StackRadar

CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,384
of 18,108 indexed, latest versions
Container images
6,227
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,384 of 18,108 indexed charts deploy, on 6,227 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,174
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,974
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-549w-3rfh-p826CGA-p3fp-cff9-hfhmDEBIAN-CVE-2026-78660GO-2026-6610
Also known as
CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending
Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,384 by stars
ChartLatestAffected imagesRadar Score
booklorehelmforgeVerified publisher2.0.21 of 3See more

booklore helmforge 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mariadb:13.0.2d4fdec0510ad
stdlib@go1.26.7
1.26.9

Open the chart page →

2,567
castopodhelmforgeVerified publisher1.2.102 of 3See more

castopod helmforge 1.2.10

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.60.0
1.26.9
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

10,845
certimatehelmforgeVerified publisher1.0.91 of 1See more

certimate helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
certimate/certimate:v0.4.34ff42541a047b
golang.org/x/net@v0.58.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

266
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

8,895
ckanhelmforgeVerified publisher1.3.102 of 6See more

ckan helmforge 1.3.10

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
stdlib@go1.18.1
1.26.9
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

11,625
cloudflaredhelmforgeVerified publisher1.5.171 of 1See more

cloudflared helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.3072c067d25cc
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

631
countlyhelmforgeVerified publisher1.2.82 of 3See more

countly helmforge 1.2.8

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
stdlib@go1.21.11
1.26.9
library/mongo:8.3.115d7043a4ffe0
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

75,959
dawarichhelmforgeVerified publisher1.0.32 of 4See more

dawarich helmforge 1.0.3

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
stdlib@go1.24.4
1.26.9
postgis/postgis:18-3.67e00e8c3539f
stdlib@go1.24.6
1.26.9

Open the chart page →

12,680
ddns-updaterhelmforgeVerified publisher1.4.121 of 1See more

ddns-updater helmforge 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
qmcgaw/ddns-updater:2.10.03e2aa558946b
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

581
discount-bandithelmforgeVerified publisher2.0.92 of 3See more

discount-bandit helmforge 2.0.9

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/net@v0.43.0
stdlib@go1.25.4
0.60.0
1.26.9
library/mysql:26.7.0ade067ae2fb1
stdlib@go1.24.6
1.26.9

Open the chart page →

36,265
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
library/zookeeper:3.9.5e6b279d01350
stdlib@go1.18.1
1.26.9

Open the chart page →

10,129
drupalhelmforgeVerified publisher1.2.151 of 2See more

drupal helmforge 1.2.15

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
stdlib@go1.24.6
1.26.9

Open the chart page →

4,540
entehelmforgeVerified publisher1.0.22 of 4See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

5,255
ghosthelmforgeVerified publisher1.2.102 of 3See more

ghost helmforge 1.2.10

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/ghost:6.65.090592b712b6b
stdlib@go1.24.6
1.26.9
library/mysql:8.4.110744ee5ef89c
stdlib@go1.24.6
1.26.9

Open the chart page →

3,929
ghostfoliohelmforgeVerified publisher1.0.11 of 4See more

ghostfolio helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

5,157
giteahelmforgeVerified publisher1.1.211 of 1See more

gitea helmforge 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gitea/gitea:1.27.3-rootless1c17ecaead42
golang.org/x/net@v0.56.0
stdlib@go1.26.7-X:jsonv2
0.60.0
1.26.9

Open the chart page →

913
github-mcp-serverhelmforgeVerified publisher1.0.31 of 1See more

github-mcp-server helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/github/github-mcp-server:v1.9.0881b53d6f75f
golang.org/x/net@v0.55.0
stdlib@go1.25.12
0.60.0
1.26.9

Open the chart page →

751
glancehelmforgeVerified publisher1.0.01 of 1See more

glance helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.69dfb09470b20
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

383
gophishhelmforgeVerified publisher0.1.61 of 1See more

gophish helmforge 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gophish/gophish:0.12.18a57cd171999
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

4,213
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
stdlib@go1.24.4
1.26.9

Open the chart page →

7,002
hoppscotchhelmforgeVerified publisher1.1.122 of 2See more

hoppscotch helmforge 1.1.12

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.2e7ba6061a286
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

2,702
immichhelmforgeVerified publisher1.2.101 of 5See more

immich helmforge 1.2.10

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
stdlib@go1.18.2
1.26.9

Open the chart page →

13,218
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
golang.org/x/net@v0.38.0
stdlib@go1.25.3
0.60.0
1.26.9

Open the chart page →

3,476
komgahelmforgeVerified publisher1.4.161 of 1See more

komga helmforge 1.4.16

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
gotson/komga:1.27.19cf102f5fb78
stdlib@go1.17.8
1.26.9

