CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,373; of 18,117 indexed, latest versions
Container images: 6,208; deployed by those charts
Fix available: 3 of 5; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,150
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,957
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-23xx-p5rw-vrp9 CGA-25j5-q798-fwm3 DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-qwrp-9ccr-5qpq, CGA-vqxj-4gp6-23v9
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars

Chart

Latest

Affected images

Radar Score

sikalabs-harbor-master-snapshotsikalabs

2023.6.20

5 of 8 See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

5 of the 8 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :dev	f4707b275f04	golang.org/x/net@v0.58.0	0.60.0
goharbor/harbor-jobservice :dev	97f7d9464924	golang.org/x/net@v0.58.0	0.60.0
goharbor/harbor-registryctl :dev	ca0765d1c0eb	golang.org/x/net@v0.58.0	0.60.0
goharbor/registry-photon :dev	2d344e1d870d	golang.org/x/net@v0.58.0	0.60.0
goharbor/trivy-adapter-photon :dev	72aa75db0f6c	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,129

vault-devsikalabs

0.2.0

1 of 1 See more

vault-dev sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
hashicorp/vault :latest	c2f666266f38	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

295

sillytavernsillytavern

0.1.19

1 of 1 See more

sillytavern sillytavern 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sillytavern/sillytavern :1.19.0	eef27ff0c796	golang.org/x/net@v0.55.0 stdlib@go1.25.10	0.60.0 1.26.9

Open the chart page →

2,193

bytesafe-cesimcube

1.0.4

1 of 3 See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,238

headscalesinextra

0.1.1

1 of 1 See more

headscale sinextra 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

814

infisicalsinextra

0.6.1

1 of 1 See more

infisical sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
infisical/infisical :v0.165.16	6b911e3938ac	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

3,747

keydbsinextra

0.31.2

1 of 1 See more

keydb sinextra 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,201

mongosqldsinextra

0.3.7

1 of 1 See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	stdlib@go1.23.8	1.26.9

Open the chart page →

3,279

mongosyncsinextra

0.4.0

1 of 1 See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,612

pgbouncersinextra

0.17.0

1 of 1 See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	stdlib@go1.24.6	1.26.9

Open the chart page →

2,617

system-upgrade-controllersinextra

0.6.1

1 of 1 See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.19.2	34fa058fe453	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

645

tailscalesinextra

0.18.1

2 of 2 See more

tailscale sinextra 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/tailscale :1.102.3	d91287e83d1a	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,843

talos-backupsinextra

0.1.2

1 of 1 See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.60.0 1.26.9

Open the chart page →

1,470

teamcitysinextra

1.0.2

1 of 3 See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/docker :26.1-dind	dd43b430341a	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

3,115

mariadbsitepilot

1.0.3

1 of 1 See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mariadb :10.6	23616f0bd3af	stdlib@go1.24.6	1.26.9

Open the chart page →

3,361

sk8lsk8l

0.23.0

1 of 1 See more

sk8l sk8l 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
danroux/sk8l-api :v0.19.0	dee851fc72cc	golang.org/x/net@v0.57.0 stdlib@go1.26.4-X:loopvar	0.60.0 1.26.9

Open the chart page →

546

skupperskupper

2.2.3

1 of 1 See more

skupper skupper 2.2.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/skupper/controller :2.2.3	735568990038	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

235

network-observerskupper-network-observer

2.2.3

2 of 3 See more

network-observer skupper-network-observer 2.2.3

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9
quay.io/skupper/network-observer :2.2.3	3c20bd40b918	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

1,217

skyhook-agentskyhook

1.3.15

1 of 1 See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	golang.org/x/net@v0.44.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

721

skyhook-connectorskyhook

1.3.25

1 of 1 See more

skyhook-connector skyhook 1.3.25

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

441

mimirskyloud-helm-charts

5.5.1

2 of 5 See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
grafana/mimir :r292-5f01872	7476e456c738	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9
grafana/rollout-operator :v0.14.0	3409edfb45c7	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

4,294

tailscale-operatorskyloud-helm-charts

1.70.3

1 of 1 See more

tailscale-operator skyloud-helm-charts 1.70.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
tailscale/k8s-operator :v1.70.0	8edd06cf5bac	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,617

skypilot-prometheus-serverskypilot

0.11.1

3 of 3 See more

skypilot-prometheus-server skypilot 0.11.1

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.83.0	78aec597d87a	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

