CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

seafileschmitzis

13.0.13

2 of 4 See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
seafileltd/notification-server :13.0.21	1cac4101d0f4	stdlib@go1.26.2	1.26.9

Open the chart page →

44,556

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

4,267

vikunjaschmitzis

1.0.0

1 of 3 See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,205

koffanschoenwald

0.1.8

1 of 1 See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.9

Open the chart page →

174

minifluxschoenwald

0.1.6

1 of 1 See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

540

uptime-kumaschoenwald

1.0.10

1 of 1 See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,659

yopassschoenwald

1.1.0

1 of 2 See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2

Open the chart page →

547

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,253

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

61,619

restic-serverschoolguys-helmcharts

0.3.1

1 of 1 See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9

Open the chart page →

3,008

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,471

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,253

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.60.0 1.26.9

Open the chart page →

14,661

seafileseafile

0.12.1

1 of 1 See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.26.9

Open the chart page →

77,269

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

5,847

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,413

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.26.9

Open the chart page →

3,974

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,411

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

3,345

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9

Open the chart page →

1,555

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.26.9
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.26.9

Open the chart page →

7,672

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

789

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,439

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,735

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,270

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,722

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9

Open the chart page →

1,749

nucleisecurecodebox-nuclei

5.2.0

1 of 1 See more

nuclei securecodebox-nuclei 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
projectdiscovery/nuclei :v3.5.1	d76713284ad0	golang.org/x/net@v0.46.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,604

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

400

trivysecurecodebox-trivy

5.9.0

1 of 1 See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

838

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,010

security-webhooksecurity-webhook

0.0.14

1 of 1 See more

security-webhook security-webhook 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
kubestar/security-webhook :latest	156d495afe77	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,206

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,421

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.60.0 1.26.9
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9

Open the chart page →

15,773

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9

Open the chart page →

3,159

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	6d45ab59ec50	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,862

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

360

s3managersergeyshevch

0.1.0

1 of 1 See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,222

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

4,016

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

4,171

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,106

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,489

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.26.9
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.26.9

Open the chart page →

7,320

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.26.9
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.26.9
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.26.9

Open the chart page →

11,805

serviceexampleserviceexample-chart

0.3.0

2 of 4 See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

4,261

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

2,171

service-exampleservice-example-jt

0.1.1

8 of 9 See more

service-example service-example-jt 0.1.1

8 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/mongodb-exporter :latest	fb4874bb3d07	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
bitnami/redis-exporter :latest	c6a2883c0bb7	stdlib@go1.26.8	1.26.9
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.26.9
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.9

Open the chart page →

10,454

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

10,907

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,423

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

3,835

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ashvinbambhaniya/nexus-tasks-backend :2.0.0	f80349eb018b	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.60.0 1.26.9	1
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/astradns/astradns-operator :v0.2.9	09e58b62416a	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	stdlib@go1.20.12	1.26.9	1
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.60.0 1.26.9	1
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	stdlib@go1.17.13	1.26.9	1
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	golang.org/x/net@v0.28.0 stdlib@go1.22.6	0.60.0 1.26.9	1
ghcr.io/atolat/open-cache :latest	d6105dd73eb4	stdlib@go1.25.8	1.26.9	1
ghcr.io/atrox/alertmanager-discord :v1.0.0	ac011a4b6df1	stdlib@go1.20.5	1.26.9	1
ghcr.io/attestkeep/attestkeep-k8s :1.3.7	1fbf69c89003	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/aureum-cloud/cloudflare-ddns :latest	aeb75d1605f4	stdlib@go1.23.12	1.26.9	1
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9	1
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.60.0 1.26.9	1
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox :latest	7af2216c7b9e	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/avistotelecom/kubebrowser :0.10.0	a354b8dc7e6a	golang.org/x/net@v0.47.0 stdlib@go1.24.1	0.60.0 1.26.9	1
ghcr.io/axonops/axonops-developer-operator :v0.1.0	b3d6600c8ba5	golang.org/x/net@v0.25.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/axonops/axonops-operator :0.1.0	e0cdb993f0b1	golang.org/x/net@v0.51.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/b100to/idle-reaper :0.1.4	47b4a0e091f0	golang.org/x/net@v0.49.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	stdlib@go1.22.11	1.26.9	1
ghcr.io/bank-vaults/bank-vaults :v1.33.1	98b6ea2ed319	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/net@v0.8.0 stdlib@go1.19.11	0.60.0 1.26.9	1
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.6	0.60.0 1.26.9	1
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/banzaicloud/log-socket :latest	a514736d2d4d	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.18.6	0.60.0 1.26.9	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/bbdsoftware/litellm-operator :1.1.2	167a51113d90	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.60.0 1.26.9	1
ghcr.io/behappy-project/behappy-tencentcloud-exporter :0.1.3	a0ba56e1501b	stdlib@go1.21.13	1.26.9	1
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/net@v0.10.0 stdlib@go1.20.8	0.60.0 1.26.9	1
ghcr.io/benc-uk/kubeview :latest	45b64d7c7016	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.60.0 1.26.9	1
ghcr.io/bionicstork/bionicstork/relay :latest	978a59e0f79f	stdlib@go1.25.14	1.26.9	1
ghcr.io/biru-scop/tenzu-front :latest	16759fa523f8	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10	b6373349a301	golang.org/x/net@v0.43.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitwarden/admin :2026.9.2	e82f37409cce	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/api :2026.9.2	72abdfb33c83	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/attachments :2026.9.2	a3e09f120b64	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/events :2026.9.2	818a1d907fc4	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/icons :2026.9.2	5e23eaab3976	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/identity :2026.9.2	63037d60f7d8	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/notifications :2026.9.2	029f0d8a576f	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/sm-operator :2.1.0	846624161f32	golang.org/x/net@v0.53.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/bitwarden/sso :2026.9.2	3ef058df2039	stdlib@go1.26.5	1.26.9	1