StackRadar

CVE-2026-78667

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,276
of 18,137 indexed, latest versions
Container images
6,115
deployed by those charts
Fix available
1 of 2
affected packages

Lack of limit on size of parsed Range headers in net/http

Carried by container images the latest versions of 5,276 of 18,137 indexed charts deploy, on 6,115 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,115
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-78667GO-2026-6609
Trending
Rank 9 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,276 by stars
ChartLatestAffected imagesRadar Score
prometheusedu11.6.04 of 6See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.9
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.26.9
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.26.9
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.9

Open the chart page →

13,420
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
stdlib@go1.13.10
1.26.9

Open the chart page →

9,402
adguard-homeegebackVerified publisher2.0.141 of 2See more

adguard-home egeback 2.0.14

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
stdlib@go1.26.6
1.26.9

Open the chart page →

424
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
stdlib@go1.22.8
1.26.9

Open the chart page →

1,869
home-assistantegebackVerified publisher2.0.361 of 1See more

home-assistant egeback 2.0.36

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.314931c6b1375
stdlib@go1.23.3
1.26.9

Open the chart page →

3,368
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
stdlib@go1.24.6
1.26.9

Open the chart page →

8,503
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
stdlib@go1.26.3
1.26.9

Open the chart page →

37,269
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9

Open the chart page →

4,521
egeria-lineageegeria-charts4.1.01 of 3See more

egeria-lineage egeria-charts 4.1.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.9

Open the chart page →

226
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
stdlib@go1.24.4
1.26.9
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
stdlib@go1.24.4
1.26.9

Open the chart page →

5,438
eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher0.0.51 of 1See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
stdlib@go1.24.6
1.26.9

Open the chart page →

1,097
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
stdlib@go1.13.10
1.26.9

Open the chart page →

9,547
ejabberdejabberdVerified publisher0.1.01 of 1See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
indevlab/ejabberd:24.12-k8s8bc689d093a7
stdlib@go1.23.6
1.26.9

Open the chart page →

1,427
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.26.9

Open the chart page →

9,442
eks-auto-pod-id-assoceks-auto-pod-id-assoc0.6.01 of 1See more

eks-auto-pod-id-assoc eks-auto-pod-id-assoc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
stdlib@go1.26.3
1.26.9

Open the chart page →

1,265
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.9

Open the chart page →

1,809
elastic-agentelasticVerified publisher9.5.51 of 2See more

elastic-agent elastic 9.5.5

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
stdlib@go1.24.4
1.26.9

Open the chart page →

1,264
kube-state-metricselasticVerified publisher6.1.01 of 1See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
stdlib@go1.24.4
1.26.9

Open the chart page →

1,264
seafileeleksbai0.1.12 of 3See more

seafile eleksbai 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/mariadb:10.623616f0bd3af
stdlib@go1.24.6
1.26.9
seafileltd/seafile-mc:9.0.106693911bcc40
stdlib@go1.19
1.26.9

Open the chart page →

94,046
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
stdlib@go1.23.12
1.26.9

Open the chart page →

4,076
elsaelsa0.1.02 of 4See more

elsa elsa 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
geldata/gel:6b3a2815a3956
stdlib@go1.19.8
1.26.9
ghcr.io/stakater/reloader:v1.4.4a571c5b32c0f
stdlib@go1.24.4
1.26.9

Open the chart page →

5,519
rabbitmqemberstackVerified publisher1.0.221 of 1See more

rabbitmq emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/rabbitmq:management8d0592c8f13b
stdlib@go1.22.2
1.26.9

Open the chart page →

1,388
emissary-ingressemissary-ingress4.1.01 of 1See more

emissary-ingress emissary-ingress 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
stdlib@go1.24.13
1.26.9

Open the chart page →

1,512
Navidromeemmas-chartsVerified publisher0.0.41 of 1See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
deluan/navidrome:0.49.311a24da08977
stdlib@go1.19.5
1.26.9

Open the chart page →

3,737
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
stdlib@go1.21.0
1.26.9

Open the chart page →

3,014
cost-reportempathyco0.7.81 of 1See more

cost-report empathyco 0.7.8

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
empathyco/cost-report:0.0.124f1e26eaacbf
stdlib@go1.15.15
1.26.9

Open the chart page →

2,143
deadman-switchempathyco0.0.21 of 1See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
stdlib@go1.16.3
1.26.9

Open the chart page →

2,297
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
prometheuscommunity/elasticsearch-exporter:v1.3.0fe735268fbdc
stdlib@go1.16.9
1.26.9

Open the chart page →

12,053
yace-exporterempathyco0.1.01 of 1See more

yace-exporter empathyco 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
stdlib@go1.17.3
1.26.9

