CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78663 GO-2026-6612
Trending: Rank 1 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

9,646

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

4,908

seatsurfingseatsurfing

0.1.2

1 of 1 See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
seatsurfing/backend :1.119.3	9952e80048b0	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

963

secrethorsecrethor

1.1.2

1 of 1 See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,031

secrets-store-csi-driver-provider-infisicalsecrets-store-csi-driver-provider-infisical

1.1.4

1 of 1 See more

secrets-store-csi-driver-provider-infisical secrets-store-csi-driver-provider-infisical 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gidoichi/secrets-store-csi-driver-provider-infisical :v1.1.4	2dd5322a0610	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

575

securosecuro

0.16.3

1 of 4 See more

securo securo 0.16.3

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
pgvector/pgvector :pg16	7b822b0aac60	stdlib@go1.24.6	1.26.9

Open the chart page →

3,942

selenosis-deployselenosis

2.1.4

4 of 4 See more

selenosis-deploy selenosis 2.1.4

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.1	c64222f9e663	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
alcounit/browser-service :v0.0.9	4bd10defc324	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
alcounit/browser-ui :v1.0.0	668e7aee5e5c	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
alcounit/selenosis :v2.1.2	f0964cda6da6	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9

Open the chart page →

3,513

karakeepself-hosters-by-night

2.5.1

1 of 1 See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	stdlib@go1.23.10	1.26.9

Open the chart page →

6,242

sentry-k8ssentry-k8s

1.4.1

3 of 11 See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :16	1a6ab3f5345e	stdlib@go1.24.6	1.26.9
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.26.9
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.26.9

Open the chart page →

20,892

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	golang.org/x/net@v0.30.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

972

helm64-toolboxserdigital64

0.4.0

1 of 1 See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox :latest	7af2216c7b9e	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

2,208

vuiseriohub

1.0.6

2 of 3 See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
dserio83/velero-ui :0.3.1	b4e1ec6664d3	stdlib@go1.23.7	1.26.9

Open the chart page →

13,611

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9

Open the chart page →

971

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

1,320

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

1,989

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.9

Open the chart page →

6,913

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

7,523

rekor-tilessigstore

1.2.6

1 of 1 See more

rekor-tiles sigstore 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/rekor-tiles/gcp :v2.2.1	e401cfe033c9	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

685

scaffoldsigstore

0.6.117

11 of 15 See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.26.9
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.26.9
ghcr.io/sigstore/fulcio :v1.9.0	2de0226c5f82	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sigstore/rekor/rekor-server :v1.5.4	100d793d68d0	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	4d64dac937e2	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.33	e591f98e3899	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	16673c1099a5	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.33	4c845ced03d8	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/ct_server :v0.7.33	24293fa1ed50	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	32ee491f4d00	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	3d0152303816	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

11,998

octopusdeploysimcube

1.0.21

1 of 2 See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

218

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

747

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.60.0 1.26.9

Open the chart page →

5,605

postgresql-singlesinextra

1.15.2

1 of 1 See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

6,262

registry-mirrorssinextra

2.0.19

1 of 1 See more

registry-mirrors sinextra 2.0.19

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.21	6b69512c00dc	golang.org/x/net@v0.58.0 stdlib@go1.26.8-X:jsonv2	0.60.0 1.26.9

Open the chart page →

686

skippersinextra

0.8.13

1 of 1 See more

skipper sinextra 0.8.13

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/skipper :v0.27.88	3a357a2a4bef	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

394

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

8,298

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,262

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

3,526

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	golang.org/x/net@v0.44.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,287

wireguardslybase-wireguard

2.0.9

1 of 1 See more

wireguard slybase-wireguard 2.0.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls125	437a490f7afc	golang.org/x/net@v0.47.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

738

smallest-self-hostsmallest-self-host

0.2.2

7 of 12 See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.60.0 1.26.9
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

11,755

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

1,979

aws-otel-collectorsnowplow-devops

0.17.0

1 of 1 See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-otel-collector :v0.50.0	7968fb60db6a	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

323

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.26.9

Open the chart page →

2,308

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.60.0 1.26.9
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.26.9
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

18,698

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

3,885

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.60.0 1.26.9
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.9

Open the chart page →

7,830

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.60.0 1.26.9

Open the chart page →

4,092

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.9

Open the chart page →

3,194

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

8,855

pubsubplussolace

3.10.0

1 of 1 See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

491

pubsubplus-devsolace

3.10.0

1 of 1 See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

491

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.26.9

Open the chart page →

5,498

rabbitmqsolidcharts

0.7.6

1 of 2 See more

rabbitmq solidcharts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	751bf4eeaa69	stdlib@go1.22.2	1.26.9

