CVE-2026-78660

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,553; of 18,090 indexed, latest versions
Container images: 6,402; deployed by those charts
Fix available: 8 of 9; affected packages

HTTP/2 transport accepts malformed framing-related headers in net/http

Carried by container images the latest versions of 5,553 of 18,090 indexed charts deploy, on 6,402 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,378
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,149
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	1.15.10-r8	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	1.5.2-r3	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-4487-7phw-q6ph CGA-8m3g-7799-mp4m CGA-8p8v-px44-9x8q CGA-8vqq-r2ff-395m CGA-f7qm-qm58-qq95 CGA-gwrf-q2qw-xxw8 DEBIAN-CVE-2026-78660 GO-2026-6610
Also known as: CGA-35vx-wppw-x7qp, CGA-3h29-84h2-fpvm, CGA-4c7c-vv7v-68rj, CGA-549w-3rfh-p826, CGA-5m57-vjc9-f9p9, CGA-674h-jc7r-4mj3, CGA-69vp-383p-x5ch, CGA-75m2-prw5-hwgv, CGA-77wf-8wxg-xgm9, CGA-ch87-vjh7-q5c4, CGA-f6rm-vx2j-c4p8, CGA-g5qq-3wrm-946q, CGA-hhf5-4h2f-jxg6, CGA-hmfx-cqg4-6jpq, CGA-hw83-h7jc-7pmj, CGA-pxv9-259f-f7j4, CGA-q8wf-wv9q-7fmv, CGA-qfx8-xwj3-frq2, CGA-qp96-gpwf-9v2h, CGA-qrx4-5cp4-7xhr, CGA-rpwc-c4h5-9frv, CGA-rr68-65r8-g5vv, CGA-v6p6-9m54-x5pc, CGA-x66q-68px-v2f4, CGA-x9jv-g6mg-h4jq, CGA-xjhf-9jv7-7x78
Trending: Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,553 by stars

Chart

Latest

Affected images

Radar Score

admin-api-svcmojaloop

12.0.0

1 of 4 See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

13,385

backendmojaloop

0.1.0

5 of 6 See more

backend mojaloop 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.26.9
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.60.0 1.26.9
bitnamilegacy/mysql :8.4.5-debian-12-r0	7089d796fc9b	stdlib@go1.23.8	1.26.9
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.4	0.60.0 1.26.9
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.26.9

Open the chart page →

22,692

mojaloopmojaloop

14.0.0

1 of 6 See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

20,907

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.26.9

Open the chart page →

7,319

mollysocketmollysocket-wrenix

0.1.14

1 of 2 See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.3	c4a11ae9a1cb	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

3,093

eks-pod-identity-webhookmondu-ai

0.3.1

1 of 1 See more

eks-pod-identity-webhook mondu-ai 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

843

gar-credential-providermondu-ai

0.2.1

1 of 1 See more

gar-credential-provider mondu-ai 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	stdlib@go1.26.0	1.26.9

Open the chart page →

1,037

mongodb-admin-interfacemongo-db-admin-interface

0.1.0

1 of 2 See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :5.0	41108d183e97	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

6,046

enterprise-operatormongodb-helm-charts

1.33.0

1 of 1 See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

2,178

mongodb-query-exportermongodb-query-exporter

5.1.0

1 of 1 See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.26.9

Open the chart page →

1,566

mongodb-secure-backupmongodb-secure-backup

1.0.0

1 of 2 See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/net@v0.34.0 stdlib@go1.22.10	0.60.0 1.26.9

Open the chart page →

1,602

mongopingmongoping

1.3.1

1 of 1 See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,882

monitoringmonitoring

0.1.0

1 of 1 See more

monitoring monitoring 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
jkaninda/grafana :11.0.0	8cfda26ecb7d	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9

Open the chart page →

2,550

moodlemoodle

2.0.0

2 of 2 See more

moodle moodle 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnami/mariadb :latest	354e5aec2045	stdlib@go1.26.8	1.26.9
cloudtooling/moodle :5.3.0.2	d3e3607acf56	stdlib@go1.26.4	1.26.9

Open the chart page →

5,037

cloudflare-tunnel-remotemoonswitch

0.1.4

1 of 1 See more

cloudflare-tunnel-remote moonswitch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	9b49eed8f628	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

625

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,010

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

11,589

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.60.0 1.26.9
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

14,482

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9

Open the chart page →

28,739

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

3,059

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,471

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0 stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

12,373

mosquitto-exportermosquitto-exporter

0.2.2

1 of 1 See more

mosquitto-exporter mosquitto-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/qaoru/mosquitto_exporter :2.0.0	2058ad337e19	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

210

chirpstackmosquitto-helm-chart

0.5.0

3 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.60.0 1.26.9
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0 stdlib@go1.19.3	0.60.0 1.26.9
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.26.9

Open the chart page →

105,789

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

2,871

replacermosquitto-helm-chart

0.2.0

2 of 3 See more

replacer mosquitto-helm-chart 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.60.0 1.26.9
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

6,027

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.60.0 1.26.9

Open the chart page →

3,308

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.26.9

Open the chart page →

5,435

ms-hello-webms-hello-test

0.1.0

1 of 1 See more

ms-hello-web ms-hello-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
irakli/ms-web-hello :latest	966a4bfefe27	stdlib@go1.19.2	1.26.9

