CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,373; of 18,117 indexed, latest versions
Container images: 6,208; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,150
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,957
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars

Chart

Latest

Affected images

Radar Score

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.60.0 1.26.9
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.9

Open the chart page →

12,316

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.60.0 1.26.9

Open the chart page →

4,347

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/net@v0.53.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,331

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,353

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,273

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.60.0 1.26.9

Open the chart page →

4,047

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/net@v0.42.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,875

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,377

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

6,937

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.9

Open the chart page →

9,317

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

7,639

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

11,961

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.60.0 1.26.9

Open the chart page →

4,198

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/net@v0.46.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

3,310

filebeatlog10x-elastic-helm-charts

1.5.1

1 of 1 See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
log10x/filebeat-10x :1.1.39-native	7d6a79dacd58	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.7	0.60.0 1.26.9

Open the chart page →

8,077

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,479

nightingalelogic3579

0.3.1

4 of 6 See more

nightingale logic3579 0.3.1

4 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.60.0 1.26.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.60.0 1.26.9

Open the chart page →

11,920

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,469

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.26.9

Open the chart page →

7,438

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/net@v0.20.0 stdlib@go1.21.13	0.60.0 1.26.9
logiqai/flash-discovery :v2.0.3	f5b551bca98e	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.18.9	0.60.0 1.26.9
logiqai/logiqctl :2.0.4	798306811f2d	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.7	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

22,266

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.26.9

Open the chart page →

4,041

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,304

loomwatchloomwatch

1.15.9

1 of 1 See more

loomwatch loomwatch 1.15.9

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/madduck-tech/loomwatch :1.15.9	8f08e7c84910	stdlib@go1.25.14	1.26.9

Open the chart page →

372

cloudflare-tunnel-remotelovemew67

0.1.2

1 of 1 See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	072c067d25cc	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

631

corednslovemew67

1.36.0

1 of 1 See more

coredns lovemew67 1.36.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
coredns/coredns :1.11.3	9caabbf6238b	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

1,783

oncall-hobbylovemew67

0.0.5

1 of 2 See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/redis :7.0.15	352c1fdadc91	stdlib@go1.18.2	1.26.9

Open the chart page →

7,255

loxilbloxilb

0.1.0

2 of 2 See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
ghcr.io/loxilb-io/loxilb :latest	a475b43946b3	golang.org/x/net@v0.55.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

5,916

lsdisklsdisk

2.0.7

3 of 4 See more

lsdisk lsdisk 2.0.7

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	golang.org/x/net@v0.25.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

7,250

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

3,547

fireflylsst-sqre

0.3.7

1 of 2 See more

firefly lsst-sqre 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/redis :5	fc5ecd863862	stdlib@go1.16.7	1.26.9

Open the chart page →

2,858

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.17.2	0.60.0 1.26.9
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

13,198

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.5	0.60.0 1.26.9

Open the chart page →

9,334

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,969

filebrowserluiscajl

0.0.1

1 of 1 See more

filebrowser luiscajl 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :latest	a469ea076d4a	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

455

plex-rclone-wireguardluiscajl

1.0.19

1 of 2 See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
linuxserver/plex :latest	06e07af2851e	stdlib@go1.26.7	1.26.9

Open the chart page →

731

xteveluiscajl

0.1.6

1 of 1 See more

xteve luiscajl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

5,501

lumenvox-external-serviceslumenvox

8.0.0

3 of 3 See more

lumenvox-external-services lumenvox 8.0.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :8.2.12	e0ce8c35124d	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9
library/postgres :17.5	aadf2c0696f5	stdlib@go1.18.2	1.26.9
library/rabbitmq :4.1.8-management	19c5ee40801d	stdlib@go1.22.2	1.26.9

Open the chart page →

9,016

ratelimitlumiumco

0.0.4

1 of 2 See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :a90e0e5d	5966cbc14d5d	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

1,574

lumovilumovi

1.21.0

1 of 1 See more

lumovi lumovi 1.21.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/lumovi/lumovi :1.21.0	947088240bb5	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

553

lynxpromptlynxprompt

0.1.4

1 of 3 See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

851

as212510-netm0nsterrr-as212510-net

4.0.3

1 of 1 See more

as212510-net m0nsterrr-as212510-net 4.0.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/m0nsterrr/as212510.net :v4.0.5	76a06f6a8371	stdlib@go1.27.1	1.27.2

Open the chart page →

148

qbittorrentm0nsterrr-qbittorrent

7.1.3

1 of 2 See more

qbittorrent m0nsterrr-qbittorrent 7.1.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :0.2.0	66c8d5c270eb	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

723

recyclarrm0nsterrr-recyclarr

2.7.3

1 of 1 See more

recyclarr m0nsterrr-recyclarr 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/recyclarr/recyclarr :8.7.3	9c6c74d52cfc	stdlib@go1.26.8	1.26.9

Open the chart page →

205

argusm0sh1-helm-charts

0.5.0

1 of 1 See more

argus m0sh1-helm-charts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
releaseargus/argus :0.29.0	e07088252d03	stdlib@go1.25.5	1.26.9

Open the chart page →

1,800

gitea-runnerm0sh1-helm-charts

0.2.3

2 of 2 See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.3.0	8368754bb612	golang.org/x/net@v0.45.0 stdlib@go1.26.0	0.60.0 1.26.9
library/docker :29.3.0-dind-alpine3.23	1ba18449911d	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

