CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,373; of 18,117 indexed, latest versions
Container images: 6,208; deployed by those charts
Fix available: 3 of 5; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,150
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,957
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-23xx-p5rw-vrp9 CGA-25j5-q798-fwm3 DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-qwrp-9ccr-5qpq, CGA-vqxj-4gp6-23v9
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars

Chart

Latest

Affected images

Radar Score

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.60.0 1.26.9
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.9

Open the chart page →

12,316

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.60.0 1.26.9

Open the chart page →

4,347

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/net@v0.53.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,331

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,353

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,273

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.60.0 1.26.9

Open the chart page →

4,047

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/net@v0.42.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,875

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,377

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

6,937

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.9

Open the chart page →

9,317

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

7,639

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

11,961

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.60.0 1.26.9

Open the chart page →

4,198

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/net@v0.46.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

3,310

filebeatlog10x-elastic-helm-charts

1.5.1

1 of 1 See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
log10x/filebeat-10x :1.1.39-native	7d6a79dacd58	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.7	0.60.0 1.26.9

Open the chart page →

8,077

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,479

nightingalelogic3579

0.3.1

4 of 6 See more

nightingale logic3579 0.3.1

4 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.60.0 1.26.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.60.0 1.26.9

Open the chart page →

11,920

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,469

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.26.9

Open the chart page →

7,438

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/net@v0.20.0 stdlib@go1.21.13	0.60.0 1.26.9
logiqai/flash-discovery :v2.0.3	f5b551bca98e	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.18.9	0.60.0 1.26.9
logiqai/logiqctl :2.0.4	798306811f2d	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.7	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

22,266

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.26.9

Open the chart page →

4,041

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,304

loomwatchloomwatch

1.15.9

1 of 1 See more

loomwatch loomwatch 1.15.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/madduck-tech/loomwatch :1.15.9	8f08e7c84910	stdlib@go1.25.14	1.26.9

Open the chart page →

372

cloudflare-tunnel-remotelovemew67

0.1.2

1 of 1 See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	072c067d25cc	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

631

corednslovemew67

1.36.0

1 of 1 See more

coredns lovemew67 1.36.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
coredns/coredns :1.11.3	9caabbf6238b	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

1,783

oncall-hobbylovemew67

0.0.5

1 of 2 See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/redis :7.0.15	352c1fdadc91	stdlib@go1.18.2	1.26.9

Open the chart page →

7,255

loxilbloxilb

0.1.0

2 of 2 See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
ghcr.io/loxilb-io/loxilb :latest	a475b43946b3	golang.org/x/net@v0.55.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

5,916

lsdisklsdisk

2.0.7

3 of 4 See more

lsdisk lsdisk 2.0.7

3 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	golang.org/x/net@v0.25.0 stdlib@go1.22.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

7,250

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

3,547

fireflylsst-sqre

0.3.7

1 of 2 See more

firefly lsst-sqre 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/redis :5	fc5ecd863862	stdlib@go1.16.7	1.26.9

Open the chart page →

2,858

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.17.2	0.60.0 1.26.9
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

13,198

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.5	0.60.0 1.26.9

Open the chart page →

9,334

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,969

filebrowserluiscajl

0.0.1

1 of 1 See more

filebrowser luiscajl 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :latest	a469ea076d4a	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

455

plex-rclone-wireguardluiscajl

1.0.19

1 of 2 See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
linuxserver/plex :latest	06e07af2851e	stdlib@go1.26.7	1.26.9

Open the chart page →

731

xteveluiscajl

0.1.6

1 of 1 See more

xteve luiscajl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

5,501

lumenvox-external-serviceslumenvox

8.0.0

3 of 3 See more

lumenvox-external-services lumenvox 8.0.0

3 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mongo :8.2.12	e0ce8c35124d	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9
library/postgres :17.5	aadf2c0696f5	stdlib@go1.18.2	1.26.9
library/rabbitmq :4.1.8-management	19c5ee40801d	stdlib@go1.22.2	1.26.9

Open the chart page →

9,016

ratelimitlumiumco

0.0.4

1 of 2 See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :a90e0e5d	5966cbc14d5d	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

1,574

lumovilumovi

1.21.0

1 of 1 See more

lumovi lumovi 1.21.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/lumovi/lumovi :1.21.0	947088240bb5	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

553

lynxpromptlynxprompt

0.1.4

1 of 3 See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

851

as212510-netm0nsterrr-as212510-net

4.0.3

1 of 1 See more

as212510-net m0nsterrr-as212510-net 4.0.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/m0nsterrr/as212510.net :v4.0.5	76a06f6a8371	stdlib@go1.27.1	1.27.2

Open the chart page →

148

qbittorrentm0nsterrr-qbittorrent

7.1.3

1 of 2 See more

qbittorrent m0nsterrr-qbittorrent 7.1.3

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :0.2.0	66c8d5c270eb	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

723

recyclarrm0nsterrr-recyclarr

2.7.3

1 of 1 See more

recyclarr m0nsterrr-recyclarr 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/recyclarr/recyclarr :8.7.3	9c6c74d52cfc	stdlib@go1.26.8	1.26.9

Open the chart page →

205

argusm0sh1-helm-charts

0.5.0

1 of 1 See more

argus m0sh1-helm-charts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
releaseargus/argus :0.29.0	e07088252d03	stdlib@go1.25.5	1.26.9

