StackRadar

CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,341
of 18,137 indexed, latest versions
Container images
6,191
deployed by those charts
Fix available
3 of 5
affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,341 of 18,137 indexed charts deploy, on 6,191 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.9, 1.27.26,115
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,943
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-9p37-4f4r-46f6CGA-w6c4-5355-g6w8DEBIAN-CVE-2026-78669GO-2026-6611
Also known as
CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending
Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,341 by stars
ChartLatestAffected imagesRadar Score
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
golang.org/x/net@v0.33.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

4,083
spire-ha-agentspiffeVerified publisher0.3.21 of 2See more

spire-ha-agent spiffe 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
golang.org/x/net@v0.55.0
stdlib@go1.25.0
0.60.0
1.26.9

Open the chart page →

828
spire-identity-exchangespiffeVerified publisher0.2.33 of 3See more

spire-identity-exchange spiffe 0.2.3

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9
ghcr.io/spiffe/spire-identity-exchange-server:v0.6.046e15734ed29
golang.org/x/net@v0.58.0
stdlib@go1.26.0
0.60.0
1.26.9
registry.k8s.io/kubectl:v1.31.099b37df34bc4
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,563
spiffile-operatorspiffile-operatorVerified publisher0.1.41 of 1See more

spiffile-operator spiffile-operator 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

360
spillwayspillwayVerified publisher0.6.01 of 1See more

spillway spillway 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/kroy-the-rabbit/spillway:0.6.068f057e20f2d
golang.org/x/net@v0.58.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

546
spki-fingerprint-exporterspki-fingerprint-exporterVerified publisher0.7.21 of 1See more

spki-fingerprint-exporter spki-fingerprint-exporter 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
basa/spki-fingerprint-exporter:0.7.234cadcaa29c4
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

213
cloudflaredspnngl-cloudflaredVerified publisher0.2.11 of 1See more

cloudflared spnngl-cloudflared 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.10.09b49eed8f628
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

632
cs-firewall-bouncerspnngl-cs-firewall-bouncerVerified publisher0.1.81 of 1See more

cs-firewall-bouncer spnngl-cs-firewall-bouncer 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/spnngl/images/cs-firewall-bouncer:0.0.38cdbc4138ef0d
golang.org/x/net@v0.48.0
0.60.0

Open the chart page →

189
nftables-exporterspnngl-nftables-exporterVerified publisher0.1.01 of 1See more

nftables-exporter spnngl-nftables-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/spnngl/images/nftables-exporter:0.4.5041c2f10d854
stdlib@go1.27.1
1.27.2

Open the chart page →

450
spoolmanspoolmanVerified publisher0.2.71 of 1See more

spoolman spoolman 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.27.07aba565eff77
stdlib@go1.19.8
1.26.9

Open the chart page →

2,637
ocean-admission-controllerspot1.0.33 of 3See more

ocean-admission-controller spot 1.0.3

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnami/kubectl:latest999d5eb28f40
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
gcr.io/spotit-today/spot-ocean-admission-controller:0.1.64f634aeb31b8
golang.org/x/net@v0.44.0
stdlib@go1.24.13
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

1,916
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
golang.org/x/net@v0.48.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

56,974
ocean-vpaspot1.0.74 of 4See more

ocean-vpa spot 1.0.7

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
registry.k8s.io/autoscaling/vpa-admission-controller:1.6.080e487edff02
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.60.0
1.26.9
registry.k8s.io/autoscaling/vpa-updater:1.6.0b39d1dfa19cb
golang.org/x/net@v0.50.0
stdlib@go1.25.7
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
golang.org/x/net@v0.22.0
stdlib@go1.22.2
0.60.0
1.26.9

Open the chart page →

2,818
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.16.5
0.60.0
1.26.9

Open the chart page →

66,184
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
golang.org/x/net@v0.28.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

2,581
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
golang.org/x/net@v0.23.0
stdlib@go1.22.4
0.60.0
1.26.9

Open the chart page →

3,117
sqs-prometheus-exportersqs-prometheus-exporterVerified publisher2.0.31 of 1See more

sqs-prometheus-exporter sqs-prometheus-exporter 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
stdlib@go1.24.0
1.26.9

Open the chart page →

782
sqs-to-snssqs-to-sns2.0.151 of 1See more

sqs-to-sns sqs-to-sns 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
udhos/sqs-to-sns:2.0.15cf7979da82e1
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

1,265
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,570
sshpipersshpiperVerified publisher0.5.11 of 1See more

sshpiper sshpiper 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
farmer1992/sshpiperd:v1.6.19ddc25422cc2
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

