CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,279; of 18,137 indexed, latest versions
Container images: 6,100; deployed by those charts
Fix available: 3 of 5; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,279 of 18,137 indexed charts deploy, on 6,100 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9, 1.27.2	6,033
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,876
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-23xx-p5rw-vrp9 CGA-25j5-q798-fwm3 DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-qwrp-9ccr-5qpq, CGA-vqxj-4gp6-23v9
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,279 by stars

Chart

Latest

Affected images

Radar Score

smarterproject-smarter

0.28.1

1 See more

smarter project-smarter 0.28.1

1 container image this version deploys carries CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	f144425ff09b	stdlib@go1.26.7	1.26.9

Open the chart page →

—

wp-chartprojet-devops

0.1.0

1 of 2 See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9

Open the chart page →

6,357

prometheus-api-bridgeprometheus-api-bridge

0.3.0

1 of 1 See more

prometheus-api-bridge prometheus-api-bridge 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/simonepri/prometheus-api-bridge :0.3.0	b34c8f218cea	golang.org/x/net@v0.55.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

253

prometheus-artifactory-exporterprometheus-artifactory-exporter

0.9.2

1 of 1 See more

prometheus-artifactory-exporter prometheus-artifactory-exporter 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/peimanja/artifactory_exporter :v1.16.0	d3e3929a3d2b	stdlib@go1.21.13	1.26.9

Open the chart page →

849

alertmanager-snmp-notifierprometheus-community

2.2.0

1 of 1 See more

alertmanager-snmp-notifier prometheus-community 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
maxwo/snmp-notifier :v2.1.1	5cdf9914c78e	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

250

jiralertprometheus-community

1.9.0

1 of 1 See more

jiralert prometheus-community 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/jiralert/jiralert-linux-amd64 :v1.3.0	1983aa64761a	stdlib@go1.19.6	1.26.9

Open the chart page →

1,380

prometheus-couchdb-exporterprometheus-community

1.1.0

1 of 1 See more

prometheus-couchdb-exporter prometheus-community 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gesellix/couchdb-prometheus-exporter :v28	6266d063f5d5	stdlib@go1.13.13	1.26.9

Open the chart page →

2,372

prometheus-fastly-exporterprometheus-community

0.14.1

1 of 1 See more

prometheus-fastly-exporter prometheus-community 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/fastly/fastly-exporter :v10.3.0	2aa6d2ede814	stdlib@go1.27.0	1.27.2

Open the chart page →

148

prometheus-modbus-exporterprometheus-community

0.1.4

1 of 1 See more

prometheus-modbus-exporter prometheus-community 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

1,922

prometheus-pingdom-exporterprometheus-community

3.4.4

1 of 1 See more

prometheus-pingdom-exporter prometheus-community 3.4.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kokuwaio/pingdom-exporter :v0.5.7	3e52df096943	stdlib@go1.26.5	1.26.9

Open the chart page →

426

prom-label-proxyprometheus-community

0.24.0

1 of 1 See more

prom-label-proxy prometheus-community 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/prom-label-proxy :v0.15.1	186f9fe79115	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

209

yet-another-cloudwatch-exporterprometheus-community

0.39.1

1 of 1 See more

yet-another-cloudwatch-exporter prometheus-community 0.39.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter :v0.62.1	bdba5215a666	stdlib@go1.23.4	1.26.9

Open the chart page →

809

prometheus-optimizerprometheus-optimizer

0.2.22

1 of 1 See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9

Open the chart page →

5,525

prometheus-universal-exporterprometheus-universal-exporter

1.6.0

1 of 1 See more

prometheus-universal-exporter prometheus-universal-exporter 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/eenchev/prometheus-universal-exporter :1.6.0	c7ffe36f13c6	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

701

alertmanagerprometheus-worawutchan

0.3.0

1 of 1 See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

3,564

prometheus-blackbox-exporterprometheus-worawutchan

4.10.1

1 of 1 See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

3,479

prometheus-druid-exporterprometheus-worawutchan

0.9.0

1 of 1 See more

prometheus-druid-exporter prometheus-worawutchan 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/opstree/druid-exporter :v0.8	3f6d9885cfe2	stdlib@go1.14.6	1.26.9

