CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,335; of 18,117 indexed, latest versions
Container images: 6,154; deployed by those charts
Fix available: 3 of 5; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,335 of 18,117 indexed charts deploy, on 6,154 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,107
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-9p37-4f4r-46f6 CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,335 by stars

Chart

Latest

Affected images

Radar Score

litefunctionslitefunctions

0.1.1

14 of 19 See more

litefunctions litefunctions 0.1.1

14 of the 19 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ashupednekar535/litefunctions-ingestor :latest	cb293720e66e	golang.org/x/net@v0.47.0	0.60.0
ashupednekar535/litefunctions-operator :latest	80ad0954b9d9	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9
ashupednekar535/litefunctions-portal :latest	460f010659fe	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.60.0 1.26.9
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9
library/docker :28.3.3-dind	a56b3bdde893	golang.org/x/net@v0.39.0 stdlib@go1.24.5	0.60.0 1.26.9
library/nats :2.12.3-alpine	88fe8e0e09d6	stdlib@go1.25.5	1.26.9
library/postgres :16	ca0bd484cb98	stdlib@go1.24.6	1.26.9
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.9
ghcr.io/project-zot/zot :v2.1.14	4183bd731bcc	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.20.0	6a620381d995	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.20.0	b9009aa6b45b	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.20.0	54da63c9964d	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.20.0	2133daae1f08	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

19,967

pocketbase-halitesql

0.0.3

1 of 1 See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/pocketbase-ha :latest	80b42258bfe0	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

974

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	golang.org/x/net@v0.18.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

12,196

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/net@v0.0.0-20211004195052-b30845b58a23 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

3,343

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

2,121

pagesliviu884422-pages

1.0.0

1 of 3 See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,318

llmarinerllmariner

1.53.1

19 of 21 See more

llmariner llmariner 1.53.1

19 of the 21 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.26.9
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.26.9
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server :1.7.0	f1f6b884b325	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9

Open the chart page →

25,255

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

3,260

home-assistantlmatfy

0.1.38

1 of 1 See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2026.7	5a531753cea9	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

3,548

centcomloafoe

0.96.0

1 of 1 See more

centcom loafoe 0.96.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/centcom :v0.267.0	4b26cc8f2b4c	golang.org/x/net@v0.55.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

336

go-ocpp-serverloafoe

0.2.1

1 of 1 See more

go-ocpp-server loafoe 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-ocpp-server :v0.2.1	45bb960674ab	stdlib@go1.21.13	1.26.9

Open the chart page →

828

mcp-notifierloafoe

0.2.0

1 of 1 See more

mcp-notifier loafoe 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/mcp-notifier :v0.2.0	ea958b832415	stdlib@go1.26.4	1.26.9

Open the chart page →

278

mt-mcp-grafanaloafoe

0.10.0

2 of 2 See more

mt-mcp-grafana loafoe 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/mcp-grafana :0.14.0	42f541f22063	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9
ghcr.io/loafoe/mt-mcp-grafana :v0.1.1	2332d9b47475	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

2,875

mt-mcp-proxyloafoe

0.4.2

2 of 2 See more

mt-mcp-proxy loafoe 0.4.2

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/github/github-mcp-server :latest	ffced0d76e77	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/loafoe/mt-mcp-proxy :v0.3.0	881e7d8097bc	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,050

picoclawloafoe

0.1.2

1 of 2 See more

picoclaw loafoe 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/picoclaw :v0.0.19	42e1b6862913	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

856

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

2,877

local-path-exporterlocal-path-exporter

0.2.3

1 of 1 See more

local-path-exporter local-path-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/tmusial99/local-path-exporter :1.1.0	82476692c680	stdlib@go1.26.4	1.26.9

Open the chart page →

274

weather-app-chartlocal-weatherapp

0.1.0

2 of 4 See more

weather-app-chart local-weatherapp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :8.0.36-debian-11-r3	8aad73aa0c6d	stdlib@go1.21.6	1.26.9
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	golang.org/x/net@v0.10.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