Open the chart page →

37,603
kubernetes-mcp-serverhelmforgeVerified publisher1.0.71 of 1See more

kubernetes-mcp-server helmforge 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/containers/kubernetes-mcp-server:v0.0.67e47f6ccc5347
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

318
listmonkhelmforgeVerified publisher1.1.143 of 3See more

listmonk helmforge 1.1.14

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie6737476511d4
stdlib@go1.24.6
1.26.9
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9
listmonk/listmonk:v6.2.0f535d59e1499
golang.org/x/net@v0.47.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

3,728
medikeephelmforgeVerified publisher2.0.22 of 3See more

medikeep helmforge 2.0.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
stdlib@go1.19.8
1.26.9

Open the chart page →

6,711
memoshelmforgeVerified publisher2.0.21 of 2See more

memos helmforge 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
neosmemo/memos:0.31.024c2707ddd8f
golang.org/x/net@v0.58.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

516
metabasehelmforgeVerified publisher1.2.301 of 3See more

metabase helmforge 1.2.30

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

1,955
metrics-serverhelmforgeVerified publisher1.0.41 of 1See more

metrics-server helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

469
middlewarehelmforgeVerified publisher1.2.82 of 4See more

middleware helmforge 1.2.8

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9
middlewareeng/middleware:0.3.1747d880812f1
stdlib@go1.17.13
1.26.9

Open the chart page →

10,742
minecrafthelmforgeVerified publisher1.5.51 of 1See more

minecraft helmforge 1.5.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.2de5d1b1a83eb
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

5,175
mongodbhelmforgeVerified publisher1.8.21 of 1See more

mongodb helmforge 1.8.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mongo:8.3.11d731d77bfd7a
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,329
moodlehelmforgeVerified publisher1.1.31 of 2See more

moodle helmforge 1.1.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

7,286
mysqlhelmforgeVerified publisher2.0.41 of 1See more

mysql helmforge 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/mysql:26.7.09d48c42f8341
stdlib@go1.24.6
1.26.9

Open the chart page →

804
netboxhelmforgeVerified publisher2.0.32 of 4See more

netbox helmforge 2.0.3

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
stdlib@go1.26.5
1.26.9

Open the chart page →

4,943
nextcloudhelmforgeVerified publisher2.0.01 of 3See more

nextcloud helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5a5a84b19854
stdlib@go1.24.6
1.26.9

Open the chart page →

7,790
ntfyhelmforgeVerified publisher1.2.21 of 1See more

ntfy helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.28.06ef4b819f722
golang.org/x/net@v0.58.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

408
oauth2-proxyhelmforgeVerified publisher1.0.61 of 1See more

oauth2-proxy helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.15.4b1b2021fe8f4
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

279
olivetinhelmforgeVerified publisher1.2.21 of 2See more

olivetin helmforge 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
jamesread/olivetin:3000.20.0f3066e207efd
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

738
opencuthelmforgeVerified publisher1.1.111 of 5See more

opencut helmforge 1.1.11

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixiefc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

3,808
openhumanhelmforgeVerified publisher1.0.01 of 1See more

openhuman helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.9

Open the chart page →

2,967
openreplayhelmforgeVerified publisher1.0.012 of 24See more

openreplay helmforge 1.0.0

12 of the 24 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
golang.org/x/net@v0.53.0
stdlib@go1.25.10
0.60.0
1.26.9
library/caddy:2.10.2-alpine4c6e91c6ed0e
golang.org/x/net@v0.42.0
stdlib@go1.25.0
0.60.0
1.26.9
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/openreplay/minio:20258cada3c9458a
golang.org/x/net@v0.52.0
minio@0.20251015.172955-r10
stdlib@go1.26.3
0.60.0
0.20260922.192518-r2
1.26.9
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
stdlib@go1.26.8
1.26.9
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
stdlib@go1.26.8
1.26.9
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
stdlib@go1.26.8
1.26.9
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
stdlib@go1.26.8
1.26.9

Open the chart page →

14,609
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
stdlib@go1.20.7
1.26.9

Open the chart page →

3,752
pimcorehelmforgeVerified publisher2.0.42 of 6See more

pimcore helmforge 2.0.4

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.9

Open the chart page →

3,435
pocket-idhelmforgeVerified publisher1.0.01 of 2See more

pocket-id helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

712
questdbhelmforgeVerified publisher1.0.01 of 1See more

questdb helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.9

Open the chart page →

158
reactive-resumehelmforgeVerified publisher1.0.02 of 4See more

reactive-resume helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.9

Open the chart page →

3,948
ryothelmforgeVerified publisher1.0.02 of 2See more

ryot helmforge 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
golang.org/x/net@v0.33.0
stdlib@go1.23.1
0.60.0
1.26.9

