CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78660 GO-2026-6610
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

zabbixcetic

3.1.3

3 of 5 See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :14	c2427de38f99	stdlib@go1.24.6	1.26.9
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.60.0 1.26.9
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9

Open the chart page →

37,570

chatwootchatwoot

2.0.27

2 of 3 See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.26.9
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.26.9

Open the chart page →

8,831

plugin-barman-cloudcloudnative-pg

0.8.1

1 of 1 See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud :v0.15.1	c75acad19a36	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

211

csi-driver-smbcsi-driver-smb

1.20.3

5 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

4,876

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,307

flux-operatorflux-operator

0.61.0

1 of 1 See more

flux-operator flux-operator 0.61.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/controlplaneio-fluxcd/flux-operator :v0.61.0	71041d9fff7f	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

212

gadgetgadget

0.56.1

1 of 1 See more

gadget gadget 0.56.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/inspektor-gadget/inspektor-gadget :v0.56.1	d1c34335183b	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

297

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.26.9

Open the chart page →

9,061

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.26.9

Open the chart page →

7,625

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
google/cloud-sdk :alpine	ef78619c8239	stdlib@go1.26.6	1.26.9

Open the chart page →

9,034

hpe-csi-driverhpe-storage

3.3.0

13 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

13 of the 14 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

5,270

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

3,119

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

2,045

trident-operatornetapp-trident

100.2606.2

1 of 1 See more

trident-operator netapp-trident 100.2606.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
netapp/trident-operator :26.06.2	4cef5a737bcf	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

ngrok-operatorngrok

0.24.0

2 of 2 See more

ngrok-operator ngrok 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
ngrok/ngrok-operator :0.22.0	db8e6fecc52c	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

596

openbaoopenbao

0.30.1

2 of 2 See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/openbao/openbao :2.7.0	71156a1c6623	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,861

prometheus-snmp-exporterprometheus-community

9.18.1

1 of 1 See more

prometheus-snmp-exporter prometheus-community 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

933

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

6,981

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

3,180

trivytrivy-operator

0.27.0

1 of 1 See more

trivy trivy-operator 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.75.0	af6acf9a6b85	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

312

zotzot

0.1.128

1 of 1 See more

zot zot 0.1.128

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.22	96cda11459ce	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

572

aws-ebs-csi-driveraws-ebs-csi-driver

2.66.1

5 of 6 See more

aws-ebs-csi-driver aws-ebs-csi-driver 2.66.1

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/csi-components/csi-attacher :v4.12.0-eksbuild.9	f8db68b6e3b3	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.17.0-eksbuild.8	9be2a65725f7	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-provisioner :v6.3.0-eksbuild.8	2fdf13756ccb	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-resizer :v2.2.1-eksbuild.7	a2895cc5206d	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.66.1	3ae75c8b0fdc	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,017

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

14,352

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

3,828

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

9,232

netbirdjaconi

0.15.1

4 of 4 See more

netbird jaconi 0.15.1

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/golang :latest	e0174e51e812	stdlib@go1.27.1	1.27.2
netbirdio/management :0.45.1	0c9994b393ea	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/relay :0.45.1	872e3add0e1e	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/signal :0.45.1	46ce5a45538f	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

10,557

k8upk8up

4.10.0

1 of 1 See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.16.0	29458113b8b6	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,092

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

1,092

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

6,367

localstacklocalstack

0.7.1

1 of 1 See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
localstack/localstack-pro :latest	801a3dff7f6a	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:nojsonv2	0.60.0 1.27.2

Open the chart page →

2,268

gotenbergmaikumori

1.25.0

1 of 1 See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

15,373

renovate-operatormogenius

6.4.0

2 of 2 See more

renovate-operator mogenius 6.4.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mogenius/renovate-operator :6.4.0	e8f023764de4	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

436

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	golang.org/x/net@v0.40.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

7,311

oneuptimeoneuptime

14.0.42

1 See more

oneuptime oneuptime 14.0.42

1 container image this version deploys carries CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

—

open-feature-operatoropen-feature-operator

0.9.3

1 of 1 See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

391

postgres-operatorpostgres-operator

2.0.3

1 of 1 See more

postgres-operator postgres-operator 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

281

telepresence-osstelepresence-oss

2.32.2

1 of 2 See more

telepresence-oss telepresence-oss 2.32.2

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/telepresenceio/tel2 :2.32.2	96f5a0f413b1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,001

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.26.9

Open the chart page →

7,386

karmawiremind

2.13.1

1 of 1 See more

karma wiremind 2.13.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.131	90a10c5c6793	stdlib@go1.26.3	1.26.9

