CVE-2026-78663

Critical

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

Double flow control refund on HTTP/2 server streams in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-25j5-q798-fwm3 DEBIAN-CVE-2026-78663 GO-2026-6612
Also known as: CGA-vqxj-4gp6-23v9
Trending: Rank 2 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

lumenvoxlumenvox

8.0.0

11 of 11 See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :8.0	258583dde8a7	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/archive :8.0	4611915d66f6	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/cloud-init-tools :8.0	c01faf8d628d	stdlib@go1.27.1	1.27.2
lumenvox/configuration :8.0	7badfce0df13	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/deployment :8.0	dce4f18b4945	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/deployment-portal :8.0	4cf9bad0381d	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/file-store :8.0	8090031da992	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/license :8.0	1f985ca4d603	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/management-api :8.0	98fe71067039	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/resource :8.0	26edd01fa2ee	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
lumenvox/storage :8.0	57d15feb3603	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

2,390

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.26.9
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.60.0 1.26.9
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.9
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

82,740

dnsbl-exporterluzilla

0.5.0

1 of 2 See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/luzilla/dnsbl_exporter :v0.12.0	ecba7360ff12	golang.org/x/net@v0.53.0 stdlib@go1.25.0	0.60.0 1.26.9

Open the chart page →

2,097

lynqlynq

1.1.22

1 of 1 See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-lynq/lynq :1.1.22	229b05e3c717	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,039

cert-manager-webhook-infomaniakm0nsterrr-cert-manager-webhook-infomaniak

1.1.3

1 of 1 See more

cert-manager-webhook-infomaniak m0nsterrr-cert-manager-webhook-infomaniak 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak :v0.1.6	5b7373bc3664	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

222

magentomagento

3.2.3

5 of 12 See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.26.9
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.26.9
longhornio/longhorn-manager :v1.10.0	5b0bc1b88f0c	golang.org/x/net@v0.44.0 stdlib@go1.24.6	0.60.0 1.26.9
longhornio/longhorn-share-manager :v1.10.0	9f6e5e3be8ab	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9
longhornio/longhorn-ui :v1.10.0	e60f36161511	stdlib@go1.24.6	1.26.9

Open the chart page →

17,855

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

3,266

plane-enterprisemakeplane

3.10.6

4 See more

plane-enterprise makeplane 3.10.6

4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.26.9
makeplane/monitor-commercial :v3.3.2	a3cdc662ba20	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
pgsty/mc :RELEASE.2026-09-16T00-00-00Z	cfc83108c3ab	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
pgsty/minio :RELEASE.2026-08-04T00-00-00Z	b6bfe7239bfc	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

—

mattermost-enterprise-editionmattermost

2.6.105

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.105

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mattermost/mattermost-enterprise-edition :11.11.1	996a008fc0d5	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

1,178

Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacion

1.0.1

1 of 6 See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

22,462

mcpmcp-charts

0.0.23

3 of 7 See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-edgerouter :latest	0bdf876e5703	golang.org/x/net@v0.57.0	0.60.0
ghcr.io/gla-rad/mc-mms-router :latest	99e8c2a00a83	golang.org/x/net@v0.57.0	0.60.0
ghcr.io/maritimeconnectivity/identityregistry :latest	91de8dfffafe	stdlib@go1.26.7	1.26.9

Open the chart page →

4,252

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.60.0 1.26.9
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.60.0 1.26.9

Open the chart page →

8,023

metadata-injectormetadata-injector-operator

0.0.1

1 of 1 See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.60.0 1.26.9

Open the chart page →

1,096

metrics-server-exportermetrics-server-exporter

2.4.0

1 of 1 See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	golang.org/x/net@v0.47.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,661

