CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

zabbixcetic

3.1.3

3 of 5 See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :14	c2427de38f99	stdlib@go1.24.6	1.26.9
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.60.0 1.26.9
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9

Open the chart page →

37,580

chatwootchatwoot

2.0.27

2 of 3 See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.26.9
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.26.9

Open the chart page →

8,839

plugin-barman-cloudcloudnative-pg

0.8.1

1 of 1 See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud :v0.15.1	c75acad19a36	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

210

csi-driver-smbcsi-driver-smb

1.20.3

5 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

4,876

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,312

flux-operatorflux-operator

0.61.0

1 of 1 See more

flux-operator flux-operator 0.61.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/controlplaneio-fluxcd/flux-operator :v0.61.0	71041d9fff7f	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

212

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.26.9

Open the chart page →

9,064

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.26.9

Open the chart page →

7,627

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
google/cloud-sdk :alpine	ef78619c8239	stdlib@go1.26.6	1.26.9

Open the chart page →

9,033

hpe-csi-driverhpe-storage

3.3.0

13 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

13 of the 14 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

5,267

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

3,119

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

2,044

trident-operatornetapp-trident

100.2606.2

1 of 1 See more

trident-operator netapp-trident 100.2606.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
netapp/trident-operator :26.06.2	4cef5a737bcf	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

ngrok-operatorngrok

0.24.0

2 of 2 See more

ngrok-operator ngrok 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
ngrok/ngrok-operator :0.22.0	db8e6fecc52c	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

596

openbaoopenbao

0.30.1

2 of 2 See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/openbao/openbao :2.7.0	71156a1c6623	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,861

prometheus-snmp-exporterprometheus-community

9.18.1

1 of 1 See more

prometheus-snmp-exporter prometheus-community 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

933

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

6,981

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

3,185

trivytrivy-operator

0.27.0

1 of 1 See more

trivy trivy-operator 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.75.0	af6acf9a6b85	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

312

zotzot

0.1.128

1 of 1 See more

zot zot 0.1.128

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.22	96cda11459ce	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

571

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

14,353

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

3,829

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

9,237

netbirdjaconi

0.15.1

4 of 4 See more

netbird jaconi 0.15.1

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/golang :latest	e0174e51e812	stdlib@go1.27.1	1.27.2
netbirdio/management :0.45.1	0c9994b393ea	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/relay :0.45.1	872e3add0e1e	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/signal :0.45.1	46ce5a45538f	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

10,554

k8upk8up

4.10.0

1 of 1 See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.16.0	29458113b8b6	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,092

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

1,092

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

6,377

localstacklocalstack

0.7.1

1 of 1 See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
localstack/localstack-pro :latest	801a3dff7f6a	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:nojsonv2	0.60.0 1.27.2

Open the chart page →

2,267

gotenbergmaikumori

1.25.0

1 of 1 See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

15,373

renovate-operatormogenius

6.5.1

1 See more

renovate-operator mogenius 6.5.1

1 container image this version deploys carries CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

—

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	golang.org/x/net@v0.40.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

7,316

oneuptimeoneuptime

14.0.48

1 See more

oneuptime oneuptime 14.0.48

1 container image this version deploys carries CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

—

open-feature-operatoropen-feature-operator

0.9.3

1 of 1 See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

391

postgres-operatorpostgres-operator

2.0.3

1 of 1 See more

postgres-operator postgres-operator 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

281

telepresence-osstelepresence-oss

2.32.2

1 of 2 See more

telepresence-oss telepresence-oss 2.32.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/telepresenceio/tel2 :2.32.2	96f5a0f413b1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,001

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.26.9

Open the chart page →

7,390

karmawiremind

2.13.1

1 of 1 See more

karma wiremind 2.13.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.131	90a10c5c6793	stdlib@go1.26.3	1.26.9

Open the chart page →

361

yugabyteyugabyte

2026.1.2

1 of 1 See more

yugabyte yugabyte 2026.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

437

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,752

autheliaauthelia

0.11.22

1 of 1 See more

authelia authelia 0.11.22

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

8,172

camel-kcamel-k

2.11.0

1 of 1 See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
apache/camel-k :2.11.0	d173e7efe258	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,858

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,742

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

2,352

flagsmithflagsmith

0.83.0

1 of 4 See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,493

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

5,415

beylagrafana

1.16.11

1 of 1 See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/beyla :3.32.0	3ff0f7cf2bbf	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

426

helm-dashboardkomodor

2.0.7

1 of 1 See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
komodorio/helm-dashboard :2.1.3	258a9044e658	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

