CVE-2026-78663

Unscored

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,521; of 18,087 indexed, latest versions
Container images: 6,339; deployed by those charts
Fix available: 2 of 3; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,521 of 18,087 indexed charts deploy, on 6,339 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,327
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,102
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78663 GO-2026-6612
Trending: Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,521 by stars

Chart

Latest

Affected images

Radar Score

rustrial-k8s-gitops-secrets-controllerk8s-gitops-secrets

0.6.0

1 of 1 See more

rustrial-k8s-gitops-secrets-controller k8s-gitops-secrets 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rustrial/k8s-gitops-secrets-controller :0.6.0	93326a322a01	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

211

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.26.9

Open the chart page →

6,376

home-assistantk8s-home-lab-repo

16.3.1

1 of 1 See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

5,687

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.26.9

Open the chart page →

8,404

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.26.9

Open the chart page →

2,542

k8statusk8status

0.17.0

1 of 1 See more

k8status k8status 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,084

kanister-operatorkanister

0.118.0

1 of 1 See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kanisterio/controller :0.118.0	d22616a5998b	golang.org/x/net@v0.41.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,541

kiali-operatorkiali

2.33.0

1 of 1 See more

kiali-operator kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.33.0	035995403eed	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,568

kividb-operator-chartkividb-operator

0.4.0

2 of 2 See more

kividb-operator-chart kividb-operator 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/kividbio/kividb-operator :0.4.0	a2395d6f47b7	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kividbio/kividb-operator-gui :0.4.0	276352c04b9c	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

144

mysqldumpkokuwa

7.0.3

1 of 1 See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kokuwaio/gcloud-mysql :v3.2.19	63098135c550	stdlib@go1.26.1	1.26.9

Open the chart page →

1,109

kong-operatorkong

1.4.1

1 of 1 See more

kong-operator kong 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kong/kong-operator :2.3.2	814eaeee4cc8	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.9

Open the chart page →

3,340

kuadrant-operatorkuadrant

1.5.3

4 of 4 See more

kuadrant-operator kuadrant 1.5.3

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/kuadrant/authorino-operator :v0.25.3	95a0670bffe6	golang.org/x/net@v0.55.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/kuadrant/dns-operator :v0.17.2	da9ff8211856	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/kuadrant/kuadrant-operator :v1.5.3	18ad777aeb7a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kuadrant/limitador-operator :v0.18.4	9a9c533e58bb	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

675

kubearmorkubearmor

1.7.5

3 of 4 See more

kubearmor kubearmor 1.7.5

3 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kubearmor/kubearmor :stable	a08141311045	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
kubearmor/kubearmor-controller :latest	43674bb4806f	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
kubearmor/kubearmor-relay-server :latest	f82b9c97e97d	golang.org/x/net@v0.53.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

1,856

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

2,260

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/net@v0.1.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

2,286

kubepatternkubepattern

0.0.5

1 of 1 See more

kubepattern kubepattern 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kubepattern/kubepattern :0.0.5	0762baa6d9b0	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

492

kuberay-operatorkuberay-operator

1.7.1

1 of 1 See more

kuberay-operator kuberay-operator 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/kuberay/operator :v1.7.1	e69b9cde8f1d	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

502

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9

Open the chart page →

20,515

kubeviouskubevious

1.2.2

3 of 7 See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	golang.org/x/net@v0.0.0-20220812165438-1d4ff48094d1 stdlib@go1.19.1	0.60.0 1.26.9
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.26.9
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.26.9

Open the chart page →

17,723

kubevpnkubevpn-charts

2.11.9

1 of 1 See more

kubevpn kubevpn-charts 2.11.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kubenetworks/kubevpn :v2.11.9	3feb9da85270	golang.org/x/net@v0.52.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,930

kubewallkubewall

0.0.23

1 of 1 See more

kubewall kubewall 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kubewall/kubewall :0.0.23	d9a03cfb557b	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

345

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

5 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

5 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs-webhook :latest	c1f19557bdcb	golang.org/x/net@v0.56.0 stdlib@go1.26.0	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

62,568

prometheus-pingmesh-exporterkubservice-charts

1.1.1

1 of 1 See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/net@v0.29.0 stdlib@go1.22.9	0.60.0 1.26.9

Open the chart page →

1,270

karporkusionstack

0.7.6

2 of 3 See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kusionstack/karpor :v0.6.4	b707d3bf0abd	golang.org/x/net@v0.19.0 stdlib@go1.22.12	0.60.0 1.26.9
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/net@v0.17.0 stdlib@go1.20.12	0.60.0 1.26.9

Open the chart page →

4,363

kwokkwok

0.3.0

1 of 1 See more

kwok kwok 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

1,022

machinarislib42

0.2.0

1 of 1 See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/guydavis/machinaris :test	50a71a30f18e	stdlib@go1.26.5	1.26.9

Open the chart page →

39,656

litellm-operatorlitellm-operator

1.1.2

1 of 1 See more

litellm-operator litellm-operator 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/bbdsoftware/litellm-operator :1.1.2	167a51113d90	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

514

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

4,486

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

7,960

vcluster-platformloft

4.12.2

1 of 1 See more

vcluster-platform loft 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-platform :4.12.2	71d869f989e9	golang.org/x/net@v0.52.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,052

logging-operatorlogging-operator

6.9.0

1 of 1 See more

logging-operator logging-operator 6.9.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :6.9.0	527033b7032b	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

lumigo-operatorlumigo-operator

69.0.0

6 of 8 See more

lumigo-operator lumigo-operator 69.0.0

6 of the 8 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator :0.124.0	8936271cf56a	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9
public.ecr.aws/lumigo/lumigo-kubernetes-operator :69	491c39346b19	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy :69	1d548e59c2c8	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog :69	6458fcd61e0c	golang.org/x/net@v0.37.0 stdlib@go1.23.12	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