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.60.0 1.26.9

Open the chart page →

4,513

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,096

librenmsmidokura-community

0.3.2

1 of 6 See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.26.9

Open the chart page →

10,000

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

4,233

minecraft-exporterminecraft-exporter

0.16.0

1 of 1 See more

minecraft-exporter minecraft-exporter 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/net@v0.51.0 stdlib@go1.25.10	0.60.0 1.26.9

Open the chart page →

680

miniapiminiapi

1.3.2

1 of 1 See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
udhos/miniapi :1.3.2	8a7042db82ce	stdlib@go1.23.2	1.26.9

Open the chart page →

1,270

miropsmirops-operator

0.2.0

2 of 2 See more

mirops mirops-operator 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/miropshq/mirops/operator :v0.2.0	4b0b5fef9a6a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9
ghcr.io/miropshq/mirops/remediation :v0.2.0	976a7319ff4a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,849

mlflow-servermlflowserver

0.1.9

1 of 3 See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

7,355

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

36,901

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

3,583

model-manager-servermodel-manager-server

1.27.0

1 of 1 See more

model-manager-server model-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,234

mongodb-atlas-operatormongodb-helm-charts

2.17.0

1 of 1 See more

mongodb-atlas-operator mongodb-helm-charts 2.17.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
mongodb/mongodb-atlas-kubernetes-operator :2.17.0	61541fc583b6	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

210

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9

Open the chart page →

16,059

redminemt190502

7.3.4

2 of 3 See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :18	5a5a84b19854	stdlib@go1.24.6	1.26.9
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.26.9

Open the chart page →

9,443

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

2,899

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

2,132

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.26.9

Open the chart page →

1,431

simple-gowikimy-helm-charts

0.2.0

1 of 1 See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.26.9

Open the chart page →

821

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.26.9

Open the chart page →

4,797

beszelnatpnk-k8s

1.0.0

2 of 2 See more

beszel natpnk-k8s 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
henrygd/beszel :latest	6b39a8b64f9b	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
henrygd/beszel-agent :latest	f27b1aa2c684	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

414

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.26.9

Open the chart page →

3,660

surveyornats

0.20.9

1 of 1 See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
natsio/nats-surveyor :0.9.9	104a3e938b23	stdlib@go1.26.1	1.26.9

Open the chart page →

1,239

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,279

spring-helmnaveenalla-springboot

1.0.0

1 of 2 See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/postgres :latest	5a5a84b19854	stdlib@go1.24.6	1.26.9

Open the chart page →

1,918

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.26.9
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0 stdlib@go1.20.13	0.60.0 1.26.9
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.60.0 1.26.9
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.26.9

Open the chart page →

46,011

netobserv-operatornetobserv

2.0.1

1 of 1 See more

netobserv-operator netobserv 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/netobserv/network-observability-operatordigest-pinned	c05814f8d633	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

251

monitorneuvectorcharts

2.11.2

1 of 1 See more

monitor neuvectorcharts 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
neuvector/prometheus-exporter :1.0.19	ab4e4332053a	stdlib@go1.26.8	1.26.9

Open the chart page →

237

cluster-issuersnginx-cert-charts

0.3.0

4 of 4 See more

cluster-issuers nginx-cert-charts 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.19.3	e51a06251338	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.19.3	2625754083d5	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

3,919

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.60.0 1.26.9

Open the chart page →

2,950

cloud9nicholaswilde

1.0.0

1 of 1 See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :version-1.29.2	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.60.0 1.26.9

Open the chart page →

13,016

gotifynicholaswilde

1.0.0

1 of 1 See more

gotify nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
gotify/server-arm7 :2.0.23	d91e302ad1d0	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

3,977

installernicholaswilde

1.0.0

1 of 1 See more

installer nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.26.9

Open the chart page →

2,276

shiorinicholaswilde

1.0.1

1 of 1 See more

shiori nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

3,500

writefreelynicholaswilde

1.0.0

1 of 1 See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

9,498

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9

Open the chart page →

1,941

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-78663.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.26.9

