CVE-2026-78667

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,533; of 18,090 indexed, latest versions
Container images: 6,378; deployed by those charts
Fix available: 2 of 3; affected packages

Lack of limit on size of parsed Range headers in net/http

Carried by container images the latest versions of 5,533 of 18,090 indexed charts deploy, on 6,378 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,378
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r3	1.15.10-r7	1

OSV records: CGA-2557-335c-fw7p DEBIAN-CVE-2026-78667 GO-2026-6609
Also known as: CGA-45g6-2q2m-qqw5, CGA-5pwv-f862-8wm8, CGA-74p6-fgc6-5442, CGA-v895-gqr3-53g5, CGA-wxfg-gw3g-7f88
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,533 by stars

Chart

Latest

Affected images

Radar Score

service-gatewayappscode

2026.9.11

3 of 3 See more

service-gateway appscode 2026.9.11

3 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.3.0	e67f14e5c853	stdlib@go1.25.12	1.26.9
ghcr.io/voyagermesh/echoserver :v20221109	fa56a9251de6	stdlib@go1.19	1.26.9
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	stdlib@go1.26.4	1.26.9

Open the chart page →

3,653

service-presetsappscode

2024.2.11

1 of 1 See more

service-presets appscode 2024.2.11

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/echoserver :v20221109-7ee2f3e	fa56a9251de6	stdlib@go1.19	1.26.9

Open the chart page →

1,565

service-providerappscode

2026.9.11

2 of 2 See more

service-provider appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.18.2	7de54b6dedc8	stdlib@go1.23.3	1.26.9
ghcr.io/appscode/service-provider :v0.0.2	f6e481386d70	stdlib@go1.25.5	1.26.9

Open the chart page →

3,307

service-vaultappscode

2026.9.11

2 of 2 See more

service-vault appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	stdlib@go1.24.13	1.26.9
ghcr.io/kubevault/vault-operator :v0.25.0	c8e042b5cee8	stdlib@go1.25.12	1.26.9

Open the chart page →

1,607

sidekickappscode

2026.7.10

1 of 1 See more

sidekick appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/sidekick :v0.0.16	d8d2a3c22ee7	stdlib@go1.25.12	1.26.9

Open the chart page →

635

stash-communityappscode

0.42.0

4 of 4 See more

stash-community appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	stdlib@go1.16.9	1.26.9
ghcr.io/appscode/kubectl-nonroot :1.31	83d43cc41590	stdlib@go1.24.9	1.26.9
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	stdlib@go1.25.3	1.26.9
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	stdlib@go1.25.3	1.26.9

Open the chart page →

6,227

stash-opscenterappscode

2025.10.17

1 of 1 See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	stdlib@go1.25.3	1.26.9

Open the chart page →

1,145

stash-ui-serverappscode

0.23.0

1 of 1 See more

stash-ui-server appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	stdlib@go1.25.3	1.26.9

Open the chart page →

1,145

statefulsetappscode

0.0.1

2 of 3 See more

statefulset appscode 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	stdlib@go1.15.14	1.26.9
ghcr.io/appscode/kubectl-nonroot :v1.24	8ee5bdd68977	stdlib@go1.20.7	1.26.9

Open the chart page →

4,423

storage-metrics-serverappscode

2026.7.8

1 of 1 See more

storage-metrics-server appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	stdlib@go1.25.12	1.26.9

Open the chart page →

957

supervisorappscode

2026.2.16

1 of 1 See more

supervisor appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/supervisor :v0.0.12	23affde10a92	stdlib@go1.25.12	1.26.9

Open the chart page →

522

taskqueueappscode

2026.2.16

1 of 1 See more

taskqueue appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	stdlib@go1.25.5	1.26.9

Open the chart page →

1,531

tenant-operatorappscode

2026.9.22

1 of 1 See more

tenant-operator appscode 2026.9.22

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/tenant-operator :v0.0.3	8fe9b4157ed2	stdlib@go1.25.14	1.26.9

Open the chart page →

425

thanos-operatorappscode

2026.6.2

1 of 1 See more

thanos-operator appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/thanos-operator :v2026.4.24	e05a3e701291	stdlib@go1.26.2	1.26.9

Open the chart page →

744

tricksterappscode

2026.1.15

1 of 1 See more

trickster appscode 2026.1.15

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	stdlib@go1.25.5	1.26.9

Open the chart page →

1,685

vcd-lb-gcappscode

2026.6.25

1 of 1 See more

vcd-lb-gc appscode 2026.6.25

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/vcd-lb-gc :v0.1.0	524c4045cd21	stdlib@go1.25.11	1.26.9

Open the chart page →

491

voyagerappscode

2026.3.23

1 of 1 See more

voyager appscode 2026.3.23

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/voyager :v17.5.0	4964ceaf9d35	stdlib@go1.25.8	1.26.9

Open the chart page →

1,133

voyager-gatewayappscode

2026.10.10

2 of 2 See more

voyager-gateway appscode 2026.10.10

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.4.0	4466bb77dc78	stdlib@go1.25.13	1.26.9
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	stdlib@go1.26.4	1.26.9

