CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-9p37-4f4r-46f6 CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

7,482

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

12,921

wazuh-operatorwazuh-operator

2026.10.2

1 of 1 See more

wazuh-operator wazuh-operator 2026.10.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/maximewewer/wazuh-operator :2026.10.2	aad30dd2e645	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

anubiswbstack

0.1.0

1 of 1 See more

anubis wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

977

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

7,324

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9

Open the chart page →

10,875

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

azure-janitorwebdevops

1.0.13

1 of 1 See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-janitor :24.9.0	2446baee7b69	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,354

azure-keyvault-exporterwebdevops

1.0.12

1 of 1 See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-keyvault-exporter :24.9.1	f333704ecd60	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,353

azure-loganalytics-exporterwebdevops

1.0.13

1 of 1 See more

azure-loganalytics-exporter webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-loganalytics-exporter :25.12.0	051845d06d85	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

azure-resourcegraph-exporterwebdevops

1.1.5

1 of 1 See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcegraph-exporter :24.9.0	381136dda026	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,338

azure-resourcemanager-exporterwebdevops

1.3.6

1 of 1 See more

azure-resourcemanager-exporter webdevops 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcemanager-exporter :26.1.0	d3e1842ad419	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

970

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,691

kube-pool-managerwebdevops

1.0.16

1 of 1 See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/kube-pool-manager :24.9.0	4fad7e14ad67	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,038

pagerduty-exporterwebdevops

1.1.8

1 of 1 See more

pagerduty-exporter webdevops 1.1.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
webdevops/pagerduty-exporter :25.12.1	83b95faf10a0	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mariadb :10	7db29378d4fd	stdlib@go1.24.6	1.26.9

Open the chart page →

11,207

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,194

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

30,659

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	stdlib@go1.20.1	1.26.9

Open the chart page →

2,674

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,563

valkey-operatorwellcake

0.11.0

1 of 1 See more

valkey-operator wellcake 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/melancholictheory/wellcake :0.11.0	5833bb94d394	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

329

alertmanagerwener

2.1.1

2 of 2 See more

alertmanager wener 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

502

ambassadorwener

6.9.5

1 of 2 See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

5,651

apisixwener

2.18.1

1 of 3 See more

apisix wener 2.18.1

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

3,705

apisix-ingress-controllerwener

1.4.0

1 of 2 See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,338

argo-cdwener

10.10.3

2 of 3 See more

argo-cd wener 10.10.3

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/argoproj/argocd :v3.5.5	13db7b10db23	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

2,657

argocd-image-updaterwener

1.3.2

1 of 1 See more

argocd-image-updater wener 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.1	a578e328e8cb	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

398

argo-eventswener

2.4.27

1 of 1 See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.57.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,609

argo-rolloutswener

2.43.7

1 of 1 See more

argo-rollouts wener 2.43.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.1	fbcc4cf0a29d	golang.org/x/net@v0.56.0	0.60.0

Open the chart page →

220

argo-workflowswener

2.0.13

3 of 3 See more

argo-workflows wener 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.5	93534a0d0ba3	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/argoproj/argocli :v4.1.5	e0824b55297b	stdlib@go1.26.5	1.26.9
quay.io/argoproj/workflow-controller :v4.1.5	328307c9436f	stdlib@go1.26.5	1.26.9

Open the chart page →

966

athens-proxywener

0.5.2

2 of 2 See more

athens-proxy wener 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.60.0 1.26.9
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

6,742

cadencewener

0.23.0

2 of 5 See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.60.0 1.26.9
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

13,620

cert-managerwener

1.21.2

4 of 4 See more

cert-manager wener 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

866

cockroachdbwener

22.0.4

1 of 3 See more

cockroachdb wener 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

781

consulwener

2.0.4

2 of 2 See more

consul wener 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
hashicorp/consul :2.0.4	1c59f007df8e	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9
hashicorp/consul-k8s-control-plane :2.0.4	9334d7f4bcf0	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

459

emissary-ingresswener

8.12.2

1 of 2 See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	golang.org/x/net@v0.28.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