Open the chart page →

15,852

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91 stdlib@go1.17.5	0.60.0 1.26.9	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0 stdlib@go1.21.0	0.60.0 1.26.9	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.26.9	1
ghcr.io/dmazhukov/cronguard :0.4.3	7683dd5b26ba	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	golang.org/x/net@v0.40.0 stdlib@go1.25.6	0.60.0 1.26.9	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/dodevops/cloudian-exporter :0.1.1	8b7f2816541c	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.60.0 1.26.9	1
ghcr.io/dodevops/scalyr-k8snode-manager :latest	fc39fcdd3968	stdlib@go1.18.1	1.26.9	1
ghcr.io/dodevops/vmware-rest-proxy :0.1.7	30f7f73b0a10	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9	1
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	stdlib@go1.19.8	1.26.9	1
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.26.9	1
ghcr.io/doodlescheduling/k8sdb-controller :v0.0.1	a6c2251a6263	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.16.14	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8skeycloak-controller :v0.0.1	9befc51b1ad6	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.15	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8soauth2-proxy-controller :v0.1.2	80d049c9da31	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.11	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.8	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8sprom-patch-controller :v0.1.2	43b92c9cf029	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.17.8	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8stcpmap-controller :v0.0.1	ff005643dc97	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.14	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.16.15	0.60.0 1.26.9	1
ghcr.io/doodlescheduling/saml-exporter :v0.5.0	3d5a99841bc2	stdlib@go1.22.3	1.26.9	1
ghcr.io/douban/aliyun-exporter :main	b7c694331362	stdlib@go1.24.2	1.26.9	1
ghcr.io/douban/qiniu-exporter :main	d1da3bcfad7d	stdlib@go1.19.5	1.26.9	1
ghcr.io/douban/ucloud-exporter :main	b4bb8a9021a2	stdlib@go1.24.2	1.26.9	1
ghcr.io/douban/upyun-exporter :main	6810900c9c4a	stdlib@go1.25.5	1.26.9	1
ghcr.io/dpicillo/paguro/paguro-node-installer :v0.1.2	526c1324e1dc	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.60.0 1.26.9	1
ghcr.io/drakkan/sftpgo :v2.7.5	9011fe608d33	golang.org/x/net@v0.57.0 stdlib@go1.25.12	0.60.0 1.26.9	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/dsp0x4/cloudfront-tenant-operator :0.3.0	eb40174cd20d	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/duyet/gaxy :latest	31d658a22bd1	stdlib@go1.27.1	1.27.2	1
ghcr.io/dynamia-ai/hami-enterprise :v2.10.0-r0-openshift.c4e22e88	745504757300	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.26.9	1
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	stdlib@go1.22.2	1.26.9	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.60.0 1.26.9	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.60.0 1.26.9	1
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	golang.org/x/net@v0.58.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/edgelesssys/privatemode/privatemode-proxy	be97a17a37ed	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/eenchev/prometheus-universal-exporter :1.6.0	c7ffe36f13c6	golang.org/x/net@v0.59.0	0.60.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.60.0 1.26.9	1
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.26.9	1
ghcr.io/eminaktas/kubedns-shepherd :v0.4.4	0a20e1b41740	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/eminaktas/oom-tracer :v0.1.0	c90ca8389c87	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.60.0 1.26.9	1
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	golang.org/x/net@v0.50.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/emqx/emqx-operator :2.3.3	78d1c5eacebd	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/ente/server :0472c929b6070e61fecaf2013d47efce2dcda462	f646b68a1b8d	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/eosc-lot-1/logrotate :3-alpine	b0e20d200f89	stdlib@go1.22.4	1.26.9	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.20	0.60.0 1.26.9	1
ghcr.io/eraser-dev/eraser-manager :v1.4.2	cda6025d1152	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/erikmagkekse/btrfs-nfs-csi :0.12.0	cb29d9b801a5	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/erpc/erpc :0.1.1	8bfed3d49a08	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1