Open the chart page →

1,800

gitea-runnerm0sh1-helm-charts

0.2.3

2 of 2 See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.3.0	8368754bb612	golang.org/x/net@v0.45.0 stdlib@go1.26.0	0.60.0 1.26.9
library/docker :29.3.0-dind-alpine3.23	1ba18449911d	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

5,272

wudm0sh1-helm-charts

0.2.0

1 of 1 See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
getwud/wud :8.1.1	b1cd01c43839	stdlib@go1.15.15	1.26.9

Open the chart page →

8,091

whoamim11s

0.3.0

1 of 1 See more

whoami m11s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.12.0	c4717a8d1f01	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

357

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	stdlib@go1.20.4	1.26.9

Open the chart page →

1,984

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	stdlib@go1.19.7	1.26.9
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,063

magistralamagistrala-devops

0.16.2

17 of 42 See more

magistrala magistrala-devops 0.16.2

17 of the 42 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
authzed/spicedb :latest	aa96009a0477	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.26.9
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
library/nats :2.10.17-alpine	b7752304692b	stdlib@go1.22.4	1.26.9
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.15.0	5b21830a9e9d	stdlib@go1.22.4	1.26.9
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9
timescale/timescaledb :latest-pg12	645fd9e92d76	stdlib@go1.18.7	1.26.9
ghcr.io/absmach/magistrala/re :latest	0257a658a108	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2
ghcr.io/absmach/magistrala/ui-backend :latest	b3986672fa02	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

34,769

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
obolnetwork/charon-dkg-sidecar :main	87902178f0e7	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.22.5	0.60.0 1.26.9	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	golang.org/x/net@v0.0.0-20220513224357-95641704303c stdlib@go1.18.2	0.60.0 1.26.9	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0 stdlib@go1.21.10	0.60.0 1.26.9	1
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.26.9	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.60.0 1.26.9	1
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.26.9	1
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.26.9	1
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.26.9	1
oliver006/redis_exporter :v1.66.0	d98e6db8094f	stdlib@go1.23.2	1.26.9	1
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	stdlib@go1.26.1	1.26.9	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.60.0 1.26.9	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.60.0 1.26.9	1
ondrejsika/counter :latest	d95eaeee2172	golang.org/x/net@v0.46.0 stdlib@go1.26.2	0.60.0 1.26.9	1
oneuptime/runner :release	923154fcf6a9	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
onkar17/grafana :latest	aef3ebd6e24e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.1	0.60.0 1.26.9	1
opea/codegen-ui :1.0	2bee4eb66f3e	stdlib@go1.20.7	1.26.9	1
opea/codetrans-ui :1.0	3ef121f34610	stdlib@go1.20.12	1.26.9	1
opea/docsum-ui :1.0	7f854e9bffaf	stdlib@go1.20.12	1.26.9	1
opea/gmcmanager :1.0	514af17c495c	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.60.0 1.26.9	1
opencloudeu/opencloud :7.2.4	6d992ccc5f1c	golang.org/x/net@v0.55.0 stdlib@go1.25.11	0.60.0 1.26.9	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.60.0 1.26.9	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	stdlib@go1.19.8	1.26.9	1
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	stdlib@go1.24.4	1.26.9	1
opencsghq/csghub-portal :v2.5.1-ee	d28266bae753	golang.org/x/net@v0.28.0 stdlib@go1.23.3	0.60.0 1.26.9	1
opencsghq/csghub-server :v2.5.1-ee	20fbb6ea62a9	golang.org/x/net@v0.57.0 stdlib@go1.26.0	0.60.0 1.26.9	1
opencsghq/csghub-xnet :v2.5.0-ee	86ea22f495c7	golang.org/x/net@v0.39.0 stdlib@go1.24.10	0.60.0 1.26.9	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.60.0 1.26.9	1
opencsghq/gitlab-shell :v19.2.5	80a65ac370da	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
opencsghq/kube-state-metrics :v2.19.1	5ea147562ec8	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
opencsghq/lws :v0.6.1	de15437db41b	golang.org/x/net@v0.37.0 stdlib@go1.24.0	0.60.0 1.26.9	1
opencsghq/minio :RELEASE.2025-09-07T16-13-09Z	47f08843cf13	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.60.0 1.26.9	1
opencsghq/prometheus :v3.13.0	0aac0d04749e	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
opencsghq/prometheus-config-reloader :v0.92.1	44e6ec00729b	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
opendatacube/ows :latest	668cbb41473c	stdlib@go1.22.2	1.26.9	1
openebs/lvm-driver :1.10.1	41f73aba7f31	golang.org/x/net@v0.48.0 stdlib@go1.24.7	0.60.0 1.26.9	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.60.0 1.26.9	1
openebs/zfs-driver :2.11.2	0234692bb4a4	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9	1
openfga/openfga :v1.18.0	36097b960f66	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9	1
openkruise/agent-sandbox-controller :v0.6.0	2d5687595a31	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1
openkruise/kruise-game-manager :v1.1.0	d3c6d69d2c39	golang.org/x/net@v0.43.0 stdlib@go1.23.4	0.60.0 1.26.9	1
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.60.0 1.26.9	1
openkruise/kruise-manager :v1.9.1	f81ae78a36a4	golang.org/x/net@v0.38.0 stdlib@go1.23.9	0.60.0 1.26.9	1
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.60.0 1.26.9	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.60.0 1.26.9	1
openkruise/sandbox-gateway :v0.6.0	bebea74bff03	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1
openkruise/sandbox-manager :v0.6.0	1ab2dbfebc9d	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1