CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,341; of 18,137 indexed, latest versions
Container images: 6,191; deployed by those charts
Fix available: 3 of 5; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,341 of 18,137 indexed charts deploy, on 6,191 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9, 1.27.2	6,115
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,943
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-9p37-4f4r-46f6 CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,341 by stars

Chart

Latest

Affected images

Radar Score

frinx-machine-operatorsfrinx-helm-charts

0.3.0

2 of 2 See more

frinx-machine-operators frinx-helm-charts 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
arangodb/kube-arangodb :1.2.41	08d1720cec3b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9
ghcr.io/cloudnative-pg/cloudnative-pg :1.23.2	f1f3c20f3637	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

3,076

krakendfrinx-helm-charts

5.0.2

1 of 1 See more

krakend frinx-helm-charts 5.0.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
frinx/krakend :7.0.0	bf8edd4f52f3	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

1,985

resource-managerfrinx-helm-charts

2.3.1

1 of 4 See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
frinx/resource-manager :6.1.0	9cd0147a09bd	stdlib@go1.21.7	1.26.9

Open the chart page →

10,573

uniresourcefrinx-helm-charts

1.1.1

2 of 3 See more

uniresource frinx-helm-charts 1.1.1

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
frinx/resource-manager :1.0.4	55575caebd01	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.17.9	0.60.0 1.26.9
library/postgres :alpine	77f585114c32	stdlib@go1.24.6	1.26.9

Open the chart page →

5,328

workflow-managerfrinx-helm-charts

3.2.1

1 of 5 See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
frinx/schellar :6.1.0	4693dc627d32	stdlib@go1.21.11	1.26.9

Open the chart page →

10,047

powerdnsfsdrw08

0.1.3

1 of 4 See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
pschiffe/pdns-mysql :alpine	a7d2d021c788	stdlib@go1.21.5	1.26.9

Open the chart page →

2,583

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.26.9

Open the chart page →

5,910

icinga2g0dscookie

0.2.0

1 of 1 See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

6,059

passboltg0dscookie

0.5.2

2 of 2 See more

passbolt g0dscookie 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.26.9
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.26.9

Open the chart page →

10,733

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.26.9

Open the chart page →

3,150

castsponsorskipgabe565

0.8.1

1 of 1 See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,990

generic-device-plugingabe565

0.1.3

1 of 1 See more

generic-device-plugin gabe565 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

628

gotifygabe565

0.4.0

1 of 1 See more

gotify gabe565 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,314

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

2,525

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.26.9

Open the chart page →

1,871

matrimonygabe565

0.7.0

1 of 1 See more

matrimony gabe565 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.26.9

Open the chart page →

1,677

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

3,654

relax-soundsgabe565

1.1.0

1 of 1 See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/relax-sounds :latest	d9330eda7d8e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

648

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.26.9

Open the chart page →

15,352

smarter-device-managergabe565

0.5.2

1 of 1 See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.1	0.60.0 1.26.9

Open the chart page →

2,097

transsmutegabe565

1.1.0

1 of 1 See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

1,360

guacamolegabibbo97

0.3.0

1 of 3 See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.26.9

Open the chart page →

8,626

galoygaloymoney

0.34.7

4 of 24 See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

11,860

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.60.0 1.26.9
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

17,786

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

2,747

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

8,192

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

11,860

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.60.0 1.26.9
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

17,786

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

2,747

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

8,192

gameserver-operatorgameserver-operator

0.3.0

1 of 1 See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/idebeijer/gameserver-operator :latest	1b099cfe9e5e	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

775

pagesgary-pages

1.0.0

1 of 3 See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,570

gatewai-gatewaygatewai

0.23.1

1 of 3 See more

gatewai-gateway gatewai 0.23.1

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/qatr-io/gatewai/gateway :v0.23.1	d210ee73beea	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

1,489

alertmanager-discordgeek-cookbook

1.3.2

1 of 1 See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.26.9

Open the chart page →

1,982

anonaddygeek-cookbook

6.0.0

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	stdlib@go1.18.3	1.26.9

Open the chart page →

5,743

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.26.9

Open the chart page →

16,366

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

3,120

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.26.9

Open the chart page →

18,321

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

3,117

duplicatigeek-cookbook

5.4.2

1 of 1 See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/duplicati :latest	78883c4ea7a3	stdlib@go1.24.9	1.26.9

Open the chart page →

1,962

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.26.9

Open the chart page →

10,071

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

2,937

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

4,800

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.60.0 1.26.9

Open the chart page →

4,901

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	stdlib@go1.15	1.26.9

Open the chart page →

12,668

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	stdlib@go1.18.3	1.26.9

Open the chart page →

11,084

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	stdlib@go1.16.7	1.26.9

Open the chart page →

16,050

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0 stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

3,785

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

3,508

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

4,924

Container images carrying it

6,191 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi :v1.27.11	ccb9e1dbe4b0	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-attacher :v4.12.0	3aadb9baa021	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.17.0	264963e21f6d	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.14.0	6cb172e3de7e	golang.org/x/net@v0.40.0 stdlib@go1.26.5	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.16.0	dfa2570cf895	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v6.3.0	5c9423e1046a	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	golang.org/x/net@v0.34.0 stdlib@go1.25.5	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.1	3519c45b932d	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.0	357a13745ca5	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v2.2.1	f755aeee7277	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	golang.org/x/net@v0.34.0 stdlib@go1.25.7	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-snapshotter :v8.6.0	1ca5b663e3dd	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-snapshotter :v8.5.0	8f8a0ea1e0c6	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.19.0	3eb866c2c773	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	golang.org/x/net@v0.39.0 stdlib@go1.25.7	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	golang.org/x/net@v0.47.0 stdlib@go1.26.3	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9	1
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin :v0.18.2-12	5a4e52c87bb9	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
public.ecr.aws/aktosecurity/akto-agent-guard-service :latest	5c6ff17c5849	stdlib@go1.25.5	1.26.9	1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :1.75.1_local	49c88519dc19	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :1.74.7_local :latest	6b75164ae737	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :latest	eeff3738d708	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.74.7_local	500745200425	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.75.1_local	8eff42336169	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-threat-detection :1.18.7	55b1bd20ef02	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-threat-detection :latest	a1fe1ef75a55	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/akto-threat-detection :latest	f14d68a2b1cf	stdlib@go1.26.7	1.26.9	1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.1.0-1-ubi9	9026dbbf280d	stdlib@go1.24.6	1.26.9	1
public.ecr.aws/aktosecurity/mirror-api-logging :k8s_ebpf_core_imp	d94ce715f051	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9	1
public.ecr.aws/aws-containers/retail-store-sample-catalog :1.3.0	b654b266fa32	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.60.0 1.26.9	1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.26.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.60.0 1.26.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.60.0 1.26.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.60.0 1.26.9	1
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.26.9	1
public.ecr.aws/aws-observability/aws-for-fluent-bit :stable	aee01ceceb6c	stdlib@go1.27.1	1.27.2	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.50.0	7968fb60db6a	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.60.0 1.26.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.60.0 1.26.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.60.0 1.26.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	golang.org/x/net@v0.21.0 stdlib@go1.23.9	0.60.0 1.26.9	1
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	stdlib@go1.23.12	1.26.9	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.26.9	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.46.0	0bbb5f5ddf71	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9	1
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer :1.27.0	86957bbeeff5	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9	1