StackRadar

CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-9p37-4f4r-46f6CGA-w6c4-5355-g6w8DEBIAN-CVE-2026-78669GO-2026-6611
Also known as
CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending
Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.4
0.60.0
1.26.9

Open the chart page →

3,489
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

13,677
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15.3
0.60.0
1.26.9

Open the chart page →

4,388
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.14.1
0.60.0
1.26.9

Open the chart page →

4,450
kube-prometheus-stackmesosphere87.16.06 of 7See more

kube-prometheus-stack mesosphere 87.16.0

6 of the 7 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
grafana/grafana:13.1.0121a7a9ece6d
golang.org/x/net@v0.55.0
stdlib@go1.25.7
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.476a2170cd0c9
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.12.0-distroless843ed23bb564
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

10,178
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13
0.60.0
1.26.9

Open the chart page →

7,236
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.16.15
0.60.0
1.26.9

Open the chart page →

3,382
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc
stdlib@go1.13.4
0.60.0
1.26.9

Open the chart page →

4,115
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.2
0.60.0
1.26.9

Open the chart page →

12,151
prometheus-operatormesosphere12.11.135 of 8See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.3
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.14.12
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

16,548
registry-syncermesosphere0.1.01 of 1See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
regclient/regsync:v0.8.33d8d8e40afb7
stdlib@go1.24.2
1.26.9

Open the chart page →

774
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

4,634
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.4
0.60.0
1.26.9
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.14
0.60.0
1.26.9
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15
0.60.0
1.26.9
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.15.2
0.60.0
1.26.9
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.2
0.60.0
1.26.9
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.6
0.60.0
1.26.9

Open the chart page →

21,970
cert-manager-setupmesosphere-stable0.2.104 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9

Open the chart page →

11,168
cosimesosphere-stable0.2.21 of 1See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
golang.org/x/net@v0.40.0
stdlib@go1.24.11
0.60.0
1.26.9

Open the chart page →

735
dexmesosphere-stable2.14.24 of 5See more

dex mesosphere-stable 2.14.2

4 of the 5 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
golang.org/x/net@v0.11.0
stdlib@go1.20.4
0.60.0
1.26.9
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
golang.org/x/net@v0.25.0
stdlib@go1.22.7
0.60.0
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.21.18ee55a15d8b0
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9

Open the chart page →

22,857
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

4,626
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
stdlib@go1.13.3
0.60.0
1.26.9

Open the chart page →

5,397
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9

Open the chart page →

6,429
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9

Open the chart page →

4,121
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9
mesosphere/kubectl:v1.35.0-alpineea01a9387771
golang.org/x/net@v0.43.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

5,919
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
golang.org/x/net@v0.8.0
stdlib@go1.19.11
0.60.0
1.26.9

Open the chart page →

1,964
karmamesosphere-stable2.0.31 of 1See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.70d417abe7ddb5
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

3,275
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9

Open the chart page →

12,444
kommandermesosphere-stable0.39.219 of 29See more

kommander mesosphere-stable 0.39.2

19 of the 29 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.4
0.60.0
1.26.9
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.9
mesosphere/karma:v0.55-d2iq-proxy4693bb4e0814
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.7
0.60.0
1.26.9
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.14.5
0.60.0
1.26.9
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.13.8
0.60.0
1.26.9
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.2
0.60.0
1.26.9
prom/prometheus:v2.19.2cd134bd4fca0
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.14.4
0.60.0
1.26.9
thanosio/thanos:v0.19.088276fcd1491
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15.10
0.60.0
1.26.9
thanosio/thanos:v0.15.0b12d5c31bf5a
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.14.2
0.60.0
1.26.9
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.16.4
0.60.0
1.26.9
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
stdlib@go1.16.4
0.60.0
1.26.9
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.3
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.4
0.60.0
1.26.9
quay.io/thanos/thanos:v0.17.1e362f02ed304
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15
0.60.0
1.26.9

Open the chart page →

93,058
kube-prometheus-stackmesosphere-stable75.9.16 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

6 of the 7 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.60.0
1.26.9
grafana/grafana:12.0.2b5b59bfc7561
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
golang.org/x/net@v0.41.0
stdlib@go1.24.4
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9