Open the chart page →

7,313
siyuanhelmforgeVerified publisher1.0.11 of 1See more

siyuan helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.5d740a1d3ed6b
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

407

Container images carrying it

6,227 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
qumine/ingress-controller:v0.8.5f2c8a2148381
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19
0.60.0
1.26.9
1
qumine/minecraft-server:v0.1.15c0b650d51132
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.19.4
0.60.0
1.26.9
1
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17
0.60.0
1.26.9
1
rabbitmqoperator/cluster-operator:2.19.2840be4bad78e
golang.org/x/net@v0.51.0
stdlib@go1.25.8
0.60.0
1.26.9
1
rabbitmqoperator/cluster-operator:2.6.08651dd3cec51
golang.org/x/net@v0.18.0
stdlib@go1.20.11
0.60.0
1.26.9
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
stdlib@go1.23.7
1.26.9
1
ralexstokes/eth2-fork-mon:latestc0d4bbefd31f
stdlib@go1.16.7
1.26.9
1
rancher/fleet:v0.16.231f39589e1f8
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/hardened-calico:v3.13.36d2cd61a338b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.60.0
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.60.0
1
rancher/hardened-cni-plugins:v1.4.0-build202401222581c5490bab
stdlib@go1.20.7
1.26.9
1
rancher/hardened-cni-plugins:v1.2.0-build202401084f0fd4a0201c
stdlib@go1.20.7
1.26.9
1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.60.0
1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.60.0
1
rancher/hardened-flannel:v0.24.0-build20240108de22a17107b6
golang.org/x/net@v0.18.0
stdlib@go1.20.7
0.60.0
1.26.9
1
rancher/hardened-multus-cni:v4.0.2-build202402087d0f41b72eb7
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.60.0
1.26.9
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.60.0
1
rancher/hardened-snapshot-controller:v8.6.0-build202609097b122b30e5c6
golang.org/x/net@v0.56.0
stdlib@go1.26.8-X:boringcrypto
0.60.0
1.26.9
1
rancher/hardened-traefik:v3.7.14-build20261009fa98374d7a17
golang.org/x/net@v0.59.0
0.60.0
1
rancher/harvester-cloud-provider:v0.2.95fb3954ccef4
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/harvester-csi-driver:v0.2.10eb75514c6979
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
rancher/helm-controller:v0.17.4946ae0d13229
golang.org/x/net@v0.55.0
stdlib@go1.25.12
0.60.0
1.26.9
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
golang.org/x/net@v0.13.0
stdlib@go1.20.8
0.60.0
1.26.9
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.19.2
0.60.0
1.26.9
1
rancher/kubectl:v1.25.085a0d1148784
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19
0.60.0
1.26.9
1
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.361eba82e9c386
golang.org/x/net@v0.38.0
stdlib@go1.26.3
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.329289da488b07
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.309b9148811700
golang.org/x/net@v0.27.0
stdlib@go1.23.1
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.16.6
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.16.15
0.60.0
1.26.9
1
rancher/local-path-provisioner:v0.0.37e757967a5ec3
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
golang.org/x/net@v0.26.0
stdlib@go1.22.8
0.60.0
1.26.9
1
rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4a071159e19cc
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
rancher/mirrored-library-traefik:2.9.40842af6afcdf
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.19.2
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-attacher:v4.11.0-20260428fe417c28a6b8
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
golang.org/x/net@v0.49.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-resizer:v2.1.0-2026042841cb674d1154
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-longhornio-csi-snapshotter:v8.5.0-202604281975fac3890f
golang.org/x/net@v0.49.0
stdlib@go1.25.9
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-csi-provisioner:v6.0.00c537015fe9c
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-controller:v6.1.0934863015367
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-validation-webhook:v8.1.067ca97fe362b
golang.org/x/net@v0.28.0
stdlib@go1.22.5
0.60.0
1.26.9
1
rancher/mirrored-sig-storage-snapshot-validation-webhook:v6.1.0deac027820ae
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18
0.60.0
1.26.9
1
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
golang.org/x/net@v0.52.0
stdlib@go1.24.13
0.60.0
1.26.9
1
rancher/pushprox-client:v0.1.0-rancher2-clienta41cd716c412
stdlib@go1.16.4
1.26.9
1
rancher/pushprox-proxy:v0.1.0-rancher2-proxy3126395b966c
stdlib@go1.16.4
1.26.9
1
rancher/system-upgrade-controller:v0.19.234fa058fe453
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.60.0
1.26.9
1
rancher/system-upgrade-controller:v0.18.09813f85653c8
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9
1
raspbernetes/csi-node-driver-registrar:2.0.1a552705225fd
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.13.15
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.