CVE-2026-78663

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,564; of 18,087 indexed, latest versions
Container images: 6,417; deployed by those charts
Fix available: 6 of 9; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,564 of 18,087 indexed charts deploy, on 6,417 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,392
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,161
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-25j5-q798-fwm3 CGA-2gqg-cwwv-gpq8 CGA-47rc-6mj7-j49q CGA-52wv-3w8x-88q8 CGA-gghc-78jw-f5q2 CGA-w84h-9v6p-pf3x DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-34ww-96mj-f68f, CGA-496v-v9f7-gg5g, CGA-63wp-c4jp-8rp3, CGA-69c7-fg3r-x52j, CGA-6q57-jhhm-h4wv, CGA-7h68-428w-v8rx, CGA-7r9c-ff6c-hxjj, CGA-83p5-fjgf-7f3c, CGA-8657-wr97-3mfx, CGA-92vv-8vvj-9395, CGA-9fgf-3526-83c2, CGA-9vvh-3x7q-fg3m, CGA-cx87-7wm6-85w4, CGA-frvr-2pgq-38cg, CGA-g5vc-6qvm-vhqf, CGA-mmhx-33v2-g868, CGA-qq63-42gf-c64c, CGA-r8gj-3cwq-xgqj, CGA-r8gm-456m-hwcc, CGA-rc2p-74g8-rgfr, CGA-rp37-mxv6-g5fj, CGA-vqxj-4gp6-23v9, CGA-wfqc-4mv3-qjv3, CGA-wjfh-8wph-66g7, CGA-x3qg-fv98-5j72, CGA-x57q-8qv6-g2j7
Trending: Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,564 by stars

Chart

Latest

Affected images

Radar Score

branchdbbranch-db

0.1.4

2 of 3 See more

branchdb branch-db 0.1.4

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

924

bitmagnetbrandan-schmitz-helm-charts

1.0.6

2 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	721873c34ceb	stdlib@go1.24.6	1.26.9
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,545

Filebrowserbrandan-schmitz-helm-charts

1.3.1

1 of 1 See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,283

pagesbrian-pages

1.0.0

1 of 3 See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,257

pagesbrixton-mayuribhavsar23-pages

1.0.0

1 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,257

pagesbrixton-pages

1.0.0

1 of 3 See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,257

tautullibryanalves

0.1.0

1 of 1 See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
tautulli/tautulli :latest	a4323bc09b27	stdlib@go1.24.4	1.26.9

Open the chart page →

2,563

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

80,435

plexbryopsida

0.2.0

1 of 1 See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
linuxserver/plex :latest	06e07af2851e	stdlib@go1.26.7	1.26.9

Open the chart page →

618

postgresqlbuall-charts

0.1.2

1 of 1 See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
buall/postgres-stack :18.6	881a785642cb	stdlib@go1.24.6	1.26.9

Open the chart page →

4,737

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	f3864381e463	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

654

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
moby/buildkit :master	e7c131019aa9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

654

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

12,261

pages-microservicebusi-ads

1.0.0

1 of 3 See more

pages-microservice busi-ads 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,257

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,344

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

3,634

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,027

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,908

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

3,497

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,063

gotenbergbysamio

0.2.0

1 of 1 See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8-chromium	0d28ae9a9644	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

10,144

mariadbbysamio

1.0.2

1 of 1 See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	607835cd628b	stdlib@go1.24.6	1.26.9

Open the chart page →

3,505

payloadboxbytefork

0.0.4

1 of 1 See more

payloadbox bytefork 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.26.9

Open the chart page →

251

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

2,105

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

1,375

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

3,055

rediscagriekin

1.5.2

1 of 2 See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.26.9

Open the chart page →

2,003

calibre-web-automatedcalibre-web-automated

1.2.3

1 of 1 See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
crocodilestick/calibre-web-automated :v4.0.6	c31a738b6d5e	stdlib@go1.17.8	1.26.9

Open the chart page →

8,123

ct-singlecalltelemetry

0.8.4

4 of 7 See more

ct-single calltelemetry 0.8.4

4 of the 7 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.26.9
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.26.9
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.26.9

