CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

qbittorrent-exporterkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

qbittorrent-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/martabal/qbittorrent-exporter :v2.0.1	ddf2bff9b357	stdlib@go1.26.3	1.26.9

Open the chart page →

682

scrutinykubernetes-homelab-helm-charts

0.2.2

2 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	983c696655e8	golang.org/x/net@v0.41.0 stdlib@go1.24.9	0.60.0 1.26.9
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

6,974

syncthingkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,654

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

1,898

umamikubernetes-homelab-helm-charts

0.1.0

1 of 3 See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

2,946

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

7,954

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	0b43204c37d6	golang.org/x/net@v0.58.0 stdlib@go1.26.5-X:boringcrypto	0.60.0 1.26.9

Open the chart page →

41,882

kubernetes-nmstatekubernetes-nmstate

0.87.0

1 of 1 See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/nmstate/kubernetes-nmstate-operator :v0.87.0	4dce694f01ea	golang.org/x/net@v0.56.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

854

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

4,406

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

1,826

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,475

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,408

servicegatewaykubernetes-replicator

2.3.3

1 of 1 See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mittwald/servicegateway :v2.3.3	fa948df30d44	stdlib@go1.21.5	1.26.9

Open the chart page →

1,278

kubernetesweeklykubernetesweekly

2.1.0

1 of 1 See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.60.0 1.26.9

Open the chart page →

2,531

kube-secrets-exporterkube-secrets-exporter

0.1.0

1 of 1 See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,119

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

3,404

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,464

kusk-gateway-apikubeshop

0.1.28

2 of 2 See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway-api :v1.5.4	126c713cf7d8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.60.0 1.26.9
kubeshop/kusk-gateway-api-websocket :v1.5.4	3b4f8345ca5c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,964

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	golang.org/x/net@v0.40.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

2,211

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/net@v0.34.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

2,054

testkube-operatorkubeshop

2.1.154

2 of 3 See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/kube-webhook-certgen :0.0.7	866827c379ae	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9
kubeshop/testkube-operator :2.1.154	def0d0f0d4ab	golang.org/x/net@v0.34.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

2,036

testkube-runnerkubeshop

2.14.1

1 of 1 See more

testkube-runner kubeshop 2.14.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.14.1	ce04897e5ea2	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

229

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

2,166

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,463

kubeskoopkubeskoop

1.0.2

2 of 2 See more

kubeskoop kubeskoop 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubeskoop/agent :v1.0.0-rc.1	9031d9f74832	golang.org/x/net@v0.10.0 stdlib@go1.22.1	0.60.0 1.26.9
kubeskoop/controller :v1.0.0-rc.1	37a3eb73325d	golang.org/x/net@v0.10.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

5,620

apisix-dashboardkubesphere

0.3.0

1 of 1 See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/apisix-dashboard :2.9.0	c010ea7d1694	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.15	0.60.0 1.26.9

Open the chart page →

3,728

apisix-ingress-controllerkubesphere

0.8.0

1 of 2 See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.13.8	0.60.0 1.26.9

Open the chart page →

3,648

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

4,140

gitlabkubesphere

4.2.3

6 of 17 See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.8	0.60.0 1.26.9
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.26.9

Open the chart page →

50,798

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.60.0 1.26.9
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.60.0 1.26.9
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

25,755

pvc-autoresizerkubesphere

0.1.0

1 of 1 See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesphere/pvc-autoresizer :v0.1	9a18a16c7b87	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

2,656

storageclass-accessorkubesphere

0.1.0

1 of 1 See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesphere/storageclass-accessor :v0.1.1	eac8f273a9b6	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

2,603

mongodbkubesphere-carryon-experimental

0.1.2

1 of 2 See more

mongodb kubesphere-carryon-experimental 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.26.9

Open the chart page →

10,986

aws-efs-csi-driverkubesphere-carryon-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

3,914

aws-fsx-csi-driverkubesphere-carryon-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-carryon-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.60.0 1.26.9

Open the chart page →

2,708

ccm-qingcloudkubesphere-carryon-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.9

Open the chart page →

2,395

cni-hostnickubesphere-carryon-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

3,632

csi-neonsankubesphere-carryon-test

1.2.8

6 of 6 See more

csi-neonsan kubesphere-carryon-test 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.60.0 1.26.9
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

26,042

csi-qingcloudkubesphere-carryon-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-carryon-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.60.0 1.26.9
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

19,250

curvefs-csikubesphere-carryon-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.60.0 1.26.9

Open the chart page →

4,145

hertzbeatkubesphere-carryon-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

8,580

mongodbkubesphere-carryon-test

0.3.2

1 of 2 See more

mongodb kubesphere-carryon-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.26.9

Open the chart page →

10,986

online-boutiquekubesphere-carryon-test

0.1.0

8 of 11 See more

online-boutique kubesphere-carryon-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

37,028

openelbkubesphere-carryon-test

0.2.4

2 of 2 See more

openelb kubesphere-carryon-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.60.0 1.26.9

Open the chart page →

6,655

porterkubesphere-carryon-test

0.2.2

1 of 2 See more

porter kubesphere-carryon-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9

Open the chart page →

3,993

skywalkingkubesphere-carryon-test

3.1.0

2 of 4 See more

skywalking kubesphere-carryon-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9

Open the chart page →

20,807

snapshot-controllerkubesphere-carryon-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-carryon-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

3,467

ccm-qingcloudkubesphere-stable

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.9

Open the chart page →

2,395

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

12,243

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

3,632

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
oryd/kratos :v26.2.0	2a13bb8d362c	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.60.0 1.26.9	1
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9	1
oryd/oathkeeper :v26.2.0	467329abde34	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.60.0 1.26.9	1
oryd/oathkeeper-maester :v0.1.14	0942e9fe9b1a	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	1
otel/opentelemetry-collector :0.153.0	6ed874ea083d	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
otel/opentelemetry-collector :0.100.0	9e36620d6c2c	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9	1
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.128.0	1ab0baba0ee3	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.160.0 :latest	799dc6cf12c9	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.154.0	b3079f45e19b	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.7	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.157.0	f2f01157055a	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9	1
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/net@v0.7.0 stdlib@go1.20	0.60.0 1.26.9	1
otiai10/ocrserver :latest	d338c767147d	stdlib@go1.15.9	1.26.9	1
outcoldsolutions/collectorforopenshift :26.04.5	5959c31596a0	stdlib@go1.26.8	1.26.9	1
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.26.9	1
outscale/osc-bsu-csi-driver :v1.12.0	63871940b621	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.26.9	1
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.60.0 1.26.9	1
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.60.0 1.26.9	1
owncloud/server :10.15.0	51d9b74fc2a8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.60.0 1.26.9	1
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.60.0 1.26.9	1
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.26.9	1
oxynozeta/s3-proxy :5.1.1	21115040e224	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.100.0.1	63801b40a4e9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.26.9	1
palopalepalo/jasperreports :8-v1.3	56b99b194d20	stdlib@go1.19.6	1.26.9	1
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.26.9	1
percona/everest-helmtools :0.0.1	904458d04a18	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	1
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/net@v0.57.0 stdlib@go1.26.2	0.60.0 1.26.9	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.60.0 1.26.9	1
percona/percona-postgresql-operator :3.1.0	a7c50ef1545e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.23.1	78c87b933e18	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	1
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1