76,693

external-secretswener

2.12.0

1 of 1 See more

external-secrets wener 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

270

filebrowserwener

1.0.0

1 of 1 See more

filebrowser wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,422

giteawener

12.7.0

2 of 4 See more

gitea wener 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9

Open the chart page →

10,533

gitlab-runnerwener

0.93.0

1 of 1 See more

gitlab-runner wener 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

657

haproxy-ingresswener

0.16.2

1 of 1 See more

haproxy-ingress wener 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

243

ingress-nginxwener

4.15.1

2 of 2 See more

ingress-nginx wener 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,364

juicefs-csi-driverwener

0.33.0

5 of 5 See more

juicefs-csi-driver wener 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,321

kube-prometheus-stackwener

92.7.0

5 of 6 See more

kube-prometheus-stack wener 92.7.0

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.4-distroless	ae3d3add290a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.11.0	778d97dc3986	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,464

kubernetes-dashboardwener

7.14.0

4 of 5 See more

kubernetes-dashboard wener 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

5,075

kube-state-metricswener

8.6.0

1 of 1 See more

kube-state-metrics wener 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

322

logging-operatorwener

3.17.10

1 of 1 See more

logging-operator wener 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,541

longhornwener

1.2.3

1 of 2 See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.60.0 1.26.9

Open the chart page →

17,191

mesherywener

1.0.71

1 of 1 See more

meshery wener 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	b3816d0c691d	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,882

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.60.0 1.26.9	1
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.60.0 1.26.9	1
owncloud/server :10.15.0	51d9b74fc2a8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
owncloud/server :10.16.6	5b27fce26d9c	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9	1
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.60.0 1.26.9	1
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.60.0 1.26.9	1
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.26.9	1
oxynozeta/s3-proxy :5.1.1	21115040e224	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.100.0.1	63801b40a4e9	stdlib@go1.14.4	1.26.9	1
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.26.9	1
palopalepalo/jasperreports :8-v1.3	56b99b194d20	stdlib@go1.19.6	1.26.9	1
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9	1
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.26.9	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.26.9	1
percona/everest-helmtools :0.0.1	904458d04a18	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	1
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/net@v0.57.0 stdlib@go1.26.2	0.60.0 1.26.9	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.60.0 1.26.9	1
percona/percona-postgresql-operator :3.1.0	a7c50ef1545e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.23.1	78c87b933e18	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	1
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	stdlib@go1.19.9	1.26.9	1
percona/pmm-server :3.9.1	003f9c25f842	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	1
persesdev/perses :v0.54.0	a0e34ddaf9d7	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
persesdev/perses-operator :v0.5.0	8f8d7b09caef	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.60.0 1.26.9	1
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
pgsty/mc :RELEASE.2026-09-13T00-00-00Z	aa5cc1401b3e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
pgsty/silo :RELEASE.2026-09-03T13-18-01Z-distroless	2711cdc5bce0	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
pgvector/pgvector :pg16	7b822b0aac60	stdlib@go1.24.6	1.26.9	1
pgvector/pgvector :pg17	ac08538c6f8b	stdlib@go1.24.6	1.26.9	1
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.26.9	1
philmtd/full-house :1.10.0	224d602420ba	golang.org/x/net@v0.59.0 stdlib@go1.26.3	0.60.0 1.26.9	1
phntom/chadbot :0.2.3	97c28e4178ad	golang.org/x/net@v0.11.0 stdlib@go1.21.5	0.60.0 1.26.9	1
phntom/chartmuseum :v0.16.0	53883b65d9b7	golang.org/x/net@v0.10.0 stdlib@go1.19.3	0.60.0 1.26.9	1
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.60.0 1.26.9	1
phntom/codimd :2.4.3	1b9aafbb62e6	stdlib@go1.16	1.26.9	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9	1
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.60.0 1.26.9	1
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.60.0 1.26.9	1
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.60.0 1.26.9	1
photoprism/photoprism :231128-ce	284de9cc4f9c	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.60.0 1.26.9	1
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.60.0 1.26.9	1
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
photoprism/photoprism :260728	958642220223	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
photoprism/photoprism :251130	db16ee6b1ba3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
photoprism/photoprism :20211010	f4687352985a	golang.org/x/net@v0.0.0-20210929193557-e81a3d93ecf6 stdlib@go1.17.1	0.60.0 1.26.9	1