Open the chart page →

13,879

stablecalltelemetry

0.7.1

4 of 9 See more

stable calltelemetry 0.7.1

4 of the 9 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.26.9
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.26.9
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.26.9

Open the chart page →

11,119

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.26.9
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.26.9

Open the chart page →

6,288

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,257

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.26.9

Open the chart page →

9,645

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.26.9

Open the chart page →

92,421

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

6,706

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

3,139

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

6,896

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

1,799

s3-exportercamptocamp3

2.2.0

1 of 1 See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.26.9

Open the chart page →

2,097

snyk-exportercamptocamp3

0.1.4

1 of 1 See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.26.9

Open the chart page →

1,913

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

2,529

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

1,955

apachecamptocamp-apache

0.4.0

1 of 2 See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/lusitaniae/apache-exporter :latest	438b1b6177eb	golang.org/x/net@v0.56.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

1,735

mapservercamptocamp-apache

0.1.10

1 of 2 See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
camptocamp/mapserver :master	18959d939a66	stdlib@go1.26.5	1.26.9

Open the chart page →

1,481

caninecanine

0.1.10

6 of 7 See more

canine canine 0.1.10

6 of the 7 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0 stdlib@go1.25.10	0.60.0 1.26.9
ghcr.io/caninehq/canine :latest	68b19aee1c64	golang.org/x/net@v0.32.0 stdlib@go1.24.4	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

18,034

cert-managercanine

1.15.3

4 of 4 See more

cert-manager canine 1.15.3

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

4,825

traefikcanine

40.2.0

1 of 1 See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	golang.org/x/net@v0.53.0 stdlib@go1.25.10	0.60.0 1.26.9

Open the chart page →

1,379

capi2argo-cluster-operatorcapi2argo

1.5.0

1 of 1 See more

capi2argo-cluster-operator capi2argo 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	golang.org/x/net@v0.40.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

609

capsule-argo-addoncapsule-argo-addon

0.8.0

2 of 2 See more

capsule-argo-addon capsule-argo-addon 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
ghcr.io/peak-scale/capsule-argo-addon :0.8.0	64b8c5389b33	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,753

freebox-exportercaptnbp

1.0.0

1 of 1 See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

1,297

Container images carrying it

6,417 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9	4
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9	4
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9	4
decisionrules/server :latest	bb3a93224b5a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	4
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	4
hyperledger/fabric-ca :latest	a70b6ba64a08	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9	4
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.26.9	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	4
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9	4
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.26.9	4
library/mariadb :13.0.2 :latest	d4fdec0510ad	stdlib@go1.26.7	1.26.9	4
library/mongo :5.0-focal	5e15a3f014ed	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9	4
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.9	4
library/nats :2.15.0-alpine	ac8f88a6494b	stdlib@go1.27.1	1.27.2	4
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9	4
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.26.9	4
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.26.9	4
migrate/migrate :latest	76cc2074cb66	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	4
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9	4
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	4
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.9	4
natsio/prometheus-nats-exporter :0.20.2 :latest	c623b608e148	stdlib@go1.26.6	1.26.9	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.26.9	4
otel/opentelemetry-collector-contrib :0.162.0 :latest	39923a8e431b	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	4
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.60.0 1.26.9	4
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	golang.org/x/net@v0.30.0 stdlib@go1.23.5	0.60.0 1.26.9	4
ghcr.io/curium-rocks/docker-kubectl :main	d04c003d7593	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9	4
ghcr.io/home-assistant/home-assistant :2026.10.0	1b64d38f38d9	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	e7041c3b41e7	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	4
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	e0f4431c4704	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	4
ghcr.io/kubestash/kubestash :v0.29.0	0686b2a40280	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	4
ghcr.io/kubevault/vault-operator :v0.25.0	c8e042b5cee8	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9	4
ghcr.io/sigstore/scaffolding/createtree :v0.7.33	4c845ced03d8	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9	4
ghcr.io/stakater/reloader :v1.4.22	def2480040ad	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.60.0 1.26.9	4
quay.io/argoproj/argocd :v3.5.4	49dff79439bb	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.60.0 1.26.9	4
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	4
quay.io/ceems/ceems :v0.16.1	4633125698c3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	4
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	4