StackRadar

CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,353
of 18,117 indexed, latest versions
Container images
6,180
deployed by those charts
Fix available
3 of 5
affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,353 of 18,117 indexed charts deploy, on 6,180 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,127
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,936
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-23xx-p5rw-vrp9CGA-25j5-q798-fwm3DEBIAN-CVE-2026-78663GO-2026-6612
Also known as
CGA-qwrp-9ccr-5qpq, CGA-vqxj-4gp6-23v9
Trending
Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars
ChartLatestAffected imagesRadar Score
network-observerskupper-network-observerVerified publisher2.2.32 of 3See more

network-observer skupper-network-observer 2.2.3

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
quay.io/skupper/network-observer:2.2.33c20bd40b918
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

1,217
skyhook-agentskyhookVerified publisher1.3.151 of 1See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.3.23deb8e4b1aaa
golang.org/x/net@v0.44.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

721
skyhook-connectorskyhookVerified publisher1.3.251 of 1See more

skyhook-connector skyhook 1.3.25

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.5.56c4e3336600d
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

441
mimirskyloud-helm-chartsVerified publisher5.5.12 of 5See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
golang.org/x/net@v0.24.0
stdlib@go1.22.3
0.60.0
1.26.9
grafana/rollout-operator:v0.14.03409edfb45c7
golang.org/x/net@v0.21.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

4,295
tailscale-operatorskyloud-helm-chartsVerified publisher1.70.31 of 1See more

tailscale-operator skyloud-helm-charts 1.70.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
tailscale/k8s-operator:v1.70.08edd06cf5bac
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

1,617
skypilot-prometheus-serverskypilotVerified publisher0.11.13 of 3See more

skypilot-prometheus-server skypilot 0.11.1

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.60.0
1.26.9
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
golang.org/x/net@v0.33.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

3,929
pritunl-zerosky-sailVerified publisher0.3.31 of 1See more

pritunl-zero sky-sail 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
pritunl/pritunl-zero:1.0.3648.460f2943e0d41b
golang.org/x/net@v0.42.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

1,117
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
stdlib@go1.25.5
1.26.9

Open the chart page →

3,752
config-connector-templaterslamdev0.0.51 of 1See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
slamdev/config-connector-templater:0.0.3a234541c9fa8
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.16.5
0.60.0
1.26.9

Open the chart page →

3,278
flux-notifierslamdev0.0.71 of 1See more

flux-notifier slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
slamdev/flux-notifier:v0.0.8b173d809132d
stdlib@go1.13.11
1.26.9

Open the chart page →

3,091
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
golang.org/x/net@v0.0.0-20220607020251-c690dde0001d
stdlib@go1.17.9
0.60.0
1.26.9

Open the chart page →

10,744
gke-preemptible-notifierslamdev0.0.61 of 1See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5
stdlib@go1.13.11
0.60.0
1.26.9

Open the chart page →

4,121
octavia-ingress-controllerslamdev0.0.71 of 1See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
k8scloudprovider/octavia-ingress-controller:v1.20.26ddf80b34265
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15
0.60.0
1.26.9

Open the chart page →

4,027
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.13.5
0.60.0
1.26.9

Open the chart page →

11,818
crashloop-operatorslauger-crashloop-operatorVerified publisher0.1.01 of 1See more

crashloop-operator slauger-crashloop-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/slauger/crashloop-operator:0.1.076e0216124b7
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

223
slothsloth0.16.02 of 2See more

sloth sloth 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/slok/sloth:v0.16.0f0f0075b0d45
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
stdlib@go1.25.1
1.26.9

Open the chart page →

5,169
slurm-bridgeslurm-bridge1.2.33 of 3See more

slurm-bridge slurm-bridge 1.2.3

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/slinkyproject/slurm-bridge-admission:1.2.3042e3827a68f
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/slinkyproject/slurm-bridge-controllers:1.2.3e2e3e2c82d2c
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/slinkyproject/slurm-bridge-scheduler:1.2.353db9c40f2b9
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