8,346

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,503

locust-pluginslocust-plugins

0.0.4

2 of 3 See more

locust-plugins locust-plugins 0.0.4

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9
sky5367/locust-plugins-timescale :latest	d3150f201471	stdlib@go1.18.7	1.26.9

Open the chart page →

9,300

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

40,137

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/net@v0.26.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

1,485

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/net@v0.21.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

4,046

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.60.0 1.26.9
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.9

Open the chart page →

12,318

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.60.0 1.26.9

Open the chart page →

4,347

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/net@v0.53.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

1,331

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,353

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

4,273

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.60.0 1.26.9

Open the chart page →

4,046

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/net@v0.42.0 stdlib@go1.24.11	0.60.0 1.26.9

Open the chart page →

1,876

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,377

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

6,935

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.9

Open the chart page →

9,317

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

7,638

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.60.0 1.26.9
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

11,960

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.60.0 1.26.9

Open the chart page →

4,199

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/net@v0.46.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

3,261

filebeatlog10x-elastic-helm-charts

1.5.1

1 of 1 See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
log10x/filebeat-10x :1.1.39-native	7d6a79dacd58	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.7	0.60.0 1.26.9

Open the chart page →

8,028

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,479

nightingalelogic3579

0.3.1

4 of 6 See more

nightingale logic3579 0.3.1

4 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/net@v0.47.0 stdlib@go1.24.0	0.60.0 1.26.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.9
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.60.0 1.26.9

Open the chart page →

11,871

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,469

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.26.9

Open the chart page →

7,441

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/net@v0.20.0 stdlib@go1.21.13	0.60.0 1.26.9
logiqai/flash-discovery :v2.0.3	f5b551bca98e	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.18.9	0.60.0 1.26.9
logiqai/logiqctl :2.0.4	798306811f2d	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.7	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.60.0 1.26.9

Open the chart page →

22,267

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.26.9

Open the chart page →

4,045

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,305

loomwatchloomwatch

1.15.9

1 of 1 See more

loomwatch loomwatch 1.15.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/madduck-tech/loomwatch :1.15.9	8f08e7c84910	stdlib@go1.25.14	1.26.9

Open the chart page →

372

cloudflare-tunnel-remotelovemew67

0.1.2

1 of 1 See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	072c067d25cc	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

631

corednslovemew67

1.36.0

1 of 1 See more

coredns lovemew67 1.36.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
coredns/coredns :1.11.3	9caabbf6238b	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

1,783

oncall-hobbylovemew67

0.0.5

1 of 2 See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/redis :7.0.15	352c1fdadc91	stdlib@go1.18.2	1.26.9

Open the chart page →

7,255

loxilbloxilb

0.1.0

2 of 2 See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
ghcr.io/loxilb-io/loxilb :latest	a475b43946b3	golang.org/x/net@v0.55.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