424
servicexssl-hep1.8.62 of 16See more

servicex ssl-hep 1.8.6

2 of the 16 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
golang.org/x/net@v0.4.0
stdlib@go1.18.9
0.60.0
1.26.9
sslhep/servicex_app:v1.8.6c935e123030d
stdlib@go1.27.1
1.27.2

Open the chart page →

68,109
ecr-cleanersstarcherVerified publisher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
stdlib@go1.14.2
1.26.9

Open the chart page →

3,697
kube-ebs-taggersstarcherVerified publisher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
stdlib@go1.13.9
0.60.0
1.26.9

Open the chart page →

4,358
prestashopstack-prestahop22.0.01 of 4See more

prestashop stack-prestahop 22.0.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.18.3
0.60.0
1.26.9

Open the chart page →

4,155
stackrox-operatorstackroxVerified publisher4.11.51 of 1See more

stackrox-operator stackrox 4.11.5

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/stackrox-io/stackrox-operator:4.11.533900d05d026
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

329
retail-store-sample-catalog-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-catalog-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
golang.org/x/net@v0.41.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

1,277
stageset-controllerstageset-controllerOfficialVerified publisher2026.10.50531172 of 2See more

stageset-controller stageset-controller 2026.10.5053117

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/metio/stageset-controller:2026.10.5021840c328a7a140d3
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
registry.k8s.io/kubectl:v1.34.0497d298f891e
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

1,148
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.6
0.60.0
1.26.9

Open the chart page →

30,597
external-secretsstakaterVerified publisher0.3.12-40dbdfc1 of 1See more

external-secrets stakater 0.3.12-40dbdfc

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.5
0.60.0
1.26.9

Open the chart page →

3,180
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

2,212
k8scostoptimizerstakaterVerified publisher0.0.51 of 1See more

k8scostoptimizer stakater 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/k8s-cost-optimizer:v0.0.5450415ce1b4e
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

2,437
konfiguratorstakaterVerified publisher0.1.391 of 1See more

konfigurator stakater 0.1.39

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/konfigurator:v0.1.393409565b1ef5
golang.org/x/net@v0.17.0
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

2,176
mongodbstakaterVerified publisher1.0.31 of 1See more

mongodb stakater 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

516
proxyinjectorstakaterVerified publisher0.0.231 of 1See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
stdlib@go1.13.1
0.60.0
1.26.9

Open the chart page →

4,175
tronadorstakaterVerified publisher0.0.11 of 1See more

tronador stakater 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/tronador:v0.0.137ce9acf2722
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.11
0.60.0
1.26.9

Open the chart page →

3,383
vaultstakaterVerified publisher0.8.42 of 2See more

vault stakater 0.8.4

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.16.7
0.60.0
1.26.9
hashicorp/vault-k8s:0.14.0aff47b5ba39c
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.17.2
0.60.0
1.26.9

Open the chart page →

8,221
whitelisterstakaterVerified publisher0.0.161 of 1See more

whitelister stakater 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/whitelister:v0.0.1639107924063e
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.13.1
0.60.0
1.26.9

Open the chart page →

3,887
workshop-operatorstakaterVerified publisher0.0.381 of 2See more

workshop-operator stakater 0.0.38

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
stakater/workshop-operator:v0.0.3897bf456cc97c
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
stdlib@go1.16.13
0.60.0
1.26.9

Open the chart page →

8,001
my-appstakefish0.1.01 of 3See more

my-app stakefish 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

270
stakefishstakefish0.1.06 of 8See more

stakefish stakefish 0.1.0

6 of the 8 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/net@v0.24.0
stdlib@go1.22.3
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2706cde441321
golang.org/x/net@v0.22.0
stdlib@go1.22.2
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/net@v0.20.0
stdlib@go1.21.7
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.8.08a57af80a4c7
golang.org/x/net@v0.23.0
stdlib@go1.22.2
0.60.0
1.26.9
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

25,555
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
golang.org/x/net@v0.33.0
stdlib@go1.22.12
0.60.0
1.26.9

Open the chart page →

3,773
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

2,009
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
stdlib@go1.20.12
1.26.9

Open the chart page →

5,144
mev-booststakewise1.7.41 of 1See more

mev-boost stakewise 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
flashbots/mev-boost:1.8.07c486b5789da
stdlib@go1.22.6
1.26.9

Open the chart page →

1,717
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.15d99fbb9585c7
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.5
0.60.0
1.26.9

Open the chart page →

8,134
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
golang.org/x/net@v0.29.0
stdlib@go1.22.11
0.60.0
1.26.9

