CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,384; of 18,108 indexed, latest versions
Container images: 6,227; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,384 of 18,108 indexed charts deploy, on 6,227 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,174
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,974
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-549w-3rfh-p826 CGA-p3fp-cff9-hfhm DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-w457-vj2x-m6xf, CGA-xjhf-9jv7-7x78
Trending: Rank 10 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,384 by stars

Chart

Latest

Affected images

Radar Score

statefulsetappscode

0.0.1

2 of 3 See more

statefulset appscode 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9
ghcr.io/appscode/kubectl-nonroot :v1.24	8ee5bdd68977	stdlib@go1.20.7	1.26.9

Open the chart page →

4,442

storage-metrics-serverappscode

2026.7.8

1 of 1 See more

storage-metrics-server appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	golang.org/x/net@v0.48.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

964

supervisorappscode

2026.2.16

1 of 1 See more

supervisor appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/supervisor :v0.0.12	23affde10a92	golang.org/x/net@v0.47.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

530

taskqueueappscode

2026.2.16

1 of 1 See more

taskqueue appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,539

tenant-operatorappscode

2026.9.22

1 of 1 See more

tenant-operator appscode 2026.9.22

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/tenant-operator :v0.0.3	8fe9b4157ed2	golang.org/x/net@v0.54.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

432

thanos-operatorappscode

2026.6.2

1 of 1 See more

thanos-operator appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/thanos-operator :v2026.4.24	e05a3e701291	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

751

tricksterappscode

2026.1.15

1 of 1 See more

trickster appscode 2026.1.15

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,693

vcd-lb-gcappscode

2026.6.25

1 of 1 See more

vcd-lb-gc appscode 2026.6.25

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/vcd-lb-gc :v0.1.0	524c4045cd21	golang.org/x/net@v0.23.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

499

voyagerappscode

2026.3.23

1 of 1 See more

voyager appscode 2026.3.23

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/voyager :v17.5.0	4964ceaf9d35	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,140

voyager-gatewayappscode

2026.10.10

2 of 2 See more

voyager-gateway appscode 2026.10.10

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.4.0	4466bb77dc78	golang.org/x/net@v0.47.0 stdlib@go1.25.13	0.60.0 1.26.9
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,007

haproxyappuio

2.7.2

1 of 1 See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	golang.org/x/net@v0.11.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

6,778

stardog-userrole-operatorappuio

0.4.0

1 of 1 See more

stardog-userrole-operator appuio 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	golang.org/x/net@v0.19.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

1,813

chart-app-vidapp-vid-chart

0.0.7

1 of 2 See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

9,096

appwriteappwrite-helm

1.3.2

4 of 8 See more

appwrite appwrite-helm 1.3.2

4 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
appwrite/appwrite :1.9.0	1aaa70127114	golang.org/x/net@v0.40.0 stdlib@go1.25.7	0.60.0 1.26.9
bitnamilegacy/mariadb :10.6.12-debian-11-r13	15edb5643b73	stdlib@go1.19.7	1.26.9
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.19.7	1.26.9
openruntimes/executor :0.11.4	2228f186dcbb	stdlib@go1.21.10	1.26.9

Open the chart page →

13,328

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

6,481

arcadearcade

1.11.1

1 of 10 See more

arcade arcade 1.11.1

1 of the 10 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

1,044

argocd-ecr-updaterargocd-aws-ecr-updater

0.3.39

1 of 1 See more

argocd-ecr-updater argocd-aws-ecr-updater 0.3.39

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/karlderkaefer/argocd-ecr-updater :1.4.6	ed5d4b74792c	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

358

argocd-bitbucket-proxyargocd-bitbucket-proxy

1.1.1

1 of 1 See more

argocd-bitbucket-proxy argocd-bitbucket-proxy 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.26.9

Open the chart page →

485

argocdargo-helm-charts

1.0.0

3 of 3 See more

argocd argo-helm-charts 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/net@v0.34.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

10,219

argo-workflowsargo-helm-charts

1.0.0

2 of 2 See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

2,859

clickhouseargonaut-charts

0.6.8

2 of 3 See more

clickhouse argonaut-charts 0.6.8

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.60.0 1.26.9
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