5,818

Container images carrying it

6,154 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
keeper/injector-webhook :0.11.3	3eb609f3e60c	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9	1
keeper/injector-webhook :0.10.0	aeb5476b95f0	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
kenchrcum/fluxcd-helm-upgrader :0.7.7	c326e28a8f5f	golang.org/x/net@v0.41.0 stdlib@go1.25.9	0.60.0 1.26.9	1
keptncontrib/prometheus-service :0.6.0	29969dd547de	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.13.7	0.60.0 1.26.9	1
keptn/distributor :0.8.3	6bc3df9e0d6a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.2	0.60.0 1.26.9	1
keptn/distributor :0.8.4	72e17527a4f9	stdlib@go1.16.2	1.26.9	1
keptnsandbox/job-executor-service :0.1.3	6e6d323dd7ae	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.2	0.60.0 1.26.9	1
kesque/pulsar-monitor :1.0.8	ce85c1e7d613	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.4	0.60.0 1.26.9	1
keyauthoritydh/backend :1.4.10	b2519da39b25	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
keyporttech/csi-driver-nfs :2.0.0	5bd7955ea2f1	golang.org/x/net@v0.0.0-20190415100556-4a65cf94b679 stdlib@go1.14.2	0.60.0 1.26.9	1
kfirfer/gcloud-mysql :1.0.3	c257c1e0e8b9	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9	1
kfirfer/scripts :0.0.24	81e5c4e5d70e	stdlib@go1.17.10	1.26.9	1
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.14	0.60.0 1.26.9	1
khairul169/garage-webui :1.1.0	17c793551873	stdlib@go1.23.12	1.26.9	1
khaliq/drl-exporter :latest	8a7ed75c9aab	stdlib@go1.27.1	1.27.2	1
khaliq/pingme :v0.2.7	49f96888d2ab	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.60.0 1.26.9	1
klutchell/dnscrypt-proxy :2.1.18	a98e8d13314f	golang.org/x/net@v0.57.0 stdlib@go1.25.12	0.60.0 1.26.9	1
komodorio/helm-dashboard :2.1.3	258a9044e658	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9	1
komodorio/komoplane :0.2.1	9678d02c3f2e	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.60.0 1.26.9	1
kong/gateway-operator :1.6	03510967482b	golang.org/x/net@v0.39.0 stdlib@go1.24.5	0.60.0 1.26.9	1
kong/kong-operator :2.3.2	814eaeee4cc8	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18	0.60.0 1.26.9	1
kong/kubernetes-ingress-controller :2.1.1	60e4102ab2da	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.5	0.60.0 1.26.9	1
kong/kubernetes-ingress-controller :3.1	999213b98257	golang.org/x/net@v0.23.0 stdlib@go1.21.9	0.60.0 1.26.9	1
kronosorg/kronos-core :v0.4.0	301da21c59a5	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9	1
krontechnology/aapm-sidecar-injector :1.2.1	8b42fad987b3	golang.org/x/net@v0.57.0 stdlib@go1.25.13	0.60.0 1.26.9	1
krontechnology/aapm-sidecar-injector :1.1.0	e078d54c1711	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.60.0 1.26.9	1
kserve/kserve-controller :v0.10.0	22ff858b57c1	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.60.0 1.26.9	1
kserve/kserve-controller :v0.8.0	f0692a9ea09f	golang.org/x/net@v0.0.0-20211205041911-012df41ee64c stdlib@go1.17.7	0.60.0 1.26.9	1
kubearmor/kubearmor :stable	a08141311045	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
kubearmor/kubearmor-controller :latest	43674bb4806f	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
kubearmor/kubearmor-operator :v1.7.5	f5d21795c0d7	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
kubearmor/kubearmor-relay-server :latest	f82b9c97e97d	golang.org/x/net@v0.53.0 stdlib@go1.25.14	0.60.0 1.26.9	1
kubearmor/sidekick :latest	b7b92a447f15	golang.org/x/net@v0.14.0 stdlib@go1.20.8	0.60.0 1.26.9	1
kubebb/capsule-ce :v0.1.2-20221122	a3dba2a95cef	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.18.8	0.60.0 1.26.9	1
kubebb/cert-manager-cainjector :v1.8.0	f83cd256229b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
kubebb/cert-manager-controller :v1.8.0	20509de4b399	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
kubebb/cert-manager-webhook :v1.8.0	60d3cba0c267	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.60.0 1.26.9	1
kubebb/core :v0.1.6	2b9e7f451d6b	golang.org/x/net@v0.14.0 stdlib@go1.20.10	0.60.0 1.26.9	1
kubebb/core :latest	e366c34a9b8d	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.60.0 1.26.9	1
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.20.7	0.60.0 1.26.9	1
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.13	0.60.0 1.26.9	1
kubebb/ingress-nginx-controller :v1.3.0	067673df26a6	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.60.0 1.26.9	1
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18	0.60.0 1.26.9	1
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/net@v0.7.0 stdlib@go1.18.4	0.60.0 1.26.9	1
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.8	0.60.0 1.26.9	1
kubebb/resource-viewer :v0.2.0	65bb40b353db	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.7	0.60.0 1.26.9	1
kubebuilder/kube-rbac-proxy :v0.16.0	3c4f708c6204	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
kubedb/kubedb-enterprise :v0.11.0	5829bcedcb0d	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.3	0.60.0 1.26.9	1