672
oi-slurm-cluster-chartslurm-cluster-chart0.25.12 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

2 of the 4 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
library/mariadb:10.10334b315c10e5
stdlib@go1.18.2
1.26.9

Open the chart page →

5,700
slurm-cluster-chartslurm-cluster-chart0.25.02 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

2 of the 4 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
bitnami/kubectl:latest999d5eb28f40
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
library/mariadb:10.10334b315c10e5
stdlib@go1.18.2
1.26.9

Open the chart page →

5,700
slurm-operatorslurm-operator1.2.32 of 2See more

slurm-operator slurm-operator 1.2.3

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/slinkyproject/slurm-operator:1.2.3b35e76c09e58
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/slinkyproject/slurm-operator-webhook:1.2.368a4460abaa1
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

453
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
stdlib@go1.19.8
1.26.9

Open the chart page →

14,593
home-assistantsmall-hack2.1.01 of 1See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
golang.org/x/net@v0.49.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

5,050
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.19.2
0.60.0
1.26.9

Open the chart page →

4,366
smarter-device-managersmarter-device-manager0.0.101 of 1See more

smarter-device-manager smarter-device-manager 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
golang.org/x/net@v0.2.0
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

1,987
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
stdlib@go1.19.8
1.26.9

Open the chart page →

6,695
smtp-gotifysmtp-gotifyVerified publisher0.1.41 of 1See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
golang.org/x/net@v0.28.0
stdlib@go1.23.9
0.60.0
1.26.9

Open the chart page →

1,072
snaprsnapr0.1.01 of 2See more

snapr snapr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
snapr/app:v0.1.0e9eb8287bfe1
golang.org/x/net@v0.30.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

2,571
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
stdlib@go1.18.2
1.26.9

Open the chart page →

10,018
echobotsngular0.3.51 of 1See more

echobot sngular 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/sngular/gitops-echobot:v0.2.23cde2e04b739
stdlib@go1.16.5
1.26.9

Open the chart page →

3,493
webhooksngular0.1.11 of 1See more

webhook sngular 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/sngular/gitops-webhook:v0.2.1caa1c77a5750
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

3,672
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.26.9

Open the chart page →

1,780
vertical-pod-autoscalersnowplow-devopsVerified publisher0.1.13 of 3See more

vertical-pod-autoscaler snowplow-devops 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.4.171d817780aa9
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.4.140b6d76e8526
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.4.18ebf269779c1
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

2,766
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

1,893
axonhubsnubisks0.1.02 of 3See more

axonhub snubisks 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9
looplj/axonhub:latest2c71eeaef295
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

1,157
deeplxsnubisks0.1.01 of 1See more

deeplx snubisks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
missuo/deeplx:v1.2.232e492587678
golang.org/x/net@v0.55.0
stdlib@go1.25.10
0.60.0
1.26.9

Open the chart page →

817
tracing-stacksnubisks0.1.06 of 8See more

tracing-stack snubisks 0.1.0

6 of the 8 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/net@v0.52.0
stdlib@go1.26.0
0.60.0
1.26.9
grafana/loki:3.6.5847c287ada0e
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9
grafana/tempo:2.9.065a578975943
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.60.0
1.26.9
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

8,153
cost-analyzersoftonic2.5.53 of 6See more

cost-analyzer softonic 2.5.5

3 of the 6 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.60.0
1.26.9
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
golang.org/x/net@v0.33.0
stdlib@go1.23.3
0.60.0
1.26.9
quay.io/prometheus/prometheus:v3.2.16927e0919a14
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

10,144
csi-gcs-softonic-factorysoftonic0.9.31 of 4See more

csi-gcs-softonic-factory softonic 0.9.3

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/net@v0.0.0-20220513224357-95641704303c
stdlib@go1.18.2
0.60.0
1.26.9

Open the chart page →

2,844
harborsoftonic1.13.05 of 8See more

harbor softonic 1.13.0

5 of the 8 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
goharbor/harbor-jobservice:v2.9.039435daedd0c
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
goharbor/harbor-registryctl:v2.9.0cce272836449
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
goharbor/registry-photon:v2.9.08a26e8cb7862
stdlib@go1.20.7
1.26.9
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
golang.org/x/net@v0.12.0
stdlib@go1.20.7
0.60.0
1.26.9