3,926

pritunl-zerosky-sail

0.3.3

1 of 1 See more

pritunl-zero sky-sail 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
pritunl/pritunl-zero :1.0.3648.46	0f2943e0d41b	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,116

yopasssky-sail

1.3.1

1 of 2 See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jhaals/yopass :12.5.0	916a1cf45d36	stdlib@go1.25.5	1.26.9

Open the chart page →

3,751

config-connector-templaterslamdev

0.0.5

1 of 1 See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

3,277

flux-notifierslamdev

0.0.7

1 of 1 See more

flux-notifier slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
slamdev/flux-notifier :v0.0.8	b173d809132d	stdlib@go1.13.11	1.26.9

Open the chart page →

3,090

gitlab-runnerslamdev

0.0.1

1 of 1 See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

10,793

gke-preemptible-notifierslamdev

0.0.6

1 of 1 See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5 stdlib@go1.13.11	0.60.0 1.26.9

Open the chart page →

4,120

octavia-ingress-controllerslamdev

0.0.7

1 of 1 See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
k8scloudprovider/octavia-ingress-controller :v1.20.2	6ddf80b34265	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

4,027

weblateslamdev

0.0.11

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.13.5	0.60.0 1.26.9

Open the chart page →

11,817

crashloop-operatorslauger-crashloop-operator

0.1.0

1 of 1 See more

crashloop-operator slauger-crashloop-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/slauger/crashloop-operator :0.1.0	76e0216124b7	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

223

slothsloth

0.16.0

2 of 2 See more

sloth sloth 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	stdlib@go1.25.1	1.26.9

Open the chart page →

5,168

slurm-bridgeslurm-bridge

1.2.3

3 of 3 See more

slurm-bridge slurm-bridge 1.2.3

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/slinkyproject/slurm-bridge-admission :1.2.3	042e3827a68f	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-bridge-controllers :1.2.3	e2e3e2c82d2c	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-bridge-scheduler :1.2.3	53db9c40f2b9	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

672

oi-slurm-cluster-chartslurm-cluster-chart

0.25.1

2 of 4 See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

2 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.26.9

Open the chart page →

5,749

slurm-cluster-chartslurm-cluster-chart

0.25.0

2 of 4 See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

2 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.26.9

Open the chart page →

5,749

slurm-operatorslurm-operator

1.2.3

2 of 2 See more

slurm-operator slurm-operator 1.2.3

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/slinkyproject/slurm-operator :1.2.3	b35e76c09e58	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-operator-webhook :1.2.3	68a4460abaa1	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

453

deconzsmall-hack

0.1.0

1 of 1 See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.26.1	23c86008d73f	stdlib@go1.19.8	1.26.9

Open the chart page →

14,591

home-assistantsmall-hack

2.1.0

1 of 1 See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.3.1	0e091dfce306	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

5,050

smarter-k3s-edgesmarter

0.0.12

1 of 2 See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

4,368

smarter-device-managersmarter-device-manager

0.0.10

1 of 1 See more

smarter-device-manager smarter-device-manager 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

1,986

mealiesmarthall

0.0.10

1 of 1 See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	stdlib@go1.19.8	1.26.9

Open the chart page →

6,696

smtp-gotifysmtp-gotify

0.1.4

1 of 1 See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	golang.org/x/net@v0.28.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

1,071

snaprsnapr

0.1.0

1 of 2 See more

snapr snapr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
snapr/app :v0.1.0	e9eb8287bfe1	golang.org/x/net@v0.30.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

2,570

sneakerssneakers

1.0.0

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
helga09/my_sql_shoes :v1.1.1	a03657d97897	stdlib@go1.18.2	1.26.9

Open the chart page →

10,016

echobotsngular

0.3.5

1 of 1 See more

echobot sngular 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sngular/gitops-echobot :v0.2.2	3cde2e04b739	stdlib@go1.16.5	1.26.9

Open the chart page →

3,493

webhooksngular

0.1.1

1 of 1 See more

webhook sngular 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sngular/gitops-webhook :v0.2.1	caa1c77a5750	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