Open the chart page →

1,450

adguard-homemt190502

4.0.12

2 of 2 See more

adguard-home mt190502 4.0.12

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.73	7fbf01d73ecb	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9
mikefarah/yq :latest	4b3d9475d655	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,663

codimdmt190502

7.2.2

1 of 3 See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,802

commafeedmt190502

8.2.0

1 of 3 See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	fc973eb97c9f	stdlib@go1.24.6	1.26.9

Open the chart page →

4,303

filestashmt190502

4.0.0

1 of 1 See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
machines/filestash :latest	aff504cd28a8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

3,774

ghostmt190502

8.25.1

2 of 3 See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/ghost :6.25.1	2654b1e90413	stdlib@go1.24.6	1.26.9
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

6,557

keycloakmt190502

1.4.6

1 of 3 See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

3,320

maddymt190502

4.1.2

1 of 1 See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,609

memosmt190502

7.3.2

2 of 3 See more

memos mt190502 7.3.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
neosmemo/memos :0.26.2	3eefcc231141	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

3,284

minifluxmt190502

1.1.6

2 of 3 See more

miniflux mt190502 1.1.6

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	fc973eb97c9f	stdlib@go1.24.6	1.26.9
miniflux/miniflux :2.2.18	a3ca6bbc1f74	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

3,309

nightscoutmt190502

1.1.0

1 of 3 See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

7,540

open-webuimt190502

2.3.10

1 of 3 See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

1,802

paperless-ngxmt190502

7.6.14

2 of 4 See more

paperless-ngx mt190502 7.6.14

2 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	stdlib@go1.24.4	1.26.9

Open the chart page →

14,117

umamimt190502

8.1.4

1 of 3 See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

4,315

vaultwardenmt190502

7.3.4

1 of 3 See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

5,348

vikunjamt190502

7.1.2

2 of 3 See more

vikunja mt190502 7.1.2

2 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

3,967

mongodbmulti-chart-app

0.1.0

1 of 1 See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,610

my-multi-chart-appmulti-chart-app

0.1.0

1 of 2 See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mongo :7	9854f7139445	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

4,556

multusmultus

0.2.0

2 of 2 See more

multus multus 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller :v0.3.7	2a2bb32c0ea8	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

2,978

devops-demomungari-development-charts

1.0.4

4 of 4 See more

devops-demo mungari-development-charts 1.0.4

4 of the 4 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/postgres :latest	fc973eb97c9f	stdlib@go1.24.6	1.26.9
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.4	0.60.0 1.26.9
quay.io/prometheus/alertmanager :latest	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/prometheus :latest	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

10,620

pagesmuthu-pages

1.0.0

1 of 3 See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,310

approuvezmvisonneau

0.1.1

1 of 1 See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78660.

Container image	Digest	Package	Fixed in
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

3,162

Container images carrying it

6,402 by charts deploying them

A fixed version is listed for 8 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9	91
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	37
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9	36
library/postgres :18 :18.6 :18.6-trixie :latest	74935e722416	stdlib@go1.24.6	1.26.9	31
library/postgres :16.15-alpine :16-alpine	721873c34ceb	stdlib@go1.24.6	1.26.9	21
jenkins/jenkins :2.580.1-jdk21 :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	19
library/postgres :18 :18.6-trixie :latest	fc973eb97c9f	stdlib@go1.24.6	1.26.9	19
quay.io/prometheus/prometheus :latest :v3.15.0	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	19
library/postgres :18 :18.6 :18.6-trixie :latest	5a5a84b19854	stdlib@go1.24.6	1.26.9	18
library/postgres :18.6-alpine :18.6-alpine3.24 :18-alpine :alpine	77f585114c32	stdlib@go1.24.6	1.26.9	18
library/mysql :8 :8.4 :8.4.11	6ea90827b110	stdlib@go1.24.6	1.26.9	17
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	15
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9	14
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9	14
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9	14
quay.io/prometheus/node-exporter :latest :v1.12.1	1b4e4438faca	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	14
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9	13
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9	13
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	12
grafana/grafana :latest	b28bae15e219	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	12
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9	12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	12
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	12
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.26.9	11
ethpandaops/xatu :latest	ef8eb43af9bb	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	10
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	10
library/mariadb :13.0.2 :latest	f1bba652ba57	stdlib@go1.26.7	1.26.9	10
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.26.9	10
library/mongo :9.0.2 :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9	10
grafana/grafana :13.2.3-distroless	202e5d5b3f84	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	9
library/mysql :26.7.0 :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9	9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	9
ghcr.io/quenchworks/images/grafana	4b7e7a134283	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	9
ghcr.io/quenchworks/images/kubectl	4033ac5e5f35	golang.org/x/net@v0.57.0 helm-4@4.3.0-r0 kubernetes-1.37@1.37.1-r0 stdlib@go1.27.1	0.60.0 4.3.0-r2 1.37.1-r2 1.27.2	9
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9	8
library/postgres :16	1a6ab3f5345e	stdlib@go1.24.6	1.26.9	8
library/rabbitmq :3.13-management :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9	8
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.60.0 1.26.9	8
quay.io/prometheus/alertmanager :latest :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	8
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9	8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9	8
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	8
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	7
bitnami/mariadb :latest	354e5aec2045	stdlib@go1.26.8	1.26.9	7
bitnami/nginx :latest	b8d42f076789	stdlib@go1.26.8	1.26.9	7
library/ubuntu :latest	f144425ff09b	stdlib@go1.26.7	1.26.9	7
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9	7