Open the chart page →

8,088
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

2,009
mediamtxstartechnicaVerified publisher0.1.11 of 1See more

mediamtx startechnica 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bluenviron/mediamtx:1.17.19e39256d1ba3
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9

Open the chart page →

966
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thick08b1bc4d7148
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,033
open-appsec-injectorstartechnicaVerified publisher1.1.22 of 3See more

open-appsec-injector startechnica 1.1.2

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/openappsec/smartsync:latest580d68c50cc7
stdlib@go1.18.10
1.26.9
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
stdlib@go1.18.10
1.26.9

Open the chart page →

6,038

Container images carrying it

6,191 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
stdlib@go1.26.5
1.26.9
1
ghcr.io/wittdennis/calibre-web:1.1.31086aac67a05
stdlib@go1.17.8
1.26.9
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
stdlib@go1.26.5
1.26.9
1
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
golang.org/x/net@v0.26.0
stdlib@go1.23.5
0.60.0
1.26.9
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
stdlib@go1.21.9
1.26.9
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
golang.org/x/net@v0.25.0
stdlib@go1.22.3
0.60.0
1.26.9
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
golang.org/x/net@v0.33.0
stdlib@go1.23.6
0.60.0
1.26.9
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
golang.org/x/net@v0.26.0
stdlib@go1.23.6
0.60.0
1.26.9
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.60.0
1.26.9
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.9
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.16.15
0.60.0
1.26.9
1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
golang.org/x/net@v0.52.0
stdlib@go1.25.11
0.60.0
1.26.9
1
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
stdlib@go1.18.6
1.26.9
1
ghcr.io/ydixken/pgcopydb-operator:v0.21.1654c8622fed1
golang.org/x/net@v0.59.0
stdlib@go1.27.0
0.60.0
1.27.2
1
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
golang.org/x/net@v0.13.0
stdlib@go1.24.9
0.60.0
1.26.9
1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager:0.2.11d078e45bac70
golang.org/x/net@v0.49.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/zalando/postgres-operator:v2.0.32d3a7ca3950f
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
golang.org/x/net@v0.25.0
stdlib@go1.23.4
0.60.0
1.26.9
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.60.0
1.26.9
1
ghcr.io/zapier/kubechecks:latest65780f7c0ae9
golang.org/x/net@v0.58.0
stdlib@go1.26.3
0.60.0
1.26.9
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
stdlib@go1.19.4
1.26.9
1
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
golang.org/x/net@v0.35.0
stdlib@go1.23.3
0.60.0
1.26.9
1
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
golang.org/x/net@v0.35.0
stdlib@go1.23.3
0.60.0
1.26.9
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
golang.org/x/net@v0.35.0
stdlib@go1.24.0
0.60.0
1.26.9
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
golang.org/x/net@v0.35.0
stdlib@go1.24.0
0.60.0
1.26.9
1
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
1
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.60.0
1.26.9
1
ghcr.io/zufardhiyaulhaq/frp-operator:v0.13.066a5c1478fd8
golang.org/x/net@v0.23.0
stdlib@go1.23.12
0.60.0
1.26.9
1
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
mcr.microsoft.com/acstor/local-csi-manager:v0.3.04f464b52ba85
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
golang.org/x/net@v0.20.0
stdlib@go1.21.8
0.60.0
1.26.9
1
mcr.microsoft.com/aks/kaito/ragengine:0.12.07bfe651c92db
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
1
mcr.microsoft.com/aks/kaito/workspace:0.12.0c4b887ca0542
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
1
mcr.microsoft.com/application-lb/images/alb-controller-crds:1.12.3ac33ff1ebfc5
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
mcr.microsoft.com/azure-app-configuration/kubernetes-provider:2.6.7da4db80de17e
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b
stdlib@go1.17.3
0.60.0
1.26.9
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.4
0.60.0
1.26.9
1
mcr.microsoft.com/mssql/server:latest2b5b58162112
stdlib@go1.26.1
1.26.9
1
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
stdlib@go1.26.1
1.26.9
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
stdlib@go1.23.1
1.26.9
1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
golang.org/x/net@v0.7.0
stdlib@go1.19.10
0.60.0
1.26.9
1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
golang.org/x/net@v0.7.0
stdlib@go1.19.10
0.60.0
1.26.9
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.14
0.60.0
1.26.9
1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15
0.60.0
1.26.9
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.15.2
0.60.0
1.26.9
1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.2
0.60.0
1.26.9
1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.6
0.60.0
1.26.9
1
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.2519f3891316a
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
1
mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.36.00b4df214c178
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.7a92afd76fb0d
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.