Open the chart page →

1,994

haproxyappuio

2.7.2

1 of 1 See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	stdlib@go1.21.1	1.26.9

Open the chart page →

6,771

stardog-userrole-operatorappuio

0.4.0

1 of 1 See more

stardog-userrole-operator appuio 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	stdlib@go1.22.2	1.26.9

Open the chart page →

1,805

chart-app-vidapp-vid-chart

0.0.7

1 of 2 See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	stdlib@go1.26.8	1.26.9

Open the chart page →

9,085

appwriteappwrite-helm

1.3.2

4 of 8 See more

appwrite appwrite-helm 1.3.2

4 of the 8 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
appwrite/appwrite :1.9.0	1aaa70127114	stdlib@go1.25.7	1.26.9
bitnamilegacy/mariadb :10.6.12-debian-11-r13	15edb5643b73	stdlib@go1.19.7	1.26.9
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.19.7	1.26.9
openruntimes/executor :0.11.4	2228f186dcbb	stdlib@go1.21.10	1.26.9

Open the chart page →

13,291

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	stdlib@go1.16.4	1.26.9

Open the chart page →

6,468

arcadearcade

1.11.1

1 of 10 See more

arcade arcade 1.11.1

1 of the 10 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

1,037

argocd-ecr-updaterargocd-aws-ecr-updater

0.3.39

1 of 1 See more

argocd-ecr-updater argocd-aws-ecr-updater 0.3.39

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/karlderkaefer/argocd-ecr-updater :1.4.6	ed5d4b74792c	stdlib@go1.26.5	1.26.9

Open the chart page →

350

argocd-bitbucket-proxyargocd-bitbucket-proxy

1.1.1

1 of 1 See more

argocd-bitbucket-proxy argocd-bitbucket-proxy 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.26.9

Open the chart page →

478

argocdargo-helm-charts

1.0.0

3 of 3 See more

argocd argo-helm-charts 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	stdlib@go1.23.4	1.26.9
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	stdlib@go1.22.2	1.26.9

Open the chart page →

10,191

argo-workflowsargo-helm-charts

1.0.0

2 of 2 See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	stdlib@go1.24.6	1.26.9
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	stdlib@go1.24.6	1.26.9

Open the chart page →

2,843

clickhouseargonaut-charts

0.6.8

2 of 3 See more

clickhouse argonaut-charts 0.6.8

2 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.16.1	db7dde971407	stdlib@go1.13.15	1.26.9
altinity/metrics-exporter :0.16.1	85b4fdbae053	stdlib@go1.13.15	1.26.9

Open the chart page →

11,768

istio-discoveryargonaut-charts

0.3.3

1 of 1 See more

istio-discovery argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	stdlib@go1.16.4	1.26.9

Open the chart page →

76,174

istio-ingressargonaut-charts

0.3.3

1 of 1 See more

istio-ingress argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	stdlib@go1.16.4	1.26.9

Open the chart page →

76,119

argonix-apiargonix

0.6.5

1 of 4 See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/argonix-io/argonix-api :0.6.5	431abcce7c1e	stdlib@go1.22.7	1.26.9

Open the chart page →

6,079

argo-zombiesargo-zombies

0.1.52

1 of 1 See more

argo-zombies argo-zombies 0.1.52

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
ghcr.io/henrywhitaker3/argo-zombies :v0.4.4	316c397906c9	stdlib@go1.26.1	1.26.9

Open the chart page →

645

otel-collectorarieotech

0.1.0

1 of 1 See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.154.0	b3079f45e19b	stdlib@go1.26.4	1.26.9

Open the chart page →

751

arlas-aiasarlas-stack

28.9.0

6 of 22 See more

arlas-aias arlas-stack 28.9.0

6 of the 22 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	stdlib@go1.23.9	1.26.9
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	stdlib@go1.25.0	1.26.9
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	stdlib@go1.22.11	1.26.9
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	stdlib@go1.24.2	1.26.9
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	stdlib@go1.23.8	1.26.9
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	stdlib@go1.24.4	1.26.9

Open the chart page →

47,472

arma-reforgerarma-reforger

0.5.3

8 of 8 See more

arma-reforger arma-reforger 0.5.3

8 of the 8 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	stdlib@go1.19.3	1.26.9
stakater/reloader :v1.0.15	f4b87a8e56d4	stdlib@go1.20.1	1.26.9
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	stdlib@go1.18.10	1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.63.0	3f976422884e	stdlib@go1.19.5	1.26.9
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.26.9
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	stdlib@go1.19.4	1.26.9

Open the chart page →

30,609

articom-k8s-crdarticomio-helm-charts

1.2.3

2 of 2 See more

articom-k8s-crd articomio-helm-charts 1.2.3

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
articomio/articom-cx-operator :v1.2.3	89efda334136	stdlib@go1.25.14	1.26.9
hashicorp/vault :1.18	750bb37c1638	stdlib@go1.23.6	1.26.9