9,113

lxcfs-on-kuberneteslxcfs-on-kubernetes

0.2.8

1 of 2 See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.8

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/cndoit18/lxcfs-agent :v0.2.8	154741f8596e	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

2,559

mariadbmariadb

0.4.0

1 of 1 See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mariadb :10.11	7db29378d4fd	stdlib@go1.24.6	1.26.9

Open the chart page →

2,744

marmotmarmot

1.6.0

2 of 2 See more

marmot marmot 1.6.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	ab90e1058e5a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/marmotdata/marmot :0.11.0	cbc560cba46e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

245

mattermost-rtcdmattermost

1.4.1

1 of 1 See more

mattermost-rtcd mattermost 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mattermost/rtcd :latest	a27058aaa53a	golang.org/x/net@v0.50.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

879

veleromesosphere

3.2.5

1 of 1 See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

2,677

kubecostmesosphere-stable

0.37.5

7 of 9 See more

kubecost mesosphere-stable 0.37.5

7 of the 9 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30.5	744f84cf7493	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/net@v0.4.0 stdlib@go1.20.1	0.60.0 1.26.9
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/net@v0.26.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

22,359

m8b-stackmetricshub

2.1.3

1 of 4 See more

m8b-stack metricshub 2.1.3

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.13.3	6976aa8a60fe	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

207

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

3,755

helm-ai-kernelmindburn-labs

0.11.1

2 of 2 See more

helm-ai-kernel mindburn-labs 0.11.1

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
ghcr.io/mindburn-labs/helm-ai-kernel :v0.11.1	0e7a5cd11858	golang.org/x/net@v0.58.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

2,720

mc-routerminecraft-server-charts

1.5.0

1 of 1 See more

mc-router minecraft-server-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
itzg/mc-router :latest	64ae69eaa7a6	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

116

mocomoco

0.27.0

1 of 1 See more

moco moco 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/cybozu-go/moco :0.37.0	32e7cab1bdd8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

122

mogenius-operatormogenius

2.30.0

1 of 2 See more

mogenius-operator mogenius 2.30.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/mogenius/mogenius-operator :2.30.0	51bebfb32413	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

1,013

mongodb-kubernetesmongodb-helm-charts

1.13.0

1 of 1 See more

mongodb-kubernetes mongodb-helm-charts 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes :1.13.0	0184a96e324f	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

mortalgpumortalgpu

1.3.7

1 of 1 See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/maxiv/mortalgpu :1.3.7	e1c5c194bbf0	golang.org/x/net@v0.54.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

659

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

4,747

mycelmycel

3.10.0

1 of 1 See more

mycel mycel 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mdenda/mycel :3.10.0	9e559aa83030	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

266

nacknats

0.35.0

1 of 1 See more

nack nats 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
natsio/jetstream-controller :0.24.0	58862daca582	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

391

Container images carrying it

6,339 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
hetznercloud/hcloud-cloud-controller-manager :v1.39.0	d6fee5698759	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	2
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.60.0 1.26.9	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.60.0 1.26.9	2
ilum/api :6.7.3	624fd09528c8	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	2
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/net@v0.8.0 stdlib@go1.20.12	0.60.0 1.26.9	2
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.60.0 1.26.9	2
inaccel/mkrt :latest	187fd448b6f2	stdlib@go1.21.5	1.26.9	2
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.60.0 1.26.9	2
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.60.0 1.26.9	2
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.60.0 1.26.9	2
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0 stdlib@go1.19	0.60.0 1.26.9	2
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.1	0.60.0 1.26.9	2
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.60.0 1.26.9	2
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.60.0 1.26.9	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.60.0 1.26.9	2
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0 stdlib@go1.19	0.60.0 1.26.9	2
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.60.0 1.26.9	2
ipfs/ipfs-cluster :latest :v1.1.6	a83266c524f1	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	2
ipfs/kubo :v0.33.2	1a30f5ed8579	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	2
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	2
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	2
istio/pilot :1.10.0	294ca55bd1cc	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.60.0 1.26.9	2
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.60.0 1.26.9	2
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.13	0.60.0 1.26.9	2
istio/proxyv2 :1.10.0	88c6c693e67a	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.60.0 1.26.9	2
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.6	0.60.0 1.26.9	2
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0 stdlib@go1.20.6	0.60.0 1.26.9	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.60.0 1.26.9	2
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.60.0 1.26.9	2
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.60.0 1.26.9	2
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2	2
jmalloc/echo-server :0.3.1	e4eaee2c7998	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17	0.60.0 1.26.9	2
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9	2
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9	2
kbudde/rabbitmq-exporter :1.0.0 :latest	12f27d6d84e6	stdlib@go1.21.8	1.26.9	2
kong/kubernetes-ingress-controller :3.5	979f12864a13	golang.org/x/net@v0.56.0 stdlib@go1.25.12	0.60.0 1.26.9	2
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.1	0.60.0 1.26.9	2
kubeshop/testkube-api-server :2.14.1	ce04897e5ea2	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	2
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9	2
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9	2
l7mp/stunner-auth-server :1.2.1	0d2094060b72	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0 stdlib@go1.20.6	0.60.0 1.26.9	2
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.26.9	2
library/cassandra :4.1.3	7cbcec0086ac	stdlib@go1.18.2	1.26.9	2
library/docker :dind :latest	0b6d18a4a222	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	2
library/eclipse-temurin :21	3e3c176ffed1	stdlib@go1.26.7	1.26.9	2
library/ghost :6.69.0	55131b90d48c	stdlib@go1.24.6	1.26.9	2