11,796

istio-discoveryargonaut-charts

0.3.3

1 of 1 See more

istio-discovery argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

75,747

istio-ingressargonaut-charts

0.3.3

1 of 1 See more

istio-ingress argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

75,692

argonix-apiargonix

0.6.5

1 of 4 See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/argonix-io/argonix-api :0.6.5	431abcce7c1e	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

6,084

argo-zombiesargo-zombies

0.1.52

1 of 1 See more

argo-zombies argo-zombies 0.1.52

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/henrywhitaker3/argo-zombies :v0.4.4	316c397906c9	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

653

otel-collectorarieotech

0.1.0

1 of 1 See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.154.0	b3079f45e19b	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

758

arlas-aiasarlas-stack

28.9.0

6 of 22 See more

arlas-aias arlas-stack 28.9.0

6 of the 22 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	stdlib@go1.25.0	1.26.9
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	golang.org/x/net@v0.29.0 stdlib@go1.22.11	0.60.0 1.26.9
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	golang.org/x/net@v0.33.0 stdlib@go1.23.8	0.60.0 1.26.9
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	stdlib@go1.24.4	1.26.9

Open the chart page →

47,505

arma-reforgerarma-reforger

0.5.3

8 of 8 See more

arma-reforger arma-reforger 0.5.3

8 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9
stakater/reloader :v1.0.15	f4b87a8e56d4	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.63.0	3f976422884e	stdlib@go1.19.5	1.26.9
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

30,673

articom-k8s-crdarticomio-helm-charts

1.2.3

2 of 2 See more

articom-k8s-crd articomio-helm-charts 1.2.3

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
articomio/articom-cx-operator :v1.2.3	89efda334136	golang.org/x/net@v0.47.0 stdlib@go1.25.14	0.60.0 1.26.9
hashicorp/vault :1.18	750bb37c1638	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,981

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

2,636

itera-lmaarzu

1.34.60

4 of 6 See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.10	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

12,789

authorizationassist-iot-authorisation

0.1.0

1 of 2 See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.26.9

Open the chart page →

7,026

dltkvassist-iot-data-integrity-verification

0.2.0

5 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.60.0 1.26.9
hyperledger/fabric-ca :latest	a70b6ba64a08	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

195,771

dltflassist-iot-dlt-based-fl

0.2.0

5 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.60.0 1.26.9
hyperledger/fabric-ca :latest	a70b6ba64a08	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

195,771

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

5,175

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.26.9

Open the chart page →

10,743

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

6,076

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.26.9

Open the chart page →

14,865

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.26.9

Open the chart page →

11,813

openapiassist-iot-open-api-management

0.2.2

2 of 6 See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.60.0 1.26.9
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

93,492

performanceandusagediagnosisassist-iot-pud

1.0.0

5 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

5 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.17.12	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

13,149

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9

Open the chart page →

9,577

smartorchestratorassist-iot-smart-orchestrator

4.0.0

5 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

5 of the 14 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.22.1	1.26.9
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.60.0 1.26.9
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9
quay.io/prometheus/prometheus :latest	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

52,435

videoaugmentationassist-iot-video-augmentation

0.1.0

1 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bluenviron/mediamtx :latest-ffmpeg	c0feb4acc548	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

78,017

astrotrekastria

0.0.2

4 of 4 See more

astrotrek astria 0.0.2

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.26.9
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	stdlib@go1.20.12	1.26.9

Open the chart page →

37,438

celestia-localastria

9.0.0

2 of 2 See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	golang.org/x/net@v0.44.0 stdlib@go1.24.6	0.60.0 1.26.9
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0 stdlib@go1.24.7	0.60.0 1.26.9

Open the chart page →

4,384

celestia-nodeastria

0.7.1

1 of 1 See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0 stdlib@go1.24.7	0.60.0 1.26.9

Open the chart page →

2,046

evm-faucetastria

0.1.5

1 of 1 See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	stdlib@go1.17.13	1.26.9

