CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,378; of 18,104 indexed, latest versions
Container images: 6,226; deployed by those charts
Fix available: 2 of 3; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,378 of 18,104 indexed charts deploy, on 6,226 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,204
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,983
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-78669 GO-2026-6611
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,378 by stars

Chart

Latest

Affected images

Radar Score

zabbixcetic

3.1.3

3 of 5 See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :14	c2427de38f99	stdlib@go1.24.6	1.26.9
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.60.0 1.26.9
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.26.9

Open the chart page →

37,570

chatwootchatwoot

2.0.27

2 of 3 See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.26.9
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.26.9

Open the chart page →

8,831

plugin-barman-cloudcloudnative-pg

0.8.1

1 of 1 See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud :v0.15.1	c75acad19a36	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

211

csi-driver-smbcsi-driver-smb

1.20.3

5 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

4,876

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,307

flux-operatorflux-operator

0.61.0

1 of 1 See more

flux-operator flux-operator 0.61.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/controlplaneio-fluxcd/flux-operator :v0.61.0	71041d9fff7f	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

212

gadgetgadget

0.56.1

1 of 1 See more

gadget gadget 0.56.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/inspektor-gadget/inspektor-gadget :v0.56.1	d1c34335183b	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

297

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.26.9

Open the chart page →

9,061

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.26.9

Open the chart page →

7,625

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
google/cloud-sdk :alpine	ef78619c8239	stdlib@go1.26.6	1.26.9

Open the chart page →

9,034

hpe-csi-driverhpe-storage

3.3.0

13 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

13 of the 14 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/alletra-9000-primera-and-3par-csp :v3.3.0	046215e41416	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp :v1.3.0	efaca660f9f0	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp :v1.1.0	043bb2ddb642	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/csi-extensions :v1.3.0	df65cea35805	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-provisioner :v1.1.0	9ba017780f80	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-group-snapshotter :v1.1.0	b26660528928	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
quay.io/hpestorage/volume-mutator :v1.4.0	3890d0b3aa89	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

5,270

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

3,119

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

2,045

trident-operatornetapp-trident

100.2606.2

1 of 1 See more

trident-operator netapp-trident 100.2606.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
netapp/trident-operator :26.06.2	4cef5a737bcf	golang.org/x/net@v0.59.0	0.60.0

Open the chart page →

ngrok-operatorngrok

0.24.0

2 of 2 See more

ngrok-operator ngrok 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
ngrok/ngrok-operator :0.22.0	db8e6fecc52c	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

596

openbaoopenbao

0.30.1

2 of 2 See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
quay.io/openbao/openbao :2.7.0	71156a1c6623	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,861

prometheus-snmp-exporterprometheus-community

9.18.1

1 of 1 See more

prometheus-snmp-exporter prometheus-community 9.18.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

933

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9

Open the chart page →

6,981

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.60.0 1.26.9

Open the chart page →

3,180

trivytrivy-operator

0.27.0

1 of 1 See more

trivy trivy-operator 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.75.0	af6acf9a6b85	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

312

zotzot

0.1.128

1 of 1 See more

zot zot 0.1.128

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.22	96cda11459ce	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

572

aws-ebs-csi-driveraws-ebs-csi-driver

2.66.1

5 of 6 See more

aws-ebs-csi-driver aws-ebs-csi-driver 2.66.1

5 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/csi-components/csi-attacher :v4.12.0-eksbuild.9	f8db68b6e3b3	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.17.0-eksbuild.8	9be2a65725f7	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-provisioner :v6.3.0-eksbuild.8	2fdf13756ccb	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/csi-components/csi-resizer :v2.2.1-eksbuild.7	a2895cc5206d	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.66.1	3ae75c8b0fdc	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,017

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

14,352

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

3,828

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

9,232

netbirdjaconi

0.15.1

4 of 4 See more

netbird jaconi 0.15.1

4 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/golang :latest	e0174e51e812	stdlib@go1.27.1	1.27.2
netbirdio/management :0.45.1	0c9994b393ea	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/relay :0.45.1	872e3add0e1e	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9
netbirdio/signal :0.45.1	46ce5a45538f	golang.org/x/net@v0.39.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

10,557

k8upk8up

4.10.0

1 of 1 See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.16.0	29458113b8b6	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,092

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.60.0 1.26.9

Open the chart page →

1,092

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

6,367

localstacklocalstack

0.7.1

1 of 1 See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
localstack/localstack-pro :latest	801a3dff7f6a	golang.org/x/net@v0.59.0 stdlib@go1.27.1-X:nojsonv2	0.60.0 1.27.2

Open the chart page →

2,268

gotenbergmaikumori

1.25.0

1 of 1 See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

15,373

renovate-operatormogenius

6.4.0

2 of 2 See more

renovate-operator mogenius 6.4.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/mogenius/renovate-operator :6.4.0	e8f023764de4	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

436

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.9
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	golang.org/x/net@v0.40.0 stdlib@go1.22.7	0.60.0 1.26.9

Open the chart page →

7,311

oneuptimeoneuptime

14.0.42

1 See more

oneuptime oneuptime 14.0.42

1 container image this version deploys carries CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