3,671

avalanchesnowplow-devops

0.12.1

1 of 6 See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.26.9

Open the chart page →

1,780

vertical-pod-autoscalersnowplow-devops

0.1.1

3 of 3 See more

vertical-pod-autoscaler snowplow-devops 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.4.1	71d817780aa9	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.4.1	40b6d76e8526	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.4.1	8ebf269779c1	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

2,766

snspingsnsping

1.2.9

1 of 1 See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
udhos/snsping :1.2.9	6ae70677b6a3	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,893

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
gotson/komga :1.22.0	ba892ab3e082	stdlib@go1.17.8	1.26.9	1
gotson/komga :1.28.1	d8f772dce7b3	stdlib@go1.26.7	1.26.9	1
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/net@v0.34.0 stdlib@go1.22.11	0.60.0 1.26.9	1
gradiant/packetrusher :2b26573	e9b46dc76af4	golang.org/x/net@v0.38.0 stdlib@go1.21.3	0.60.0 1.26.9	1
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.60.0 1.26.9	1
grafana/agent :v0.20.0	825c09373d27	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16	0.60.0 1.26.9	1
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9	1
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/net@v0.31.0 stdlib@go1.22.7	0.60.0 1.26.9	1
grafana/alloy :v1.4.3	06bdcbb51fc2	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.60.0 1.26.9	1
grafana/alloy :v1.18.1	0f4434c92b3e	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
grafana/alloy :v1.18.0	491b0578c049	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
grafana/alloy :v1.16.3	84b76d56c594	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9	1
grafana/alloy :v1.14.0	f50931848bd8	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9	1
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9	1
grafana/beyla :1.3.3	36d07f8d276e	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
grafana/beyla :3.32.0	3ff0f7cf2bbf	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9	1
grafana/beyla :2.2.2	a9cf4560472e	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9	1
grafana/beyla-k8s-cache :2	53b2f561cb1b	golang.org/x/net@v0.48.0 stdlib@go1.25.3	0.60.0 1.26.9	1
grafana/cloudcost-exporter :v1.15.0	6c7f78bd104e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.60.0 1.26.9	1
grafana/grafana :10.1.5	0679e877ba20	golang.org/x/net@v0.12.0 stdlib@go1.20.10	0.60.0 1.26.9	1
grafana/grafana :7.5.6	09bb407e26ab	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.1	0.60.0 1.26.9	1
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9	1
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/net@v0.4.0 stdlib@go1.20.1	0.60.0 1.26.9	1
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/net@v0.12.0 stdlib@go1.20.8	0.60.0 1.26.9	1
grafana/grafana :13.0.1-security-01	2d1f9ae67c17	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9	1
grafana/grafana :12.2.2	2ebef928d7e5	golang.org/x/net@v0.45.0 stdlib@go1.25.3	0.60.0 1.26.9	1
grafana/grafana :12.2.1	35c41e0fd029	golang.org/x/net@v0.45.0 stdlib@go1.25.3	0.60.0 1.26.9	1
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.60.0 1.26.9	1
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.60.0 1.26.9	1
grafana/grafana :11.5.1	5781759b3d27	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9	1
grafana/grafana :11.6.0	62d2b9d20a19	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9	1
grafana/grafana :8.0.3	696823fbc561	golang.org/x/net@v0.0.0-20210521195947-fe42d452be8f stdlib@go1.16.1	0.60.0 1.26.9	1
grafana/grafana :10.2.3	6b5b37eb35bb	golang.org/x/net@v0.19.0 stdlib@go1.21.3	0.60.0 1.26.9	1
grafana/grafana :7.3.4	6d42886b3ebe	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.5	0.60.0 1.26.9	1
grafana/grafana :12.3.0	70d9599b186c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9	1
grafana/grafana :12.2.0	74144189b384	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	1
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
grafana/grafana :11.5.2	8b37a2f028f1	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9	1
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.17.12	0.60.0 1.26.9	1
grafana/grafana :12.1.1	a1701c218024	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.60.0 1.26.9	1
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.60.0 1.26.9	1
grafana/grafana :10.4.19	a9043254ba16	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
grafana/grafana :13.1.3	ab5cb380e3ff	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
grafana/grafana :11.1.3	b23b588cf7cb	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1