertlsa-dnsendpoint-controllerVerified publisher0.2.61 of 1See more

tlsa-dnsendpoint-controller tlsa-dnsendpoint-controller 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/oscrx/tlsa-dnsendpoint-controllerdigest-pinnedddd9b71b2d98
golang.org/x/net@v0.58.0
0.60.0

Open the chart page →

61
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.3
0.60.0
1.26.9

Open the chart page →

4,471
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

4,119
prometheustnh11.6.04 of 6See more

prometheus tnh 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.5
0.60.0
1.26.9
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.14.4
0.60.0
1.26.9
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.26.9
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.60.0
1.26.9

Open the chart page →

13,422
todolist-charttodolist-chart0.1.77 of 10See more

todolist-chart todolist-chart 0.1.7

7 of the 10 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
erenozcan17/go_backend:v4.250b4f23422b6
golang.org/x/net@v0.10.0
stdlib@go1.23.12
0.60.0
1.26.9
grafana/grafana:latestb28bae15e219
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9
quay.io/prometheus/blackbox-exporter:latest9613f2884689
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
quay.io/prometheus/mysqld-exporter:latestabed8dac117b
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/prometheus/node-exporter:latest1b4e4438faca
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

8,302
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.60.0
1.26.9

Open the chart page →

1,769
netbirdtotmicro1.8.23 of 4See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
golang.org/x/net@v0.42.0
stdlib@go1.23.12
0.60.0
1.26.9
netbirdio/relay:0.60.2a10762533793
golang.org/x/net@v0.42.0
stdlib@go1.23.12
0.60.0
1.26.9
netbirdio/signal:0.60.267176bcbf6ab
golang.org/x/net@v0.42.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

8,007
hub-managertraefikVerified publisher1.0.11 of 1See more

hub-manager traefik 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/traefik/hub-manager:v0.45.371002c4f48cb
golang.org/x/net@v0.57.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

903
traefik-jwt-decodetraefik-jwt-decode0.1.01 of 1See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
simonschneider/traefik-jwt-decode:latestd674ac370f80
stdlib@go1.17.13
1.26.9

Open the chart page →

2,068
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

2,131
ats-ingresstrafficserver-ingress-controller0.1.01 of 1See more

ats-ingress trafficserver-ingress-controller 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/apache/ats-ingress:latest2d4d776f6362
golang.org/x/net@v0.55.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

634
traktortraktorVerified publisher0.0.171 of 1See more

traktor traktor 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gdxbsv/traktor:0.0.17675693335054
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

778
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
golang.org/x/net@v0.4.0
stdlib@go1.18.4
0.60.0
1.26.9

Open the chart page →

3,226
transparent-chart-hosted-repositorytransparencyVerified publisher0.1.21 of 1See more

transparent-chart-hosted-repository transparency 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
bitnami/nginx:latestb8d42f076789
stdlib@go1.26.8
1.26.9

Open the chart page →

170
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:17c6222b54873a
stdlib@go1.24.6
1.26.9

Open the chart page →

1,819
treenitytreenityVerified publisher0.1.32 of 4See more

treenity treenity 0.1.3

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/nats:2.9.6-alpine3.16f576cdc17cc3
stdlib@go1.19.3
1.26.9
library/postgres:14ceef4a62198b
stdlib@go1.24.6
1.26.9

Open the chart page →

4,117
cicd-proxytremolo1.0.121 of 1See more

cicd-proxy tremolo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13c5153b5f079c
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

780
orchestratremolo3.1.582 of 5See more

orchestra tremolo 3.1.58

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13076a87738b13
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

3,229
orchestra-kube-oidc-proxytremolo1.0.211 of 1See more

orchestra-kube-oidc-proxy tremolo 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13076a87738b13
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

734
trickstertricksterVerified publisher2.1.01 of 1See more

trickster trickster 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/trickstercache/trickster:2d7a4d4f2b10f
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

219
trident-protecttrident-protect100.2606.02 of 2See more

trident-protect trident-protect 100.2606.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
netapp/controller:26.06.08235a77cfc92
golang.org/x/net@v0.54.0
stdlib@go1.26.4
0.60.0
1.26.9
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
golang.org/x/net@v0.40.0
stdlib@go1.24.12
0.60.0
1.26.9

Open the chart page →

2,187
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview3 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
golang.org/x/net@v0.39.0
stdlib@go1.24.9
0.60.0
1.26.9
netapp/trident-protect-connector:25.11.0-bxp-previewec22fc6e5c5a
golang.org/x/net@v0.38.0
stdlib@go1.24.9
0.60.0
1.26.9
netapp/trident-protect-utils:v1.0.058b9fac358bd
golang.org/x/net@v0.38.0
stdlib@go1.24.8
0.60.0
1.26.9