Open the chart page →

3,175

prometheus-kafka-exporterprometheus-worawutchan

0.2.0

1 of 3 See more

prometheus-kafka-exporter prometheus-worawutchan 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :latest	d1014f41712d	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

prometheus-node-exporterprometheus-worawutchan

1.12.0

1 of 1 See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

3,446

prometheus-pushgatewayprometheus-worawutchan

1.5.0

1 of 1 See more

prometheus-pushgateway prometheus-worawutchan 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.26.9

Open the chart page →

2,350

prometheus-redis-exporterprometheus-worawutchan

4.0.0

1 of 1 See more

prometheus-redis-exporter prometheus-worawutchan 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.26.9

Open the chart page →

2,386

prometheus-statsd-exporterprometheus-worawutchan

0.1.0

1 of 1 See more

prometheus-statsd-exporter prometheus-worawutchan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.26.9

Open the chart page →

2,386

github-exporterpromhippie

21.3.0

1 of 1 See more

github-exporter promhippie 21.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/promhippie/github-exporter :20.4.0	6e2171233b5b	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

hetzner-exporterpromhippie

2.19.0

1 of 1 See more

hetzner-exporter promhippie 2.19.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/promhippie/hetzner-exporter :2.19.0	01a5a222d0a6	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

jenkins-exporterpromhippie

2.18.0

1 of 1 See more

jenkins-exporter promhippie 2.18.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/promhippie/jenkins-exporter :2.18.0	bd83d17ed173	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

scw-exporterpromhippie

3.19.0

1 of 1 See more

scw-exporter promhippie 3.19.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/promhippie/scw-exporter :2.19.0	192bb0fd1aea	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

prompt-dbprompt-db

1.0.7

1 of 3 See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	721873c34ceb	stdlib@go1.24.6	1.26.9

Open the chart page →

4,167

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

11,345

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,500

prowlerprowler

0.1.1

1 of 1 See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
toniblyx/prowler :stable	9dbcc3c9abd7	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

2,244

flaskDiaryptj-miniproject

2.1.2

1 of 2 See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

3,811

kspanpuckpuck

0.2.4

1 of 1 See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

2,488

powerdnspuckpuck

2.0.0

3 of 4 See more

powerdns puckpuck 2.0.0

3 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :18-alpine	77f585114c32	stdlib@go1.24.6	1.26.9
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	stdlib@go1.21.5	1.26.9
pschiffe/pdns-pgsql :5.0	a227d41bc665	stdlib@go1.21.5	1.26.9

Open the chart page →

6,029

seashellpuckpuck

1.2.0

1 of 1 See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

4,934

pulumi-esc-csi-providerpulumi-esc-csi-provider

0.1.6

1 of 1 See more

pulumi-esc-csi-provider pulumi-esc-csi-provider 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,365

pulumi-exporterpulumi-exporter

0.1.6

1 of 1 See more

pulumi-exporter pulumi-exporter 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/pulumi-labs/pulumi-exporter :0.1.4	5415d5a46e7d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

413

pumperlypumperly

0.2.0

1 of 3 See more

pumperly pumperly 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
postgis/postgis :17-3.4-alpine	5a1dbedac34e	stdlib@go1.18.2	1.26.9

Open the chart page →

2,940

punch-boardpunchplatform

298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev

1 of 1 See more

punch-board punchplatform 298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/punchplatform/punch-board :8.1-latest	b03168275d1c	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

2,071

cdmswebapppyalive-cdmswebapp

0.1.0

2 of 3 See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

8,709

loki-stackpyalive-cdmswebapp

2.6.5

4 of 4 See more

loki-stack pyalive-cdmswebapp 2.6.5

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	b28bae15e219	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.60.0 1.26.9
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.60.0 1.26.9
quay.io/prometheus/prometheus :latest	efd719c99d83	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

8,917

node-exporterpyalive-cdmswebapp

0.1.0

1 of 1 See more

node-exporter pyalive-cdmswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :latest	1b4e4438faca	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

357

rancher-metricspy-kube-downscaler

0.0.8

1 of 4 See more

rancher-metrics py-kube-downscaler 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/eumel8/rancher-servicemonitor :0.2.1	f34428cac187	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

1,272

qantas-apiqantas-helm

0.1.0

1 of 3 See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9

Open the chart page →

1,807

open-terminalqaoru

0.2.5

1 of 1 See more

open-terminal qaoru 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/open-terminal :0.14.0-slim	ba7a67129bba	stdlib@go1.24.4	1.26.9