Open the chart page →

361

yugabyteyugabyte

2026.1.2

1 of 1 See more

yugabyte yugabyte 2026.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

437

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,752

autheliaauthelia

0.11.22

1 of 1 See more

authelia authelia 0.11.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

8,166

camel-kcamel-k

2.11.0

1 of 1 See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/camel-k :2.11.0	d173e7efe258	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,859

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,737

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

2,352

flagsmithflagsmith

0.83.0

1 of 4 See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,492

gitlab-operatorgitlab

3.4.1

1 of 1 See more

gitlab-operator gitlab 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :3.4.1	96efaea0d3bb	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

222

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

5,414

beylagrafana

1.16.11

1 of 1 See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/beyla :3.32.0	3ff0f7cf2bbf	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

426

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.18	0.60.0 1.26.9	1
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.60.0 1.26.9	1
velero/velero :v1.18.4	c89fb5b6d1fd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
velero/velero-plugin-for-aws :v1.5.0	3d2ea7aab32d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.11	0.60.0 1.26.9	1
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
venturenox/redis :latest	83b471c193ba	stdlib@go1.22.9	1.26.9	1
venturenox/sagawise :latest	c11d32f18718	stdlib@go1.22.2	1.26.9	1
versity/versitygw :v1.8.0	30292fc2eeac	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.60.0 1.26.9	1
vespaengine/vespa :8.526.15	69b160f58211	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
victoriametrics/operator :v0.65.0	716b89a3ed79	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
victoriametrics/operator :v0.47.2	71be93cfafb6	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.60.0 1.26.9	1
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.60.0 1.26.9	1
victoriametrics/victoria-logs :v1.15.0-victorialogs	d7435244eb19	stdlib@go1.24.0	1.26.9	1
victoriametrics/victoria-metrics :v1.153.0-scratch	2d1e194f8b0d	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
victoriametrics/victoria-metrics :v1.153.0	5eff7af5341e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.60.0 1.26.9	1
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9	1
victoriametrics/victoria-metrics :v1.34.7	b50d5c0153f9	stdlib@go1.14.1	1.26.9	1
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9	1
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
victoriametrics/vmauth :v1.153.0	4ebf2f21490d	stdlib@go1.27.1	1.27.2	1
victoriametrics/vmestimator :v0.1.16	ccf603552de2	stdlib@go1.26.6	1.26.9	1
victoriametrics/vminsert :v1.153.0-cluster	629d128af12f	stdlib@go1.27.1	1.27.2	1
victoriametrics/vmselect :v1.153.0-cluster	3a593a1d02f7	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
victoriametrics/vmstorage :v1.153.0-cluster	83e67bde1b2a	stdlib@go1.27.1	1.27.2	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.60.0 1.26.9	1
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125 stdlib@go1.16.5	0.60.0 1.26.9	1
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0 stdlib@go1.19.13	0.60.0 1.26.9	1
vmware/kube-fluentd-operator :latest	f028c138a5f4	golang.org/x/net@v0.17.0 stdlib@go1.21.7	0.60.0 1.26.9	1
voidxmh/golang :1.19-alpine-dev	423c6195fab2	stdlib@go1.19	1.26.9	1
voidxmh/xmh-auther :v1	93e42a569ca8	stdlib@go1.16.5	1.26.9	1
voidxmh/xmh-cacher :v1	1b7397412320	stdlib@go1.16.5	1.26.9	1
voidxmh/xmh-ui :v1	2ff3f2146547	stdlib@go1.16.5	1.26.9	1
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	stdlib@go1.13.6	1.26.9	1
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.60.0 1.26.9	1
volcanosh/vc-controller-manager :v1.15.3	9063355ee23b	golang.org/x/net@v0.55.0 stdlib@go1.25.0	0.60.0 1.26.9	1
volcanosh/vc-scheduler :v1.15.3	7e9875e5897f	golang.org/x/net@v0.55.0 stdlib@go1.25.0	0.60.0 1.26.9	1
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.60.0 1.26.9	1
volcanosh/vc-webhook-manager :v1.15.3	9231c5626249	golang.org/x/net@v0.55.0 stdlib@go1.25.5	0.60.0 1.26.9	1
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0 stdlib@go1.23.7	0.60.0 1.26.9	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.13.8	0.60.0 1.26.9	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.60.0 1.26.9	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.7	0.60.0 1.26.9	1
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.8	0.60.0 1.26.9	1
wagnermanganelli164/webserver-hello-world :0.3.0	d4ef27a4f180	stdlib@go1.22.5	1.26.9	1