CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,582

gitlab-agent-permissionedmlohr

1.69.0

1 of 1 See more

gitlab-agent-permissioned mlohr 1.69.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk :v19.4.2	0089e2261568	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

238

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.13	0.60.0 1.26.9

Open the chart page →

4,008

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.60.0 1.26.9

Open the chart page →

9,255

echoperatormmontes

0.0.2

1 of 1 See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

2,812

mariadbmmontes

0.3.0

1 of 1 See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.26.9

Open the chart page →

11,506

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.26.9

Open the chart page →

8,422

mogenius-agent-sandboxmogenius

1.2.1

1 of 1 See more

mogenius-agent-sandbox mogenius 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.4	c241245d7ff0	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

209

basic-git-servermoikot

0.0.2

1 of 1 See more

basic-git-server moikot 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.26.9

Open the chart page →

4,023

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

3,813

smartthings-metricsmoikot

0.1.0

1 of 1 See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.60.0 1.26.9

Open the chart page →

2,952

smartthings-metrics-feat-log-detailsmoikot

0.0.92

1 of 1 See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.60.0 1.26.9

Open the chart page →

2,933

docker-registrymoinologics

0.1.1

1 of 1 See more

docker-registry moinologics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/registry :2	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9

Open the chart page →

1,089

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/net@v0.7.0 stdlib@go1.18.7	0.60.0 1.26.9

Open the chart page →

3,399

account-lookup-servicemojaloop

13.0.0

1 of 4 See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

12,992

account-lookup-service-adminmojaloop

13.0.0

1 of 4 See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

12,992

admin-api-svcmojaloop

12.0.0

1 of 4 See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

13,453

backendmojaloop

0.1.0

5 of 6 See more

backend mojaloop 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.26.9
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.60.0 1.26.9
bitnamilegacy/mysql :8.4.5-debian-12-r0	7089d796fc9b	stdlib@go1.23.8	1.26.9
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.4	0.60.0 1.26.9
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.26.9

Open the chart page →

22,716

mojaloopmojaloop

14.0.0

1 of 6 See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

20,985

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.26.9

Open the chart page →

7,381

mollysocketmollysocket-wrenix

0.1.14

1 of 2 See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.3	c4a11ae9a1cb	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,928

eks-pod-identity-webhookmondu-ai

0.3.1

1 of 1 See more

eks-pod-identity-webhook mondu-ai 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

849

gar-credential-providermondu-ai

0.2.1

1 of 1 See more

gar-credential-provider mondu-ai 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	stdlib@go1.26.0	1.26.9

Open the chart page →

1,043

mongodb-admin-interfacemongo-db-admin-interface

0.1.0

1 of 2 See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :5.0	41108d183e97	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

6,102

enterprise-operatormongodb-helm-charts

1.33.0

1 of 1 See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

2,210

mongodb-query-exportermongodb-query-exporter

5.1.0

1 of 1 See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.26.9

Open the chart page →

1,573

mongodb-secure-backupmongodb-secure-backup

1.0.0

1 of 2 See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/net@v0.34.0 stdlib@go1.22.10	0.60.0 1.26.9

Open the chart page →

1,609

mongopingmongoping

1.3.1

1 of 1 See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,889

monitoringmonitoring

0.1.0

1 of 1 See more

monitoring monitoring 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jkaninda/grafana :11.0.0	8cfda26ecb7d	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9

Open the chart page →

2,557

moodlemoodle

2.0.0

2 of 2 See more

moodle moodle 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/mariadb :latest	354e5aec2045	stdlib@go1.26.8	1.26.9
cloudtooling/moodle :5.3.0.2	d3e3607acf56	stdlib@go1.26.4	1.26.9

Open the chart page →

5,243

cloudflare-tunnel-remotemoonswitch

0.1.4

1 of 1 See more

cloudflare-tunnel-remote moonswitch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	9b49eed8f628	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

632

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,125

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

11,605

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.60.0 1.26.9
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,552

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9

Open the chart page →

29,067

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

3,065

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,479

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

12,435

mosquitto-exportermosquitto-exporter

0.2.2

1 of 1 See more

mosquitto-exporter mosquitto-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/qaoru/mosquitto_exporter :2.0.0	2058ad337e19	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

217

chirpstackmosquitto-helm-chart

0.5.0

3 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.60.0 1.26.9
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0 stdlib@go1.19.3	0.60.0 1.26.9
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.26.9

Open the chart page →

105,059

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

2,873

replacermosquitto-helm-chart

0.2.0

2 of 3 See more

replacer mosquitto-helm-chart 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.60.0 1.26.9
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