Open the chart page →

2,965

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	stdlib@go1.19.2	1.26.9

Open the chart page →

2,627

itera-lmaarzu

1.34.60

4 of 6 See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	stdlib@go1.17.11	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	stdlib@go1.17.10	1.26.9
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	stdlib@go1.17.3	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	stdlib@go1.18.3	1.26.9

Open the chart page →

12,740

authorizationassist-iot-authorisation

0.1.0

1 of 2 See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.26.9

Open the chart page →

7,015

dltkvassist-iot-data-integrity-verification

0.2.0

5 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	stdlib@go1.17.13	1.26.9
hyperledger/fabric-ca :latest	a70b6ba64a08	stdlib@go1.26.4	1.26.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.26.9
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.26.9
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.26.9

Open the chart page →

196,685

dltflassist-iot-dlt-based-fl

0.2.0

5 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	stdlib@go1.17.13	1.26.9
hyperledger/fabric-ca :latest	a70b6ba64a08	stdlib@go1.26.4	1.26.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.26.9
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.26.9
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.26.9

Open the chart page →

196,685

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.26.9

Open the chart page →

5,162

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.26.9

Open the chart page →

10,730

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.26.9

Open the chart page →

6,063

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.26.9

Open the chart page →

14,852

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.26.9

Open the chart page →

11,801

openapiassist-iot-open-api-management

0.2.2

2 of 6 See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	stdlib@go1.18.6	1.26.9
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	stdlib@go1.18	1.26.9

Open the chart page →

93,717

performanceandusagediagnosisassist-iot-pud

1.0.0

5 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

5 of the 7 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	stdlib@go1.17.12	1.26.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	stdlib@go1.20.6	1.26.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	stdlib@go1.18.3	1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	stdlib@go1.18.5	1.26.9

Open the chart page →

13,092

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-78667.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9

Open the chart page →

9,569

Container images carrying it

6,378 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/open-cluster-management/argocd-pull-integration :0.30.0	683ae238f351	stdlib@go1.26.8	1.26.9	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.26.9	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	stdlib@go1.16.12	1.26.9	2
quay.io/openshift/origin-cli :latest	e7965645fac6	stdlib@go1.26.7	1.26.9	2
quay.io/openshift/origin-csi-livenessprobe :latest	a6341950c413	stdlib@go1.24.6	1.26.9	2
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	stdlib@go1.23.12	1.26.9	2
quay.io/prometheus/alertmanager :latest :v0.34.0	690c7b525f43	stdlib@go1.26.6	1.26.9	2
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	stdlib@go1.20.4	1.26.9	2
quay.io/prometheus/blackbox-exporter :latest :v0.28.0	e753ff9f3fc4	stdlib@go1.25.5	1.26.9	2
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	stdlib@go1.26.5	1.26.9	2
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	stdlib@go1.23.6	1.26.9	2
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	stdlib@go1.17.3	1.26.9	2
quay.io/prometheus/node-exporter :v1.11.1-distroless	6112664fd761	stdlib@go1.26.1	1.26.9	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	stdlib@go1.14.3	1.26.9	2
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	stdlib@go1.17.3	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	stdlib@go1.20.6	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	stdlib@go1.23.4	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	stdlib@go1.23.3	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	stdlib@go1.23.2	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	stdlib@go1.25.6	1.26.9	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.91.0	9e53e1313921	stdlib@go1.25.9	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	stdlib@go1.23.2	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	stdlib@go1.24.3	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.88.1	d3d65efa3bee	stdlib@go1.25.6	1.26.9	2
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	stdlib@go1.23.1	1.26.9	2
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	stdlib@go1.22.4	1.26.9	2
quay.io/prometheus/prometheus :v3.13.2	508729e0e2d1	stdlib@go1.26.5	1.26.9	2
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	stdlib@go1.23.4	1.26.9	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	stdlib@go1.15.3	1.26.9	2
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	stdlib@go1.21.0	1.26.9	2
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	stdlib@go1.18.3	1.26.9	2
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	stdlib@go1.25.3	1.26.9	2
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	stdlib@go1.21.1	1.26.9	2
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	stdlib@go1.23.4	1.26.9	2
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.26.9	2
quay.io/thanos/thanos :v0.39.2	1d022ef4b8ef	stdlib@go1.24.0	1.26.9	2
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	stdlib@go1.22.5	1.26.9	2
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	stdlib@go1.22.6	1.26.9	2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra :latest	b1198ea741d1	stdlib@go1.24.11	1.26.9	2
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	stdlib@go1.16.15	1.26.9	2
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	stdlib@go1.21.3	1.26.9	2
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	stdlib@go1.24.4	1.26.9	2
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	stdlib@go1.21.5	1.26.9	2
registry.k8s.io/ingress-nginx/controller :v1.12.1	d2fbc4ec70d8	stdlib@go1.24.1	1.26.9	2
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.26.9	2
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	stdlib@go1.19.5	1.26.9	2
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	stdlib@go1.19.5	1.26.9	2
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	stdlib@go1.26.8	1.26.9	2