StackRadar

CVE-2026-78667

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,377
of 18,104 indexed, latest versions
Container images
6,223
deployed by those charts
Fix available
1 of 2
affected packages

Lack of limit on size of parsed Range headers in net/http

Carried by container images the latest versions of 5,377 of 18,104 indexed charts deploy, on 6,223 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.96,223
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-78667GO-2026-6609
Trending
Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,377 by stars
ChartLatestAffected imagesRadar Score
natsnatsVerified publisher2.15.03 of 3See more

nats nats 2.15.0

3 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/nats:2.15.0-alpineac8f88a6494b
stdlib@go1.27.1
1.26.9
natsio/nats-box:0.19.7ffce8bd10338
stdlib@go1.26.3
1.26.9
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.9

Open the chart page →

2,984
dexdexVerified publisher0.26.01 of 1See more

dex dex 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.9

Open the chart page →

541
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.9

Open the chart page →

36,792
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.9

Open the chart page →

12,807
falcofalcosecurity9.2.03 of 3See more

falco falcosecurity 9.2.0

3 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.0788f1129c542
stdlib@go1.26.8
1.26.9
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
stdlib@go1.26.8
1.26.9
falcosecurity/falcoctl:0.14.290ba9627886e
stdlib@go1.27.1
1.26.9

Open the chart page →

3,909
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.9

Open the chart page →

372
alertmanagerprometheus-communityOfficialVerified publisher2.1.02 of 2See more

alertmanager prometheus-community 2.1.0

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.9

Open the chart page →

487
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.9

Open the chart page →

922
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.9

Open the chart page →

3,517
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.9

Open the chart page →

2,138
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.59.01 of 1See more

prometheus-node-exporter prometheus-community 4.59.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9

Open the chart page →

350
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.9
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.9

Open the chart page →

2,052
grafanagrafana-communityVerified publisher13.5.01 of 1See more

grafana grafana-community 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9

Open the chart page →

314
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.9

Open the chart page →

1,604
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.95.25 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.95.2

5 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.9
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.9
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.9
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.9

Open the chart page →

1,633
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.9

Open the chart page →

2,279
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.9

Open the chart page →

523
home-assistanthelm-hassVerified publisher0.3.861 of 1See more

home-assistant helm-hass 0.3.86

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
stdlib@go1.23.3
1.26.9

Open the chart page →

2,810
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.9

Open the chart page →

1,550
openebsopenebsOfficialVerified publisher4.6.220 of 35See more

openebs openebs 4.6.2

20 of the 35 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.9
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.9
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.9
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.9
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.9
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.9
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.9
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.9
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.9
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.9
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.9
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.9

Open the chart page →

35,760
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.9

Open the chart page →

205
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.9

Open the chart page →

2,353
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.9

Open the chart page →

4,471
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.9

Open the chart page →

549
corednscorednsVerified publisher1.48.21 of 1See more

coredns coredns 1.48.2

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.9

Open the chart page →

539
apisixapisix2.18.01 of 3See more

apisix apisix 2.18.0

1 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.9

Open the chart page →

3,650
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.9

Open the chart page →

2,804
x509-certificate-exporterenixOfficialVerified publisher4.2.01 of 1See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/enix/x509-certificate-exporter:4.2.0afef14dc3862
stdlib@go1.26.5
1.26.9

Open the chart page →

350
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.9

Open the chart page →

2,937
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.124.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.124.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.160.05323a0df9508
stdlib@go1.26.8
1.26.9

Open the chart page →

201
trinotrino1.44.01 of 1See more

trino trino 1.44.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
trinodb/trino:483db58cc93e593
stdlib@go1.26.4
1.26.9

Open the chart page →

736
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.9

Open the chart page →

205
dagsterdagsterVerified publisher1.13.261 of 5See more

dagster dagster 1.13.26

1 of the 5 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.9

Open the chart page →

4,111
prometheus-redis-exporterprometheus-communityVerified publisher6.33.01 of 1See more

prometheus-redis-exporter prometheus-community 6.33.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.93.06ca518a72f30
stdlib@go1.27.1
1.26.9

Open the chart page →

145
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/postgres:161a6ab3f5345e
stdlib@go1.24.6
1.26.9
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.9
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.9

Open the chart page →

16,178
keycloakcloudpirates-keycloakVerified publisher0.21.462 of 3See more

keycloak cloudpirates-keycloak 0.21.46

2 of the 3 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.9
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

5,302
graylogkong-zVerified publisher3.0.361 of 5See more

graylog kong-z 3.0.36

1 of the 5 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.9

Open the chart page →

3,291
netdatanetdataVerified publisher3.7.1751 of 1See more

netdata netdata 3.7.175

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.01e50cc0b11f0
stdlib@go1.27.0
1.26.9

Open the chart page →

3,055
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
stdlib@go1.26.8
1.26.9
1password/connect-sync:1.8.3a760350c941a
stdlib@go1.26.8
1.26.9