Open the chart page →

2,525

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

4,841

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

4,841

Container images carrying it

6,227 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cronschedules/cronjob-scale-down-operator :0.4.4	fd521f0034a0	golang.org/x/net@v0.52.0 stdlib@go1.25.0	0.60.0 1.26.9	1
ghcr.io/crossplane-contrib/crossview :v4.6.0	7b54c5ba60e5	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/csepulveda/trivy-webhook-aws-security-hub :v0.1.20	6836b779b060	golang.org/x/net@v0.50.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.4	0.60.0 1.26.9	1
ghcr.io/cybozu-go/accurate :2.1.0	b5cc37ab4d9c	golang.org/x/net@v0.57.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/cybozu-go/moco :0.37.0	32e7cab1bdd8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/d0ugal/internet-perf-exporter :v0.2.91	f5c9a96fe52a	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/dadrus/heimdall :0.17.23	deb6931bd162	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/danieldonoghue/vault-sync-operator :v0.0.1-beta.3	8d7ec69a193c	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/daocloud/crproxy/crproxy :v0.8.0	ee1eb3c9c9a1	golang.org/x/net@v0.26.0 stdlib@go1.21.11	0.60.0 1.26.9	1
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.60.0 1.26.9	1
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.60.0 1.26.9	1
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.60.0 1.26.9	1
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.60.0 1.26.9	1
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/net@v0.48.0 stdlib@go1.24.11	0.60.0 1.26.9	1
ghcr.io/dash0hq/operator-controller :0.157.0	2103617548e2	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9	1
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
ghcr.io/db-operator/db-operator :2.44.0	4a789f7347d8	golang.org/x/net@v0.59.0	0.60.0	1
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9	1
ghcr.io/dc-tec/openbao-operator :0.5.1	599c439b4fea	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	golang.org/x/net@v0.20.0 stdlib@go1.22.5	0.60.0 1.26.9	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.6	0.60.0 1.26.9	1
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.60.0	1
ghcr.io/defensia/agent :1.4.74	f7068c14fde9	golang.org/x/net@v0.47.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.60.0 1.26.9	1
ghcr.io/dellnoantechnp/alloy-remote-config/fleet-management :master	4371b566d238	golang.org/x/net@v0.48.0 stdlib@go1.25.10	0.60.0 1.26.9	1
ghcr.io/deltabadger/deltabadger :2.23.3	bffe3c22fabc	stdlib@go1.24.4	1.26.9	1
ghcr.io/depthmark/github-sts :0.1.1	29fda68298da	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/desuuuu/cluster-network-policy-operator :v1.1.0	d943d13c5281	golang.org/x/net@v0.56.0 stdlib@go1.26.0	0.60.0 1.26.9	1
ghcr.io/devangradadiya/k8s-s3-bucket-operator :0.2.2	58288de9f9fa	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/net@v0.25.0 stdlib@go1.20.14	0.60.0 1.26.9	1
ghcr.io/devops-dojo7/fauxgpu/device-plugin :0.2.4	e5a12388e3d8	golang.org/x/net@v0.29.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/devops-ia/cp-schema-registry :8.1.1-msk-iam-auth2.3.5	30d1a445acc7	stdlib@go1.25.4	1.26.9	1
ghcr.io/devops-ia/dwpk :1.0.0	d76dbf82a81d	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/devops-ia/dwpk-gateway :1.0.0	2911d8b02c64	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/devops-ia/dwpk-ui :1.0.0	b1af8311eba8	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/devops-ia/steampipe :v2.4.1	a982103d91d3	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.17	0.60.0 1.26.9	1
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.26.9	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	golang.org/x/net@v0.37.0 stdlib@go1.24.3	0.60.0 1.26.9	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.2	0.60.0 1.26.9	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9	1
ghcr.io/dexidp/dex :v2.38.0	b1d793440a98	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.60.0 1.26.9	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0 stdlib@go1.19.6	0.60.0 1.26.9	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/net@v0.51.0 stdlib@go1.25.10	0.60.0 1.26.9	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	1
ghcr.io/distr-sh/distr-ce :4.3.0	1d3200f72f99	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1