Open the chart page →

3,566

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
obolnetwork/charon-dkg-sidecar:main87902178f0e7
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/net@v0.21.0
stdlib@go1.22.5
0.60.0
1.26.9
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/net@v0.0.0-20220513224357-95641704303c
stdlib@go1.18.2
0.60.0
1.26.9
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.60.0
1.26.9
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
golang.org/x/net@v0.21.0
stdlib@go1.21.10
0.60.0
1.26.9
1
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.26.9
1
okteto/civo-webhook:0.5.357cd51176538
golang.org/x/net@v0.15.0
stdlib@go1.21.3
0.60.0
1.26.9
1
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.26.9
1
oliver006/redis_exporter:v1.67.0120f7ec77293
stdlib@go1.23.4
1.26.9
1
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.26.9
1
oliver006/redis_exporter:v1.66.0d98e6db8094f
stdlib@go1.23.2
1.26.9
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
stdlib@go1.26.1
1.26.9
1
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.16.3
0.60.0
1.26.9
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.17.2
0.60.0
1.26.9
1
ondrejsika/counter:latestd95eaeee2172
golang.org/x/net@v0.46.0
stdlib@go1.26.2
0.60.0
1.26.9
1
oneuptime/runner:release923154fcf6a9
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
onkar17/grafana:latestaef3ebd6e24e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.1
0.60.0
1.26.9
1
opea/codegen-ui:1.02bee4eb66f3e
stdlib@go1.20.7
1.26.9
1
opea/codetrans-ui:1.03ef121f34610
stdlib@go1.20.12
1.26.9
1
opea/docsum-ui:1.07f854e9bffaf
stdlib@go1.20.12
1.26.9
1
opea/gmcmanager:1.0514af17c495c
golang.org/x/net@v0.25.0
stdlib@go1.21.13
0.60.0
1.26.9
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
golang.org/x/net@v0.55.0
stdlib@go1.25.11
0.60.0
1.26.9
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.5
0.60.0
1.26.9
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
stdlib@go1.19.8
1.26.9
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
stdlib@go1.24.4
1.26.9
1
opencsghq/csghub-portal:v2.5.1-eed28266bae753
golang.org/x/net@v0.28.0
stdlib@go1.23.3
0.60.0
1.26.9
1
opencsghq/csghub-server:v2.5.1-ee20fbb6ea62a9
golang.org/x/net@v0.57.0
stdlib@go1.26.0
0.60.0
1.26.9
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
golang.org/x/net@v0.39.0
stdlib@go1.24.10
0.60.0
1.26.9
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
golang.org/x/net@v0.29.0
stdlib@go1.22.7
0.60.0
1.26.9
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
opencsghq/kube-state-metrics:v2.19.15ea147562ec8
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
opencsghq/lws:v0.6.1de15437db41b
golang.org/x/net@v0.37.0
stdlib@go1.24.0
0.60.0
1.26.9
1
opencsghq/minio:RELEASE.2025-09-07T16-13-09Z47f08843cf13
golang.org/x/net@v0.39.0
stdlib@go1.24.6
0.60.0
1.26.9
1
opencsghq/prometheus:v3.13.00aac0d04749e
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
opencsghq/prometheus-config-reloader:v0.92.144e6ec00729b
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
opendatacube/ows:latest668cbb41473c
stdlib@go1.22.2
1.26.9
1
openebs/lvm-driver:1.10.141f73aba7f31
golang.org/x/net@v0.48.0
stdlib@go1.24.7
0.60.0
1.26.9
1
openebs/provisioner-nfs:0.11.04f41dd782761
golang.org/x/net@v0.10.0
stdlib@go1.19.13
0.60.0
1.26.9
1
openebs/zfs-driver:2.11.20234692bb4a4
golang.org/x/net@v0.55.0
stdlib@go1.26.2
0.60.0
1.26.9
1
openenergyprojects/modbus_exporter:20230617_a14455158990f24fb25
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.60.0
1.26.9
1
openfga/openfga:v1.18.036097b960f66
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
openfga/openfga:v1.9.25e94966c11df
golang.org/x/net@v0.40.0
stdlib@go1.24.5
0.60.0
1.26.9
1
openkruise/agent-sandbox-controller:v0.6.02d5687595a31
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
golang.org/x/net@v0.43.0
stdlib@go1.23.4
0.60.0
1.26.9
1
openkruise/kruise-manager:v1.8.30482722b4e56
golang.org/x/net@v0.33.0
stdlib@go1.22.11
0.60.0
1.26.9
1
openkruise/kruise-manager:v1.9.1f81ae78a36a4
golang.org/x/net@v0.38.0
stdlib@go1.23.9
0.60.0
1.26.9
1
openkruise/kruise-rollout:v0.6.2a75e6739ea7d
golang.org/x/net@v0.7.0
stdlib@go1.19.13
0.60.0
1.26.9
1
openkruise/kruise-state-metrics:v0.2.0a8108f771287
golang.org/x/net@v0.8.0
stdlib@go1.18.10
0.60.0
1.26.9
1
openkruise/sandbox-gateway:v0.6.0bebea74bff03
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9
1
openkruise/sandbox-manager:v0.6.01ab2dbfebc9d
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.