Open the chart page →

14,281
logging-operatormesosphere-stable6.7.01 of 1See more

logging-operator mesosphere-stable 6.7.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:6.7.0df10e783095e
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

404
multusmesosphere-stable0.1.11 of 1See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
golang.org/x/net@v0.43.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

2,459
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980
stdlib@go1.13.7
0.60.0
1.26.9

Open the chart page →

8,791
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
stdlib@go1.24.4
1.26.9

Open the chart page →

3,296
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.60.0
1.26.9

Open the chart page →

2,814
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826
stdlib@go1.16.3
0.60.0
1.26.9

Open the chart page →

5,830
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
golang.org/x/net@v0.0.0-20211020060615-d418f374d309
stdlib@go1.17.3
0.60.0
1.26.9

Open the chart page →

10,344
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.13.8
0.60.0
1.26.9

Open the chart page →

4,026
activityrelaymhamzahkhanVerified publisher1.0.672 of 2See more

activityrelay mhamzahkhan 1.0.67

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.9
yukimochi/activity-relay:v2.0.115798afb69216
stdlib@go1.25.12
1.26.9

Open the chart page →

612
gogsmhio0.9.21 of 2See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
gogs/gogs:0.12.1420d53bb7277
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

4,489
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
stdlib@go1.18.2
1.26.9

Open the chart page →

5,068
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

5,524
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
stdlib@go1.24.6
1.26.9

Open the chart page →

4,934
apimicroslacVerified publisher0.1.01 of 2See more

api microslac 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.1999213b98257
golang.org/x/net@v0.23.0
stdlib@go1.21.9
0.60.0
1.26.9

Open the chart page →

4,242
argomicroslacVerified publisher0.1.03 of 4See more

argo microslac 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.26.9
ghcr.io/dexidp/dex:v2.38.0b1d793440a98
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.60.0
1.26.9
quay.io/argoproj/argocd:v2.10.783c86003b781
golang.org/x/net@v0.17.0
stdlib@go1.20.10
0.60.0
1.26.9

Open the chart page →

12,941
streamsmicroslacVerified publisher0.1.01 of 6See more

streams microslac 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
microslac/kafka-connect:latesta90091a1f524
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.60.0
1.26.9

Open the chart page →

21,880
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
golang.org/x/net@v0.4.0
stdlib@go1.18.9
0.60.0
1.26.9

Open the chart page →

2,639
middleware-odigosmiddleware-labsVerified publisher0.2.414 of 6See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-autoscaler:middleware-test-0.0.14aac0389614e4
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
stdlib@go1.19.6
0.60.0
1.26.9
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

11,957
middleware-visionmiddleware-labsVerified publisher0.2.654 of 6See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-autoscaler:middleware-test-0.0.231f7f89bc6585
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9
ghcr.io/middleware-labs/vision-instrumentor:middleware-test-0.0.4dfa5907170c4
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
stdlib@go1.19.7
0.60.0
1.26.9
ghcr.io/middleware-labs/vision-scheduler:middleware-test-0.0.33609a075c825
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

11,947
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.65 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-auto-injector:0.1.18512248e17e8
golang.org/x/net@v0.26.0
stdlib@go1.23.12
0.60.0
1.26.9
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
golang.org/x/net@v0.26.0
stdlib@go1.24.0
0.60.0
1.26.9
ghcr.io/middleware-labs/mw-lang-detector:0.1.2a4776aa2a56b
golang.org/x/net@v0.26.0
stdlib@go1.23.12
0.60.0
1.26.9
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
golang.org/x/net@v0.41.0
stdlib@go1.24.6
0.60.0
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

6,328
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
golang.org/x/net@v0.14.0
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

2,277
mw-kube-agent-v3middleware-labsVerified publisher1.8.62 of 2See more

mw-kube-agent-v3 middleware-labs 1.8.6

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.21.507011b628e6b
golang.org/x/net@v0.53.0
stdlib@go1.25.6
0.60.0
1.26.9
ghcr.io/middleware-labs/mw-kube-agent-config-updater:1.21.50a054cedfe30
golang.org/x/net@v0.53.0
stdlib@go1.25.6
0.60.0
1.26.9

Open the chart page →

2,319
sshportalmidokura-communityVerified publisher0.1.41 of 2See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
moul/sshportal:v1.19.3332b603727c3
stdlib@go1.17.6
1.26.9