Open the chart page →

1,348

thanossolidcharts

0.12.2

1 of 1 See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

502

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

13,297

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,769

sql-exportersql-exporter

0.18.11

1 of 1 See more

sql-exporter sql-exporter 0.18.11

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :0.24.9	6c554722facc	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

205

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,488

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.26.9

Open the chart page →

2,638

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
huacnlee/gobackup :v3.1.1	560be93229a5	golang.org/x/net@v0.47.0 stdlib@go1.26.3	0.60.0 1.26.9	1
huacnlee/gobackup :v2.11.2	d9c693e99576	golang.org/x/net@v0.17.0 stdlib@go1.20.3	0.60.0 1.26.9	1
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9	1
huseyinbabal/demory :0.0.0-rc.20	ae8eb4053c60	golang.org/x/net@v0.0.0-20210907225631-ff17edfbf26d stdlib@go1.17.2	0.60.0 1.26.9	1
huzafach/aws-cli-k8 :1.0.0	6e271d43ea48	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.60.0 1.26.9	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.60.0 1.26.9	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.60.0 1.26.9	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.60.0 1.26.9	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.60.0 1.26.9	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.60.0 1.26.9	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.4	0.60.0 1.26.9	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9	1
hyperledgerk8s/tektoncd-operator :v0.64.0	d0a3a35a138d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.7	0.60.0 1.26.9	1
hyperledgerk8s/tekton-operator-webhook :v0.64.0	2237cb80f52b	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.7	0.60.0 1.26.9	1
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.13	0.60.0 1.26.9	1
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.26.9	1
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.26.9	1
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/net@v0.17.0 stdlib@go1.18.8	0.60.0 1.26.9	1
ildarmukhametzyanov/priceapp :0.1	15d23720a3ee	stdlib@go1.21.1	1.26.9	1
inaccel/cloud-init :latest	a5d3d0af05c1	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.60.0 1.26.9	1
inaccel/device-selector :latest	44b4f274f40b	golang.org/x/net@v0.21.0 stdlib@go1.21.9	0.60.0 1.26.9	1
inaccel/kubevirt-hack :latest	bdfd61803a70	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9	1
inbucket/inbucket :3.0.0	1f10a0efea69	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.1	0.60.0 1.26.9	1
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9	1
infisical/cli :0.43.134	fd40aa379818	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1
infisical/infisical :latest	3f014f284cb9	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
infisical/infisical :v0.165.16	6b911e3938ac	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1
infisical/infisical-agent-injector :v0.1.12	718dd5bee7cb	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9	1
infisical/infisical-csi-provider :v0.0.9	e3390e677db6	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.60.0 1.26.9	1
infisical/kubernetes-operator :v0.11.11	8c1cf30ef822	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9	1
infisical/pki-issuer :latest	ff38294270e3	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9	1
inseefrlab/onyxia-api :v4.12.0	b377aec3ead1	golang.org/x/net@v0.49.0 stdlib@go1.25.9	0.60.0 1.26.9	1
inseefrlab/shelly :cloudshell	31f04ca7436b	golang.org/x/net@v0.13.0 stdlib@go1.15.7	0.60.0 1.26.9	1
intel/intel-deviceplugin-operator :0.37.1	1e60686c2170	stdlib@go1.27.1	1.27.2	1
intel/intel-gaudi-resource-driver :v0.3.0	ac758c14c2de	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
intel/intel-gpu-plugin :0.20.0	143f0a45e174	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.60.0 1.26.9	1
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
intel/intel-qat-resource-driver :v0.1.0	ac7616986a2b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
intel/multimodal-data-visualization :3.0	3426deb77337	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.60.0 1.26.9	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	golang.org/x/net@v0.7.0 stdlib@go1.19.3	0.60.0 1.26.9	1
invisibl/gravity-init :v1.0.9	1a970f84178b	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.12	0.60.0 1.26.9	1
invisibl/identity-manager :1.0.0	1029f4fe20eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.60.0 1.26.9	1
invisibl/identity-manager-demo :v1.0.0	cf5400cb935a	stdlib@go1.19.2	1.26.9	1
iofog/router :2.0.1	7260cf861479	stdlib@go1.15	1.26.9	1
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.60.0 1.26.9	1
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.60.0 1.26.9	1
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.60.0 1.26.9	1
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.60.0 1.26.9	1