6,041

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.60.0 1.26.9

Open the chart page →

3,309

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.26.9

Open the chart page →

5,453

ms-hello-webms-hello-test

0.1.0

1 of 1 See more

ms-hello-web ms-hello-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
irakli/ms-web-hello :latest	966a4bfefe27	stdlib@go1.19.2	1.26.9

Open the chart page →

1,457

adguard-homemt190502

4.0.12

2 of 2 See more

adguard-home mt190502 4.0.12

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.73	7fbf01d73ecb	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9
mikefarah/yq :latest	4b3d9475d655	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,676

codimdmt190502

7.2.2

1 of 3 See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,807

commafeedmt190502

8.2.0

1 of 3 See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	fc973eb97c9f	stdlib@go1.24.6	1.26.9

Open the chart page →

4,311

filestashmt190502

4.0.0

1 of 1 See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
machines/filestash :latest	aff504cd28a8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

3,802

ghostmt190502

8.25.1

2 of 3 See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/ghost :6.25.1	2654b1e90413	stdlib@go1.24.6	1.26.9
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

6,565

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.18	0.60.0 1.26.9	1
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.60.0 1.26.9	1
velero/velero :v1.18.4	c89fb5b6d1fd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
velero/velero-plugin-for-aws :v1.5.0	3d2ea7aab32d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.11	0.60.0 1.26.9	1
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
venturenox/redis :latest	83b471c193ba	stdlib@go1.22.9	1.26.9	1
venturenox/sagawise :latest	c11d32f18718	stdlib@go1.22.2	1.26.9	1
versity/versitygw :v1.8.0	30292fc2eeac	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.60.0 1.26.9	1
vespaengine/vespa :8.526.15	69b160f58211	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
victoriametrics/operator :v0.65.0	716b89a3ed79	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
victoriametrics/operator :v0.47.2	71be93cfafb6	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.60.0 1.26.9	1
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.60.0 1.26.9	1
victoriametrics/victoria-logs :v1.15.0-victorialogs	d7435244eb19	stdlib@go1.24.0	1.26.9	1
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.60.0 1.26.9	1
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9	1
victoriametrics/victoria-metrics :v1.34.7	b50d5c0153f9	stdlib@go1.14.1	1.26.9	1
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9	1
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
victoriametrics/vmestimator :v0.1.16	ccf603552de2	stdlib@go1.26.6	1.26.9	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.60.0 1.26.9	1
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125 stdlib@go1.16.5	0.60.0 1.26.9	1
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0 stdlib@go1.19.13	0.60.0 1.26.9	1
vmware/kube-fluentd-operator :latest	f028c138a5f4	golang.org/x/net@v0.17.0 stdlib@go1.21.7	0.60.0 1.26.9	1
voidxmh/golang :1.19-alpine-dev	423c6195fab2	stdlib@go1.19	1.26.9	1
voidxmh/xmh-auther :v1	93e42a569ca8	stdlib@go1.16.5	1.26.9	1
voidxmh/xmh-cacher :v1	1b7397412320	stdlib@go1.16.5	1.26.9	1
voidxmh/xmh-ui :v1	2ff3f2146547	stdlib@go1.16.5	1.26.9	1
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	stdlib@go1.13.6	1.26.9	1
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.60.0 1.26.9	1
volcanosh/vc-controller-manager :v1.16.0	9acedb8bb2e2	golang.org/x/net@v0.58.0 stdlib@go1.26.2	0.60.0 1.26.9	1
volcanosh/vc-scheduler :v1.16.0	157578510d40	golang.org/x/net@v0.58.0 stdlib@go1.26.2	0.60.0 1.26.9	1
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.60.0 1.26.9	1
volcanosh/vc-webhook-manager :v1.16.0	91bbd52a233d	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0 stdlib@go1.23.7	0.60.0 1.26.9	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.13.8	0.60.0 1.26.9	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.60.0 1.26.9	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.7	0.60.0 1.26.9	1
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.8	0.60.0 1.26.9	1
wagnermanganelli164/webserver-hello-world :0.3.0	d4ef27a4f180	stdlib@go1.22.5	1.26.9	1
wait4x/wait4x :3.3.1	4dcd86307de1	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9	1
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
wallarm/ebpf-agent :0.11.0-rc0	c8920e60c726	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9	1
wallarm/gateway-control-plane :0.2.0	a321bc974a19	stdlib@go1.24.13	1.26.9	1
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.60.0 1.26.9	1
wallarm/ingress-controller :4.8.0-1	a591b9c91570	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9	1