Open the chart page →

3,280
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
golang.org/x/net@v0.30.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

1,939

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
louislam/its-mytabs:1.7.02e478d3170bd
stdlib@go1.24.4
1.26.9
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
golang.org/x/net@v0.9.0
stdlib@go1.19.6
0.60.0
1.26.9
1
louislam/uptime-kuma:2.0.24c364ef96aad
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:170233f4acb51
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:2.5.4917318f9d7be
golang.org/x/net@v0.55.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:2.4.091e963bfda56
golang.org/x/net@v0.55.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9
1
louislam/uptime-kuma:2.5.69912da7d7d9b
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d
stdlib@go1.17.5
0.60.0
1.26.9
1
louislam/uptime-kuma:1.18.5a84767d7934f
golang.org/x/net@v0.0.0-20220812174116-3211cb980234
stdlib@go1.18.5
0.60.0
1.26.9
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
golang.org/x/net@v0.19.0
stdlib@go1.19.6
0.60.0
1.26.9
1
lumenvox/admin-portal:8.0258583dde8a7
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/archive:8.04611915d66f6
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/cloud-init-tools:2.0.07ff037a71c50
stdlib@go1.17.3
1.26.9
1
lumenvox/cloud-init-tools:8.0c01faf8d628d
stdlib@go1.27.1
1.27.2
1
lumenvox/cloud-license:2.0.09a69862e1248
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.3
0.60.0
1.26.9
1
lumenvox/configuration:8.07badfce0df13
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/deployment:8.0dce4f18b4945
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/deployment-portal:8.04cf9bad0381d
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/file-store:8.08090031da992
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/license:8.01f985ca4d603
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/management-api:8.098fe71067039
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/resource:8.026edd01fa2ee
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
lumenvox/storage:8.057d15feb3603
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
machines/filestash:latestaff504cd28a8
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9
1
macropower/osrs_ge_exporter:v0.3c77ab5ea955c
stdlib@go1.21.0
1.26.9
1
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
golang.org/x/net@v0.1.0
stdlib@go1.19.2
0.60.0
1.26.9
1
macropower/wakatime-exporter:0.1.0dbb05debb785
stdlib@go1.14.6
1.26.9
1
makeplane/monitor-commercial:v3.3.2a3cdc662ba20
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
maldridge/alertmanager-irc-relay:v0.4.1391de2b76128
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.4
0.60.0
1.26.9
1
manojchaulagain/go-k8s:0.1.0f237b5f637ae
stdlib@go1.20.1
1.26.9
1
mantlenetworkio/l2geth:v0.4.36bf383d14291
golang.org/x/net@v0.10.0
stdlib@go1.19.10
0.60.0
1.26.9
1
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
stdlib@go1.25.12
1.26.9
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
golang.org/x/net@v0.56.0
stdlib@go1.25.12
0.60.0
1.26.9
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
golang.org/x/net@v0.4.0
stdlib@go1.20.2
0.60.0
1.26.9
1
masipcat/wireguard-go:latest696206e5954d
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.20.14
0.60.0
1.26.9
1
masipcat/wireguard-go:0.0.20230223769f7bb64694
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.20.14
0.60.0
1.26.9
1
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.8
0.60.0
1.26.9
1
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/net@v0.0.0-20220325170049-de3da57026de
stdlib@go1.18.1
0.60.0
1.26.9
1
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.9
0.60.0
1.26.9
1
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16
0.60.0
1.26.9
1
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16
0.60.0
1.26.9
1
matrixdotorg/synapse:v1.162.06b84a7bbac36
stdlib@go1.24.4
1.26.9
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
stdlib@go1.19.8
1.26.9
1
mattermost/calls-offloader:v0.9.0b440b282599e
golang.org/x/net@v0.19.0
stdlib@go1.22.7
0.60.0
1.26.9
1
mattermost/focalboard:0.9.031078df7a3c8
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16.5
0.60.0
1.26.9
1
mattermost/focalboard:0.6.7f2f987dada52
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.4
0.60.0
1.26.9
1
mattermost/mattermost-app-chaosengine:c153e436268954edd67
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16.8
0.60.0
1.26.9
1
mattermost/mattermost-enterprise-edition:11.71ba5ee61fc81
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.