Open the chart page →

2,833

unifiqaoru

1.1.7

2 of 2 See more

unifi qaoru 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mongo :7.0-jammy	f71f6d0913c9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
linuxserver/unifi-network-application :10.6.106-ls149	bb0510fedc3b	stdlib@go1.26.7	1.26.9

Open the chart page →

4,129

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.60.0 1.26.9
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

17,234

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.60.0 1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

27,496

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.60.0 1.26.9

Open the chart page →

6,128

qubivaqubiva

0.3.2

2 of 3 See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9
library/mongo :7	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

8,314

ingress-nginxquench-ingress-nginx

0.0.11

1 of 1 See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned	bfc9db97a1e7	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Open the chart page →

549

Container images carrying it

6,100 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.60.0 1.26.9	1
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.60.0 1.26.9	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/ptrvsrg/csi-driver-ipfs :latest	97d2d9ccd7a5	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.10	0.60.0 1.26.9	1
ghcr.io/pulumi-labs/pulumi-exporter :0.1.4	5415d5a46e7d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.60.0 1.26.9	1
ghcr.io/punchplatform/operator :8.1-dev	2a9536c8cee2	golang.org/x/net@v0.20.0 stdlib@go1.22.0	0.60.0 1.26.9	1
ghcr.io/punchplatform/punch-board :8.1-latest	b03168275d1c	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.21.3	0.60.0 1.26.9	1
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.60.0 1.26.9	1
ghcr.io/qaoru/mosquitto_exporter :2.0.0	2058ad337e19	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/qjoly/pr-gitops-grafana-annotation :latest	6a75c6b497ed	stdlib@go1.26.5	1.26.9	1
ghcr.io/qjoly/spindle :v1.16.1-alpha	aab0c99d313f	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	1
ghcr.io/quenchworks/images/versitygw	783ea36fcc7a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/rabbitmq/cluster-operator :2.17.2	5d690e6cd856	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.26.9	1
ghcr.io/rafpe/kube-oidc-proxy :1.8.1	300f51feb1a7	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	stdlib@go1.20.7	1.26.9	1
ghcr.io/razvanmacovei/x402-k8s-operator :0.1.0	bf3407fad182	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/ricardozd/agentgateway-route-reconciler :0.3.1	846f6e407c96	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/riesinger/plausible-exporter :1.1.0	61112cda1be5	stdlib@go1.19.7	1.26.9	1
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	golang.org/x/net@v0.2.0 stdlib@go1.19.4	0.60.0 1.26.9	1
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.17.13	0.60.0 1.26.9	1
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.60.0 1.26.9	1
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.26.9	1
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0 stdlib@go1.23.0	0.60.0 1.26.9	1
ghcr.io/runatlantis/atlantis :v0.48.1	42bde40e38ec	golang.org/x/net@v0.54.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.4	914e75d9f445	golang.org/x/net@v0.57.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.60.0 1.26.9	1
ghcr.io/rybbit-io/rybbit-backend :latest	e0d1b397e33c	stdlib@go1.20.7	1.26.9	1
ghcr.io/sagernet/sing-box :v1.12.0	3c1ee82d450d	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9	1
ghcr.io/sairam0424/ratecap-core :latest	2f6c7157fa8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/sairam0424/ratecap-sidecar :latest	e7feca7ac7cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/salaboy/fmtok8s-email-service :v0.2.0-native	b52d5dbac2ca	stdlib@go1.17.11	1.26.9	1
ghcr.io/salaboy/fmtok8s-email-service :v0.1.0-native	cf28472bc460	stdlib@go1.17.11	1.26.9	1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.26.9	1
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.15	0.60.0 1.26.9	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	1
ghcr.io/sapcc/ntp_exporter :v2.9.0	79c40c65f5d4	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
ghcr.io/schaka/janitorr :native-stable	7cfe1e0c41da	stdlib@go1.24.6	1.26.9	1
ghcr.io/schmitzis/cert-manager-webhook-bunny :latest	125e31c8e85a	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.60.0 1.26.9	1
ghcr.io/seanmorley15/adventurelog-frontend :v0.13.0	51ee22428b41	stdlib@go1.23.12	1.26.9	1
ghcr.io/sergelogvinov/hybrid-csi-provisioner :v0.3.1	221e07794a8a	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/sergelogvinov/karpenter-provider-proxmox :v0.13.0	c529be73ddc3	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.60.0 1.26.9	1