StackRadar

CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,353
of 18,131 indexed, latest versions
Container images
6,192
deployed by those charts
Fix available
3 of 5
affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+209 more1.26.9, 1.27.26,123
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,944
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-9p37-4f4r-46f6CGA-w6c4-5355-g6w8DEBIAN-CVE-2026-78669GO-2026-6611
Also known as
CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending
Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars
ChartLatestAffected imagesRadar Score
karmazekker6Verified publisher0.22.01 of 1See more

karma zekker6 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.133f5d0a0ff4062
stdlib@go1.27.1
1.27.2

Open the chart page →

148
zookeeper-exporterzookeeper-exporter0.1.01 of 1See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.26.9

Open the chart page →

2,294
zoo-project-druzoo-projectOfficialVerified publisher0.10.92 of 6See more

zoo-project-dru zoo-project 0.10.9

2 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.2477f585114c32
stdlib@go1.24.6
1.26.9
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

7,302

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.3.2628f228f0fd5
stdlib@go1.24.6
1.26.9
1
library/mariadb:116422478cb8e1
stdlib@go1.24.6
1.26.9
1
library/mariadb:11.8.46b848cb24fbb
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.6.218a16204dc96c
stdlib@go1.18.2
1.26.9
1
library/mariadb:10.79a48ac9f196f
stdlib@go1.16.7
1.26.9
1
library/mariadb:12.3.2a02fe89cb597
stdlib@go1.24.6
1.26.9
1
library/mariadb:12.2.2b1cb255a9939
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.10.2bfc25a68e113
stdlib@go1.16.7
1.26.9
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
stdlib@go1.24.6
1.26.9
1
library/mariadb:10.6.15e22328f4d714
stdlib@go1.16.7
1.26.9
1
library/mariadb:10.9.4fbb8456ebdb1
stdlib@go1.16.7
1.26.9
1
library/mariadb:11.7.2fcc7fcd7114a
stdlib@go1.18.2
1.26.9
1
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.26.9
1
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.26.9
1
library/mongo:5.0.32-focal3b6c281e1c08
golang.org/x/net@v0.47.0
stdlib@go1.24.0
0.60.0
1.26.9
1
library/mongo:4.4-bionic3d0e6df9fd5b
stdlib@go1.16.3
1.26.9
1
library/mongo:5.0.14-focal50cae5081ab4
stdlib@go1.17.10
1.26.9
1
library/mongo:8:8.3.11:latest5d7043a4ffe0
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
library/mongo:noble61dd87ff554d
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
1
library/mongo:7-jammy6200825c6ed5
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
1
library/mongo:6.0.12646902910d6a
stdlib@go1.18.2
1.26.9
1
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.26.9
1
library/mongo:6.0.271a63fc2438e
stdlib@go1.17.10
1.26.9
1
library/mongo:5.0.217c81758cb295
stdlib@go1.19.12
1.26.9
1
library/mongo:7.0.28-jammy88785f6f665a
golang.org/x/net@v0.47.0
stdlib@go1.24.0
0.60.0
1.26.9
1
library/mongo:7.0.12ae1cf99fa7bf
stdlib@go1.21.12
1.26.9
1
library/mongo:8.0d0d926f94df0
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
1
library/mongo:4.4.18d23ec07162ca
stdlib@go1.17.10
1.26.9
1
library/mongo:8.0.11dca8d11fe467
golang.org/x/net@v0.40.0
stdlib@go1.23.8
0.60.0
1.26.9
1
library/mongo:8.2.12e0ce8c35124d
golang.org/x/net@v0.47.0
stdlib@go1.25.9
0.60.0
1.26.9
1
library/mongo:7.0-jammy:7-jammyf71f6d0913c9
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
1
library/mysql:8.4.3106d5197fd8e
stdlib@go1.18.2
1.26.9
1
library/mysql:8.0.303c1aab708f6e
stdlib@go1.16.7
1.26.9
1
library/mysql:8:8.4:8.4.1185b9bf2e29cf
stdlib@go1.24.6
1.26.9
1
library/mysql:8.4.108dbcf531a03a
stdlib@go1.24.6
1.26.9
1
library/mysql:9.0.192dc86967801
stdlib@go1.18.2
1.26.9
1
library/mysql:8.0-debian9382e4f6f7f0
stdlib@go1.24.6
1.26.9
1
library/mysql:8.0.41bf577825b52a
stdlib@go1.18.2
1.26.9
1
library/mysql:8.0.39ccb8f749bb5e
stdlib@go1.18.2
1.26.9
1
library/mysql:8.0.40d58ac93387f6
stdlib@go1.18.2
1.26.9
1
library/mysql:9.7.2e2bde46db656
stdlib@go1.24.6
1.26.9
1
library/nats:2.12.150764f1952d72
stdlib@go1.25.12
1.26.9
1
library/nats:2.12.6-alpine1cfc36e2e5e6
stdlib@go1.25.8
1.26.9
1
library/nats:2.12.2-alpine2d5fce3229ae
stdlib@go1.25.4
1.26.9
1
library/nats:2.10.25-alpine3290c829aa05
stdlib@go1.23.5
1.26.9
1
library/nats:2.14-alpine4063edae0717
stdlib@go1.26.8
1.26.9
1
library/nats:2.11.9-alpine777787bbb4c7
stdlib@go1.24.7
1.26.9
1
library/nats:2.7.2-alpine8b3fb2423a8c
stdlib@go1.17.6
1.26.9
1
library/nats:2.14.2-alpine952d157e28d5
stdlib@go1.26.3
1.26.9
1
library/nats:2.15.0-alpineac8f88a6494b
stdlib@go1.27.1
1.27.2
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.