5,272

wudm0sh1-helm-charts

0.2.0

1 of 1 See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
getwud/wud :8.1.1	b1cd01c43839	stdlib@go1.15.15	1.26.9

Open the chart page →

8,091

whoamim11s

0.3.0

1 of 1 See more

whoami m11s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.12.0	c4717a8d1f01	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

357

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	stdlib@go1.20.4	1.26.9

Open the chart page →

1,984

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	stdlib@go1.19.7	1.26.9
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,063

magistralamagistrala-devops

0.16.2

17 of 42 See more

magistrala magistrala-devops 0.16.2

17 of the 42 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
authzed/spicedb :latest	aa96009a0477	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.26.9
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
library/nats :2.10.17-alpine	b7752304692b	stdlib@go1.22.4	1.26.9
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.15.0	5b21830a9e9d	stdlib@go1.22.4	1.26.9
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9
timescale/timescaledb :latest-pg12	645fd9e92d76	stdlib@go1.18.7	1.26.9
ghcr.io/absmach/magistrala/re :latest	0257a658a108	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2
ghcr.io/absmach/magistrala/ui-backend :latest	b3986672fa02	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

34,769

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.26.9	1
yidadaa/chatgpt-next-web :latest	eaaa469ddeeb	stdlib@go1.20.12	1.26.9	1
ymuski/geo-checker :5.0.0	5ba7fd8c7bdc	stdlib@go1.25.3	1.26.9	1
yonahdissen/kor :latest	1a85158c82bb	golang.org/x/net@v0.57.0 stdlib@go1.26.0	0.60.0 1.26.9	1
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	golang.org/x/net@v0.10.0 stdlib@go1.26.1	0.60.0 1.26.9	1
yukimochi/activity-relay :v2.0.11	5798afb69216	stdlib@go1.25.12	1.26.9	1
yungwood/ical-filter-proxy :0.3.1	ddc3f30ab05f	stdlib@go1.26.5	1.26.9	1
yungwood/synergy-wholesale-exporter :0.1.1	054dce85989b	stdlib@go1.26.5	1.26.9	1
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.60.0 1.26.9	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.60.0 1.26.9	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.26.9	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9	1
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	golang.org/x/net@v0.50.0 stdlib@go1.26.1	0.60.0 1.26.9	1
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	stdlib@go1.20.5	1.26.9	1
zeetdev/tailscale-relay :v1.24.2	1967aa2840b6	golang.org/x/net@v0.0.0-20220407224826-aac1ed45d8e3 stdlib@go1.18.1-ts710a0d8610	0.60.0 1.26.9	1
zer0tonin/mikochi :1.12.1	654af3e65245	stdlib@go1.26.7	1.26.9	1
zooproject/zoo-project :dru-51e7d55383f24594959b69e58518961c6aa66740	da112e8d03f1	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.60.0 1.26.9	1
zufardhiyaulhaq/devopsweekly :v2.1.0	46625567fb60	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.17.13	0.60.0 1.26.9	1
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.17.12	0.60.0 1.26.9	1
zufardhiyaulhaq/istio-ratelimit-operator :v2.15.0	692cfc9d6614	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.60.0 1.26.9	1
zufardhiyaulhaq/javascriptweekly :v2.1.0	86424bd0b2a4	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9	1
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.60.0 1.26.9	1
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.60.0 1.26.9	1
zufardhiyaulhaq/nodejsweekly :v1.1.0	306859a3f167	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.40.0	135327c978de	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.13.15	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9	1
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.5	0.60.0 1.26.9	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.60.0 1.26.9	1
gcr.io/datadoghq/cluster-agent :7.61.0	6efe04ba4e06	golang.org/x/net@v0.33.0 stdlib@go1.22.8	0.60.0 1.26.9	1
gcr.io/datadoghq/csi-driver :1.4.0	86c713de81d9	golang.org/x/net@v0.57.0 stdlib@go1.25.12	0.60.0 1.26.9	1
gcr.io/datadoghq/observability-pipelines-worker :2.23.2	2f3d6f2d0015	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
gcr.io/datadoghq/private-action-runner :v1.21.0	5f5918f843a4	stdlib@go1.25.8	1.26.9	1
gcr.io/etcd-development/etcd :v3.7.2	7c6c239825d0	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
gcr.io/etcd-development/etcd :v3.5.9	8c956d9b0d39	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.60.0 1.26.9	1
gcr.io/gke-release/custom-metrics-stackdriver-adapter :v0.13.1-gke.0	6937c0a9b203	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.19.3	0.60.0 1.26.9	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
gcr.io/google.com/cloudsdktool/google-cloud-cli :alpine	7002c0b3cec5	stdlib@go1.26.6	1.26.9	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.60.0 1.26.9	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.60.0 1.26.9	1
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.60.0 1.26.9	1
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	golang.org/x/net@v0.3.0 stdlib@go1.20.5	0.60.0 1.26.9	1
gcr.io/k8s-staging-sig-storage/objectstorage-controller :v20221027-v0.1.1-8-g300019f	a84b574e8027	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
gcr.io/kasten-images/aggregatedapis :9.0.7	9a189cf0aff8	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/auth :9.0.7	16efe4c210e0	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/bloblifecyclemanager :9.0.7	83f7c06dc4d1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/catalog :9.0.7	0ea3df63f5b6	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1