Open the chart page →

11,157
hello-world-appsoftonic1.2.21 of 1See more

hello-world-app softonic 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
quay.io/giantswarm/helloworld:0.2.07a07ee730305
stdlib@go1.16.7
1.26.9

Open the chart page →

2,934
homing-pigeonsoftonic0.12.01 of 1See more

homing-pigeon softonic 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
softonic/homing-pigeon:0.9.6f26d467b7b82
golang.org/x/net@v0.41.0
stdlib@go1.23.10
0.60.0
1.26.9

Open the chart page →

963
ingress-nginxsoftonic4.15.12 of 2See more

ingress-nginx softonic 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

2,366
kedasoftonic2.17.03 of 3See more

keda softonic 2.17.0

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.60.0
1.26.9
ghcr.io/kedacore/keda-admission-webhooks:2.17.0a87c42275757
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.60.0
1.26.9
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.60.0
1.26.9

Open the chart page →

4,481
kube-prometheus-stacksoftonic81.5.15 of 6See more

kube-prometheus-stack softonic 81.5.1

5 of the 6 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
golang.org/x/net@v0.47.0
stdlib@go1.25.6
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.7.47a62bba56a7c
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
golang.org/x/net@v0.48.0
stdlib@go1.25.6
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

7,304
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
golang.org/x/net@v0.30.0
stdlib@go1.23.10
0.60.0
1.26.9

Open the chart page →

1,533
pod-defaultersoftonic0.1.31 of 1See more

pod-defaulter softonic 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.14.9
0.60.0
1.26.9

Open the chart page →

4,054
policy-reportersoftonic2.18.21 of 1See more

policy-reporter softonic 2.18.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:2.14.1e74c6bf33d1b
golang.org/x/net@v0.8.0
stdlib@go1.19.7
0.60.0
1.26.9

Open the chart page →

1,827
preemptible-killersoftonic1.2.61 of 1See more

preemptible-killer softonic 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
softonic/preemptible-killer:1.2.6-294b87f1fb362
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.14.10
0.60.0
1.26.9

Open the chart page →

3,811
rate-limit-operatorsoftonic1.1.01 of 2See more

rate-limit-operator softonic 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.60.0
1.26.9

Open the chart page →

3,456
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
golang.org/x/net@v0.27.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

