CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,326; of 18,117 indexed, latest versions
Container images: 6,148; deployed by those charts
Fix available: 3 of 5; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,326 of 18,117 indexed charts deploy, on 6,148 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,101
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,912
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-23xx-p5rw-vrp9 CGA-25j5-q798-fwm3 DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-qwrp-9ccr-5qpq, CGA-vqxj-4gp6-23v9
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,326 by stars

Chart

Latest

Affected images

Radar Score

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.12	0.60.0 1.26.9
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

8,422

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

3,917

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,403

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

3,290

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0 stdlib@go1.21.10	0.60.0 1.26.9

Open the chart page →

10,462

bitcoinddysnix

0.4.3

1 of 2 See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	stdlib@go1.22.2	1.26.9

Open the chart page →

2,628

bordysnix

0.0.8

1 of 1 See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

2,026

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	golang.org/x/net@v0.37.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

3,005

gke-upgrade-notification-handlerdysnix

0.1.1

1 of 1 See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

3,147

grafana-dashboardsdysnix

0.2.2

1 of 2 See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

6,438

heimdalldysnix

0.0.1

1 of 1 See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,083

local-path-provisionerdysnix

0.0.20

1 of 1 See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,086

pritunldysnix

0.2.7

1 of 3 See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.26.9

Open the chart page →

6,998

servicemonitor-appsdysnix

0.1.0

1 of 1 See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

2,417

smokeping-proberdysnix

0.3.1

1 of 1 See more

smokeping-prober dysnix 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
superque/smokeping-prober :v0.11.0	28ca636d1dee	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

877

eav-componenteav-component

1.0.0

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,163

echoappechoapp

0.1.0

1 of 1 See more

echoapp echoapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
hashicorp/http-echo :1.0.0	fcb75f691c8b	stdlib@go1.21.1	1.26.9

Open the chart page →

1,090

aeros-orchestrator-overlayeclipse-aerios

2.0.0

1 of 2 See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

1,863

api-gatewayeclipse-aerios

1.7.0

1 of 1 See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

2,070

federatoreclipse-aerios

1.1.0

1 of 1 See more

federator eclipse-aerios 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/net@v0.25.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

1,279

idmeclipse-aerios

2.0.0

1 of 2 See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.26.9

Open the chart page →

5,968

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.60.0 1.26.9
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.60.0 1.26.9
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

16,942

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

1,515

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0 stdlib@go1.23.12	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,561

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

3,588

llo-natseclipse-aerios

1.0.0

1 of 1 See more

llo-nats eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats :2.11.4	c8cd23806eef	stdlib@go1.24.3	1.26.9

Open the chart page →

1,266

mintakaeclipse-aerios

1.0.0

1 of 2 See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9

Open the chart page →

12,891

openfaas2eclipse-aerios

12.0.5

6 of 6 See more

openfaas2 eclipse-aerios 12.0.5

6 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.26.9
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.26.9
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.9
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

10,306

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eclipseaerios/openldap :2.6.3	0208743f315e	stdlib@go1.18.2	1.26.9

Open the chart page →

9,448

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.26.9

Open the chart page →

10,938

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

3,978

edge-accessedge-access

0.1.0

1 of 1 See more

edge-access edge-access 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.13.0	56e3daedf765	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,130

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,409

marblerunedgelesssys

1.9.2

1 of 1 See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	golang.org/x/net@v0.58.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,387

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

12,495

pagesedgwarepages

1.0.0

1 of 3 See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,318

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9

Open the chart page →

4,471

prometheusedu

11.6.0

4 of 6 See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.60.0 1.26.9
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9

Open the chart page →

13,424

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,340

adguard-homeegeback

2.0.14

1 of 2 See more

adguard-home egeback 2.0.14

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.79	aba9e3bf0613	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

424

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.60.0 1.26.9

Open the chart page →

1,870

home-assistantegeback

2.0.35

1 of 1 See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,302

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	stdlib@go1.24.6	1.26.9

Open the chart page →

8,415

uptime-kumaegeback

2.0.12

1 of 1 See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,800

egeria-baseegeria-charts

4.3.0

1 of 5 See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

4,480

egeria-lineageegeria-charts

4.1.0

1 of 3 See more

egeria-lineage egeria-charts 4.1.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

226

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,336

eg-universal-agent-operatoreg-universal-agent-operator

0.0.5

1 of 1 See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
eginnovations/universal-agent-operator :0.0.11	b8e3e26dca1b	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,071

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,503

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,427

Container images carrying it

6,148 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
timescale/timescaledb :latest-pg16	6f139d560429	stdlib@go1.26.2	1.26.9	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/net@v0.33.0 stdlib@go1.21.13	0.60.0 1.26.9	1
timescale/timescaledb-ha :pg16	e9f34d8dd276	golang.org/x/net@v0.26.0 stdlib@go1.27.1	0.60.0 1.27.2	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.26.9	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.26.9	1
tinymediamanager/tinymediamanager :5.3.4	48c15784a127	stdlib@go1.24.4	1.26.9	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.60.0 1.26.9	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5 stdlib@go1.13.10	0.60.0 1.26.9	1
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/net@v0.37.0 stdlib@go1.24.0	0.60.0 1.26.9	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9	1
toniblyx/prowler :stable	9dbcc3c9abd7	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.60.0 1.26.9	1
trackerforce/switcher-gitops :latest	20235fe419e4	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.60.0 1.26.9	1
traefik/traefikee :v2.12.11	6259bdda7aa6	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9	1
traefik/whoami :v1.10	1699d99cb4b9	stdlib@go1.23.5	1.26.9	1
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.26.9	1
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.26.9	1
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.26.9	1
traggo/server :0.2.3	f1ced637510e	stdlib@go1.13.1	1.26.9	1
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.60.0 1.26.9	1
treeverse/everest-lakefs-csi-driver :1.4.0	556a05af968c	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
treeverse/lakefs :1.88.0	237a17c6b2d8	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	1
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.8	0.60.0 1.26.9	1
treskon/portrait :DEV-latest	88e813f22347	stdlib@go1.26.5	1.26.9	1
trinodb/trino :481	5b5e0a97f599	stdlib@go1.26.2	1.26.9	1
trinodb/trino :479	6af989b0846d	stdlib@go1.25.4	1.26.9	1
trinodb/trino :483	db58cc93e593	stdlib@go1.26.4	1.26.9	1
truebyteinnovationllp/redis-exporter :v1.86.0	1c6a945af653	stdlib@go1.25.11	1.26.9	1
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.3	0.60.0 1.26.9	1
tusproject/tusd :v1.10.0	1e457b59fd5b	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.60.0 1.26.9	1
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.60.0 1.26.9	1
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.60.0 1.26.9	1
twinproduction/gatus :v5.34.0	3fff895e77d3	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9	1
tykio/portal :v1.19.0	78ffedae485e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
tykio/tyk-operator :v1.5.0	10f678bfdc27	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
uderelier19/pardus-nginx :25-nodeport	8ab640b44e3f	stdlib@go1.24.4	1.26.9	1
udhos/apiping :1.5.0	41ab9bae6f3b	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
udhos/eks-auto-pod-id-assoc :0.6.0	196ef68af380	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9	1
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
udhos/gateboard-discovery :1.9.5	5567c9363c4c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
udhos/k8s-mutating-admission-webhook :1.15.1	e588db500edf	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1