668

kube-prometheus-stackkube-prometheus-stack-oci

92.3.0

5 of 6 See more

kube-prometheus-stack kube-prometheus-stack-oci 92.3.0

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,434

kubescape-operatorkubescape

1.40.5

6 of 6 See more

kubescape-operator kubescape 1.40.5

6 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/kubescape/http-request :v0.2.23	4ff502a33423	stdlib@go1.26.7	1.26.9
quay.io/kubescape/kubescape :v4.0.14	418fa941ecc0	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/kubescape/kubevuln :v0.3.430	9bed2f723ea0	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/kubescape/node-agent :v0.3.219	2044ed750f5e	golang.org/x/net@v0.56.0 stdlib@go1.25.14	0.60.0 1.26.9
quay.io/kubescape/operator :v0.2.172	1ddcd2788e1e	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
quay.io/kubescape/storage :v0.0.348	6333d7845589	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

2,414

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/net@v0.37.0 stdlib@go1.23.10	0.60.0 1.26.9	1
ghcr.io/wasilak/go-hello-world :1.8.3	66d353e7693f	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	stdlib@go1.20.12	1.26.9	1
ghcr.io/wenkow/cert-manager-webhook-f5xc :0.6.0	0988cebf89bb	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	stdlib@go1.23.7	1.26.9	1
ghcr.io/whitemug/eviction-guard :0.2.3	b511e913c5c4	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	stdlib@go1.25.5	1.26.9	1
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	stdlib@go1.25.5	1.26.9	1
ghcr.io/wiremind/druid-tasks-exporter :v0.4.0	4755c3fcd5f0	stdlib@go1.21.4	1.26.9	1
ghcr.io/wiremind/koherence :v0.2.3	9c2afc45c55d	stdlib@go1.22.3	1.26.9	1
ghcr.io/wiremind/ovh-exporter :v2.3.1	609f955bd977	stdlib@go1.26.5	1.26.9	1
ghcr.io/wittdennis/calibre-web :1.1.3	1086aac67a05	stdlib@go1.17.8	1.26.9	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.7	df1ba94bd5c0	stdlib@go1.26.5	1.26.9	1
ghcr.io/wjentner/k8s-db-backup-retention :v1.1.0	8027bb46d1f4	golang.org/x/net@v0.26.0 stdlib@go1.23.5	0.60.0 1.26.9	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.26.9	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/net@v0.26.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.26.9	1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.16.15	0.60.0 1.26.9	1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones :0.1.5	a7a846bba3e8	golang.org/x/net@v0.52.0 stdlib@go1.25.11	0.60.0 1.26.9	1
ghcr.io/yasn77/pgbouncer :v0.0.6	cc8c13550e44	stdlib@go1.18.6	1.26.9	1
ghcr.io/yeonghoo2/crashloop-operator :0.0.6	565d1115e6bd	golang.org/x/net@v0.13.0 stdlib@go1.24.9	0.60.0 1.26.9	1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager :0.2.11	d078e45bac70	golang.org/x/net@v0.49.0 stdlib@go1.26.6	0.60.0 1.26.9	1
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	golang.org/x/net@v0.25.0 stdlib@go1.23.4	0.60.0 1.26.9	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9	1
ghcr.io/zalando/skipper :v0.27.88	3a357a2a4bef	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/zapier/kubechecks :latest	65780f7c0ae9	golang.org/x/net@v0.58.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.26.9	1
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.60.0 1.26.9	1
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/net@v0.35.0 stdlib@go1.23.3	0.60.0 1.26.9	1
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9	1
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9	1
ghcr.io/zokeber/velero-notifications :0.0.17	6d84f6c4ce20	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
ghcr.io/zufardhiyaulhaq/frp-operator :v0.13.0	66a5c1478fd8	golang.org/x/net@v0.23.0 stdlib@go1.23.12	0.60.0 1.26.9	1
mcr.microsoft.com/acstor/local-csi-driver :v0.3.0	f9af53a79fd1	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
mcr.microsoft.com/acstor/local-csi-manager :v0.3.0	4f464b52ba85	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
mcr.microsoft.com/aks/kaito/gpu-provisioner :0.2.0	1204a7e948e9	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.60.0 1.26.9	1
mcr.microsoft.com/aks/kaito/ragengine :0.12.0	7bfe651c92db	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
mcr.microsoft.com/aks/kaito/workspace :0.12.0	c4b887ca0542	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller :1.12.2	6991e4273bb4	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller-bootstrap :1.12.2	0709f9fd5bfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
mcr.microsoft.com/application-lb/images/alb-controller-crds :1.12.2	f5e176115522	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
mcr.microsoft.com/azure-app-configuration/kubernetes-provider :2.6.7	da4db80de17e	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b stdlib@go1.17.3	0.60.0 1.26.9	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.4	0.60.0 1.26.9	1
mcr.microsoft.com/mssql/server :latest	2b5b58162112	stdlib@go1.26.1	1.26.9	1