Open the chart page →

2,596
edge-operatoremqx-operator0.0.51 of 1See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
emqx/edge-operator-controller:0.0.553865c1267d9
stdlib@go1.19.10
1.26.9

Open the chart page →

2,057
kube-ecp-stackemqx-operator2.5.111 of 16See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
stdlib@go1.23.3
1.26.9
emqx/ecp-main:2.5.1fa876f71e5d6
stdlib@go1.22.0
1.26.9
emqxecp/otelcol:2.5.04c31d9bec846
stdlib@go1.22.12
1.26.9
library/telegraf:1.27507a3eecf809
stdlib@go1.20.7
1.26.9
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
stdlib@go1.23.2
1.26.9
quay.io/jetstack/cert-manager-cainjector:v1.16.13c49185718cf
stdlib@go1.23.2
1.26.9
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
stdlib@go1.23.2
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.16.1b4a5e42f6dbf
stdlib@go1.23.2
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.16.16edf44244b2a
stdlib@go1.23.2
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
stdlib@go1.23.2
1.26.9
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
stdlib@go1.23.1
1.26.9

Open the chart page →

31,597
cnpg-monitoringenixVerified publisher0.3.01 of 1See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
stdlib@go1.22.5
1.26.9

Open the chart page →

1,388
kube-packetloss-exporterenixVerified publisher0.2.12 of 2See more

kube-packetloss-exporter enix 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
stdlib@go1.23.4
1.26.9
quay.io/superq/smokeping-prober:v0.7.125d07dfc1d7e
stdlib@go1.20.5
1.26.9

Open the chart page →

7,792
mariadb-operator-monitoringenixVerified publisher0.1.01 of 1See more

mariadb-operator-monitoring enix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.9

Open the chart page →

1,236
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
stdlib@go1.21.7
1.26.9

Open the chart page →

4,940
network-exporterenixVerified publisher0.3.01 of 1See more

network-exporter enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
syepes/network_exporter:1.8.000af1691570e
stdlib@go1.25.1
1.26.9

Open the chart page →

1,893
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
stdlib@go1.26.3
1.26.9

Open the chart page →

2,735
zfs-exporterenixVerified publisher2.2.01 of 1See more

zfs-exporter enix 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/enix/zfs-exporter:2.3.1223b053f1cbd0
stdlib@go1.24.2
1.26.9

Open the chart page →

1,504
ai-gateway-helmenvoy-ai-gateway0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb1 of 1See more

ai-gateway-helm envoy-ai-gateway 0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
envoyproxy/ai-gateway-controller:003ab39f36923b5d40609a601e2951b73f6318fbec1f06ee29a7
stdlib@go1.24.6
1.26.9

Open the chart page →

1,353
eoapi-supporteoapiVerified publisher0.1.76 of 7See more

eoapi-support eoapi 0.1.7

6 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
stdlib@go1.21.5
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
stdlib@go1.20.6
1.26.9
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
stdlib@go1.20.6
1.26.9
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
stdlib@go1.21.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.0ec5d6f6be228
stdlib@go1.20.7
1.26.9
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
stdlib@go1.20.4
1.26.9

Open the chart page →

13,046
backendeoc-chartsVerified publisher0.1.01 of 1See more

backend eoc-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
hashicorp/http-echo:latestfcb75f691c8b
stdlib@go1.21.1
1.26.9

Open the chart page →

1,090
databaseeoc-chartsVerified publisher0.1.01 of 1See more

database eoc-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/postgres:14-alpine4ea9e5ed0659
stdlib@go1.24.6
1.26.9

Open the chart page →

703
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
stdlib@go1.16.7
1.26.9

Open the chart page →

6,438
umbrella-appeoc-chartsVerified publisher0.1.02 of 3See more

umbrella-app eoc-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
hashicorp/http-echo:latestfcb75f691c8b
stdlib@go1.21.1
1.26.9
library/postgres:14-alpine4ea9e5ed0659
stdlib@go1.24.6
1.26.9

Open the chart page →

1,850
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.9
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.26.9

Open the chart page →

32,042
eoloPlanteolo-plannerVerified publisher0.1.03 of 7See more

eoloPlant eolo-planner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.25.9
1.26.9
library/mysql:885b9bf2e29cf
stdlib@go1.24.6
1.26.9

Open the chart page →

30,507
eoloplannereoloplannerVerified publisher0.1.03 of 7See more

eoloplanner eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

37,737
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.03 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.25.9
1.26.9
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

31,531
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.9
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.26.9

Open the chart page →

31,991
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.9
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.26.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.9

Open the chart page →

34,013

Container images carrying it

6,115 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-78667.

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.