2,237

Container images carrying it

6,180 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.16.13
0.60.0
1.26.9
1
cube8021/push-to-k8s:v1.2.2c5d1a1ec4c5e
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
1
cyberark/conjur-k8s-csi-provider:latest737a967088d9
golang.org/x/net@v0.54.0
stdlib@go1.26.5
0.60.0
1.26.9
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/net@v0.43.0
stdlib@go1.25.4
0.60.0
1.26.9
1
cyverse/irods-csi-driver:v0.12.2c5877ea80e0e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
czerwonk/ping_exporter:v1.2.02a35a0584608
golang.org/x/net@v0.50.0
stdlib@go1.26.0
0.60.0
1.26.9
1
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9
1
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.26.9
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
stdlib@go1.25.7
1.26.9
1
dalf/filtron:latestb19cbf5b2f37
stdlib@go1.18.2
1.26.9
1
dalf/morty:latest248a4849c350
golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861
stdlib@go1.18.2
0.60.0
1.26.9
1
danielfm/kube-ecr-cleanup-controller:0.1.1012485563b1d0
golang.org/x/net@v0.7.0
stdlib@go1.19.6
0.60.0
1.26.9
1
danielqsj/kafka-exporter:v1.7.0e90b7ba06d97
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.60.0
1.26.9
1
dannielkil/book-db:latest433290c5c1db
stdlib@go1.18.2
1.26.9
1
danroux/sk8l-api:v0.19.0dee851fc72cc
golang.org/x/net@v0.57.0
stdlib@go1.26.4-X:loopvar
0.60.0
1.26.9
1
danuk/k8s-sftp-gcs:latestdd0e6585c44f
stdlib@go1.18.4
1.26.9
1
daprio/dashboard:0.15.04be696707bd1
golang.org/x/net@v0.25.0
stdlib@go1.21.13
0.60.0
1.26.9
1
daprio/dashboard:0.14.07ba5d51e5b97
golang.org/x/net@v0.6.0
stdlib@go1.19.13
0.60.0
1.26.9
1
daprio/injector:1.11.2763b9b70b0c8
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.60.0
1.26.9
1
daprio/operator:1.11.2c584428aa12d
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.60.0
1.26.9
1
daprio/placement:1.11.2d8e1446da996
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.60.0
1.26.9
1
daprio/sentry:1.11.21f507c1a181b
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.60.0
1.26.9
1
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
golang.org/x/net@v0.26.0
stdlib@go1.22.10
0.60.0
1.26.9
1
darkobas/ethexporter:latest62e6464491ba
stdlib@go1.19.1
1.26.9
1
darkobas/tokenexporter:latestf26e016a9d7e
stdlib@go1.27.1
1.27.2
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.60.0
1.26.9
1
darthsim/imgproxy:v3.15.040f6eb807444
golang.org/x/net@v0.7.0
stdlib@go1.20
0.60.0
1.26.9
1
darthsim/imgproxy:v3.26476cb08c816a
golang.org/x/net@v0.30.0
stdlib@go1.23.2
0.60.0
1.26.9
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
golang.org/x/net@v0.41.0
stdlib@go1.24.3
0.60.0
1.26.9
1
darthsim/imgproxy:latestc0d8c00be50c
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
dashops/dash-ops:latest23537693ff05
golang.org/x/net@v0.46.0
stdlib@go1.25.10
0.60.0
1.26.9
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
stdlib@go1.16.9
1.26.9
1
datadog/agent:7.22.08f20e56b5311
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.13.11
0.60.0
1.26.9
1
datadog/agent:6aad9994de6a7
golang.org/x/net@v0.33.0
stdlib@go1.21.11
0.60.0
1.26.9
1
datadog/extendeddaemonset:v0.8.0513a4377aed5
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.15
0.60.0
1.26.9
1
datadog/operator:0.3.117f08a860090
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.15.2
0.60.0
1.26.9
1
datamate/seafile-professional:11.0.202dd66b722464
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.21.4
0.60.0
1.26.9
1
datappeal/hive-metastore:lateste38c085a3567
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
stdlib@go1.13.4
0.60.0
1.26.9
1
datappeal/trino-exporter:latest325b91c2b09e
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.16.15
0.60.0
1.26.9
1
datappeal/trino-loadbalancer:sha-950abbae6b5b9fdb2e6d
golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9
stdlib@go1.17.13
0.60.0
1.26.9
1
datasaker/dsk-container-agent:latest08b52999f67b
golang.org/x/net@v0.17.0
stdlib@go1.21.0
0.60.0
1.26.9
1
datasaker/dsk-k8s-agent:latest2542ee73be51
golang.org/x/net@v0.17.0
stdlib@go1.19.1
0.60.0
1.26.9
1
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
golang.org/x/net@v0.17.0
stdlib@go1.21.0
0.60.0
1.26.9
1
datasaker/dsk-node-agent:latest1b95913b6729
golang.org/x/net@v0.17.0
stdlib@go1.21.4
0.60.0
1.26.9
1
datasaker/dsk-process-agent:latest2f38720a637d
golang.org/x/net@v0.15.0
stdlib@go1.21.0
0.60.0
1.26.9
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.60.0
1.26.9
1
datawire/aes:1.13.62beb65062c8b
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.60.0
1.26.9
1
datawire/aes:3.11.195ec30b3c732
golang.org/x/net@v0.23.0
stdlib@go1.22.4
0.60.0
1.26.9
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.16.5
0.60.0
1.26.9
1
datawire/emissary:2.0.2-ea9716efbdd24b
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.