Open the chart page →

482
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.9

Open the chart page →

2,605
opencostopencostOfficialVerified publisher2.5.321 of 2See more

opencost opencost 2.5.32

1 of the 2 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.9

Open the chart page →

478
openfaasopenfaas15.0.136 of 6See more

openfaas openfaas 15.0.13

6 of the 6 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.9
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.9
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.9
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.9
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
stdlib@go1.26.6
1.26.9
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.9

Open the chart page →

5,691
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.9

Open the chart page →

376
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.9
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.9
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.9

Open the chart page →

4,421
gitlab-agentgitlabVerified publisher2.32.01 of 1See more

gitlab-agent gitlab 2.32.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.4.04d3498887bee
stdlib@go1.27.1
1.26.9

Open the chart page →

230
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.9

Open the chart page →

1,150
policy-reporterpolicy-reporterOfficialVerified publisher3.11.01 of 1See more

policy-reporter policy-reporter 3.11.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.00f6eabff483b
stdlib@go1.27.1
1.26.9

Open the chart page →

230
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.9

Open the chart page →

6,645
netboxnetboxOfficialVerified publisher8.3.913 of 5See more

netbox netbox 8.3.91

3 of the 5 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnami/valkey:latest3ab4091a7e3c
stdlib@go1.26.8
1.26.9
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.9
ghcr.io/netbox-community/netbox:v4.7.26f7177d3ff4d
stdlib@go1.26.7
1.26.9

Open the chart page →

1,935
valkeybitnamiVerified publisher6.3.41 of 1See more

valkey bitnami 6.3.4

1 of the 1 container images this version deploys carry CVE-2026-78667.

Container imageDigestPackageFixed in
bitnami/valkey:latest3ab4091a7e3c
stdlib@go1.26.8
1.26.9

Open the chart page →

141

Container images carrying it

6,223 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
stdlib@go1.16.7
1.26.9
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
stdlib@go1.26.5
1.26.9
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
stdlib@go1.18.5
1.26.9
1
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
stdlib@go1.24.13
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thick08b1bc4d7148
stdlib@go1.26.8
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
stdlib@go1.24.13
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
stdlib@go1.23.9
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.39751856cacc8
stdlib@go1.21.13
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:stable9dc8ca645a78
stdlib@go1.26.8
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
stdlib@go1.13.10
1.26.9
1
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller:v0.3.72a2bb32c0ea8
stdlib@go1.22.12
1.26.9
1
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
stdlib@go1.25.6
1.26.9
1
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
stdlib@go1.26.3
1.26.9
1
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.9
1
ghcr.io/kagent-dev/kagent/controller:0.10.3b2572a59386b
stdlib@go1.27.1
1.26.9
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
stdlib@go1.24.9
1.26.9
1
ghcr.io/kagent-dev/kagent/tools:0.3.0cb89eb762161
stdlib@go1.26.7
1.26.9
1
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
stdlib@go1.24.11
1.26.9
1
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
stdlib@go1.24.13
1.26.9
1
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
stdlib@go1.23.5
1.26.9
1
ghcr.io/kamu-data/kamu-api-server:0.92.016a23a285ffc
stdlib@go1.15.2
1.26.9
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
stdlib@go1.25.6
1.26.9
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.26.9
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
stdlib@go1.20.7
1.26.9
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
stdlib@go1.23.10
1.26.9
1
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.9
1
ghcr.io/karlderkaefer/argocd-ecr-updater:1.4.6ed5d4b74792c
stdlib@go1.26.5
1.26.9
1
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
stdlib@go1.26.4
1.26.9
1
ghcr.io/kedacore/http-add-on-interceptor:0.16.03a9a454b949e
stdlib@go1.27.1
1.26.9
1
ghcr.io/kedacore/http-add-on-operator:0.16.02ae0076d549f
stdlib@go1.27.1
1.26.9
1
ghcr.io/kedacore/http-add-on-scaler:0.16.0db5223b1a375
stdlib@go1.27.1
1.26.9
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
stdlib@go1.23.3
1.26.9
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedacore/keda:2.21.081fe6547ce8d
stdlib@go1.26.8
1.26.9
1
ghcr.io/kedacore/keda-admission-webhooks:2.17.0a87c42275757
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedacore/keda-admission-webhooks:2.17.2c8227c6edb4d
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedacore/keda-admission-webhooks:2.21.0e1969628cca6
stdlib@go1.26.8
1.26.9
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedacore/keda-metrics-apiserver:2.21.0255375037fe5
stdlib@go1.26.8
1.26.9
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
stdlib@go1.23.3
1.26.9
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
stdlib@go1.23.8
1.26.9
1
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
stdlib@go1.24.3
1.26.9
1
ghcr.io/keel-hq/keel:0.22.409872633675d
stdlib@go1.26.5
1.26.9
1
ghcr.io/keiailab/mongodb-operator:v1.16.10fd3625695d18
stdlib@go1.26.8
1.26.9
1
ghcr.io/keiailab/nodevitals:0.9.4b07e506d4cb1
stdlib@go1.26.8
1.26.9
1
ghcr.io/keiailab/qdrant-operator:v0.10.23da83bf91aa1
stdlib@go1.26.8
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.