—

open-feature-operatoropen-feature-operator

0.9.3

1 of 1 See more

open-feature-operator open-feature-operator 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/open-feature/open-feature-operator :v0.9.3	b37a442c0497	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

391

postgres-operatorpostgres-operator

2.0.3

1 of 1 See more

postgres-operator postgres-operator 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v2.0.3	2d3a7ca3950f	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

281

telepresence-osstelepresence-oss

2.32.2

1 of 2 See more

telepresence-oss telepresence-oss 2.32.2

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/telepresenceio/tel2 :2.32.2	96f5a0f413b1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,001

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.26.9

Open the chart page →

7,386

karmawiremind

2.13.1

1 of 1 See more

karma wiremind 2.13.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.131	90a10c5c6793	stdlib@go1.26.3	1.26.9

Open the chart page →

361

yugabyteyugabyte

2026.1.2

1 of 1 See more

yugabyte yugabyte 2026.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

437

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,752

autheliaauthelia

0.11.22

1 of 1 See more

authelia authelia 0.11.22

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.60.0 1.26.9

Open the chart page →

8,166

camel-kcamel-k

2.11.0

1 of 1 See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
apache/camel-k :2.11.0	d173e7efe258	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,859

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

6,737

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

2,352

flagsmithflagsmith

0.83.0

1 of 4 See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,492

gitlab-operatorgitlab

3.4.1

1 of 1 See more

gitlab-operator gitlab 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :3.4.1	96efaea0d3bb	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

222

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

5,414

beylagrafana

1.16.11

1 of 1 See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/beyla :3.32.0	3ff0f7cf2bbf	golang.org/x/net@v0.57.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

426

Container images carrying it

6,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	stdlib@go1.20.7	1.26.9	1
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	stdlib@go1.17.13	1.26.9	1
thecodingmachine/workadventure-ejabberd :helm-chart	e1775ca7b145	stdlib@go1.17.13	1.26.9	1
thecodingmachine/workadventure-map-storage :helm-chart	519c31c6e7ec	stdlib@go1.20.12	1.26.9	1
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	stdlib@go1.19.3	1.26.9	1
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	stdlib@go1.20.7	1.26.9	1
thecodingmachine/workadventure-play :helm-chart	df31006cc4ce	stdlib@go1.20.12	1.26.9	1
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	stdlib@go1.20.7	1.26.9	1
thecodingmachine/workadventure-uploader :helm-chart	962e98843fb2	stdlib@go1.20.12	1.26.9	1
thelande/openmeteo_exporter :v1.0.7	7e9072ace15f	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9	1
thelisdeep/pii-shield :2.2.7	6a8b0c89227b	stdlib@go1.27.1	1.27.2	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/net@v0.8.0 stdlib@go1.21.0	0.60.0 1.26.9	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.1	0.60.0 1.26.9	1
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.60.0 1.26.9	1
thev1ndu/transfergw :latest	a07203713933	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	stdlib@go1.25.12	1.26.9	1
thijsvanloef/palworld-server-docker :v2.5.0	b4ac9ee22483	stdlib@go1.26.3	1.26.9	1
thingsboard/toolbox :1.29.0	0f6c14031777	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.60.0 1.26.9	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.15	0.60.0 1.26.9	1
tile38/tile38 :1.38.0	5b61c6f3b32e	golang.org/x/net@v0.48.0 stdlib@go1.26.4	0.60.0 1.26.9	1
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.60.0 1.26.9	1
timescale/timescaledb :latest-pg12	645fd9e92d76	stdlib@go1.18.7	1.26.9	1
timescale/timescaledb :latest-pg16	6f139d560429	stdlib@go1.26.2	1.26.9	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.26.9	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/net@v0.33.0 stdlib@go1.21.13	0.60.0 1.26.9	1
timescale/timescaledb-ha :pg16	e9f34d8dd276	golang.org/x/net@v0.26.0 stdlib@go1.27.1	0.60.0 1.27.2	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.26.9	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.26.9	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.26.9	1
tinymediamanager/tinymediamanager :5.3.4	48c15784a127	stdlib@go1.24.4	1.26.9	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.60.0 1.26.9	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5 stdlib@go1.13.10	0.60.0 1.26.9	1
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/net@v0.37.0 stdlib@go1.24.0	0.60.0 1.26.9	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.60.0 1.26.9	1
tolgee/tolgee :v3.230.0	ca5a59abeacd	stdlib@go1.24.6	1.26.9	1
toniblyx/prowler :stable	cf1ee9fc5b67	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.60.0 1.26.9	1
trackerforce/switcher-gitops :latest	20235fe419e4	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.60.0 1.26.9	1
traefik/traefikee :v2.12.11	6259bdda7aa6	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9	1
traefik/whoami :v1.10	1699d99cb4b9	stdlib@go1.23.5	1.26.9	1
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.26.9	1
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.26.9	1
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.26.9	1
traggo/server :0.2.3	f1ced637510e	stdlib@go1.13.1	1.26.9	1
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.60.0 1.26.9	1
treeverse/everest-lakefs-csi-driver :1.4.0	556a05af968c	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1