CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-9p37-4f4r-46f6 CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc, CGA-wgrx-6q33-q8q4
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

seafileschmitzis

13.0.13

2 of 4 See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
seafileltd/notification-server :13.0.21	1cac4101d0f4	stdlib@go1.26.2	1.26.9

Open the chart page →

44,456

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

4,257

vikunjaschmitzis

1.0.0

1 of 3 See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,204

koffanschoenwald

0.1.8

1 of 1 See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.9

Open the chart page →

174

minifluxschoenwald

0.1.6

1 of 1 See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

540

uptime-kumaschoenwald

1.0.10

1 of 1 See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,895

yopassschoenwald

1.1.0

1 of 2 See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2

Open the chart page →

548

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

61,319

restic-serverschoolguys-helmcharts

0.3.1

1 of 1 See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9

Open the chart page →

3,008

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,460

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.60.0 1.26.9

Open the chart page →

14,628

seafileseafile

0.12.1

1 of 1 See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.26.9

Open the chart page →

76,934

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

5,872

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,402

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.26.9

Open the chart page →

3,996

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,411

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

3,345

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9

Open the chart page →

1,555

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.26.9
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.26.9

Open the chart page →

7,671

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

789

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,428

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,735

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,270

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,711

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9

Open the chart page →

1,749

nucleisecurecodebox-nuclei

5.2.0

1 of 1 See more

nuclei securecodebox-nuclei 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
projectdiscovery/nuclei :v3.5.1	d76713284ad0	golang.org/x/net@v0.46.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,602

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

400

trivysecurecodebox-trivy

5.9.0

1 of 1 See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

838

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,009

security-webhooksecurity-webhook

0.0.14

1 of 1 See more

security-webhook security-webhook 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kubestar/security-webhook :latest	156d495afe77	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,206

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.60.0 1.26.9
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9

Open the chart page →

15,747

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9

Open the chart page →

3,164

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	6d45ab59ec50	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,861

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

360

s3managersergeyshevch

0.1.0

1 of 1 See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,212

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

4,015

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

4,170

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,106

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,489

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.26.9
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.26.9

Open the chart page →

7,321

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.26.9
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.26.9
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.26.9

Open the chart page →

11,804

serviceexampleserviceexample-chart

0.3.0

2 of 4 See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

4,359

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

2,170

service-exampleservice-example-jt

0.1.1

8 of 9 See more

service-example service-example-jt 0.1.1

8 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/mongodb-exporter :latest	fb4874bb3d07	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
bitnami/redis-exporter :latest	c6a2883c0bb7	stdlib@go1.26.8	1.26.9
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.26.9
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.9

Open the chart page →

10,552

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

10,910

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,424

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

3,837

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	stdlib@go1.18.2	1.26.9	1
wallarm/ingress-ruby :4.2.1-1	95ea2632326c	stdlib@go1.18.3	1.26.9	1
wallarm/ingress-ruby :4.6.0-1	aecdb35c4def	stdlib@go1.18.3	1.26.9	1
wallarm/kong-kubernetes-ingress-controller :2.8	b55ff6cecbd5	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	1
wallarm/node-helpers :5.0.2-1	097cadc42336	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.60.0 1.26.9	1
wallarm/node-helpers :6.10.1	aecd88b24c51	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
wallarm/node-native-processing :0.23.0	7db2da8fce0b	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.60.0 1.26.9	1
wallarm/node-next :0.5.2	4314f3d2b918	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.60.0 1.26.9	1
wateim/lighthouse-launch :latest	2520149ee574	golang.org/x/net@v0.33.0 stdlib@go1.23.8	0.60.0 1.26.9	1
wavefronthq/prometheus-storage-adapter :latest	ded77b38c7c6	golang.org/x/net@v0.17.0 stdlib@go1.18	0.60.0 1.26.9	1
wavefronthq/wavefront-hpa-adapter :0.9.12	af5fef9a4768	golang.org/x/net@v0.17.0 stdlib@go1.18	0.60.0 1.26.9	1
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/net@v0.5.0 stdlib@go1.18.9	0.60.0 1.26.9	1
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9	1
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9	1
weaveworks/flagger :1.0.0-rc.5	174307de1b36	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.2	0.60.0 1.26.9	1
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006 stdlib@go1.13.1	0.60.0 1.26.9	1
weaveworks/flagger-loadtester :0.9.0	3cdac6928a63	golang.org/x/net@v0.0.0-20190206173232-65e2d4e15006 stdlib@go1.13.1	0.60.0 1.26.9	1
webdevops/azure-janitor :24.9.0	2446baee7b69	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9	1
webdevops/azure-keyvault-exporter :24.9.1	f333704ecd60	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9	1
webdevops/azure-loganalytics-exporter :25.12.0	051845d06d85	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
webdevops/azure-metrics-exporter :25.12.0	1d3b453fba99	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
webdevops/azure-resourcegraph-exporter :24.9.0	381136dda026	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9	1
webdevops/azure-resourcemanager-exporter :26.1.0	d3e1842ad419	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	1
webdevops/kube-pool-manager :24.9.0	4fad7e14ad67	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9	1
webdevops/pagerduty-exporter :25.12.1	83b95faf10a0	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
webhookrelay/webhookrelay-operator :0.8.0	afffa826f068	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.13.5	0.60.0 1.26.9	1
weblate/weblate :2026.10.1.1	b0f200f38d70	stdlib@go1.26.7	1.26.9	1
wernight/ngrok :latest	d211f29ebcfe	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.60.0 1.26.9	1
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.60.0 1.26.9	1
wistefan/vcbackend :0.0.1	3bd436164b51	stdlib@go1.18.3	1.26.9	1
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :v1.9.9	464d11e36e10	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :latest	ac252dba4165	stdlib@go1.18.1	1.26.9	1
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.26.9	1
woodpeckerci/woodpecker-agent :v3.19.0	f85f163e0949	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
woodpeckerci/woodpecker-server :v3.19.0	6ca167a3c58b	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	stdlib@go1.20.12	1.26.9	1
wuhan005/forklift :daemon	4e6da210e449	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.60.0 1.26.9	1
wuhan005/forklift :controller	bfbe82d59850	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.60.0 1.26.9	1
xhofe/alist :v3.24.0	33f15a31be6c	golang.org/x/net@v0.12.0 stdlib@go1.20.5	0.60.0 1.26.9	1
xingse/kubernetes-oom-event-generator :v1.2.0	9f9d5492e4bf	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.13	0.60.0 1.26.9	1
xosphere/xonodepools :1.0.7	1458097b6f85	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
xperimental/nextcloud-exporter :0.9.1	3e90a3897651	stdlib@go1.26.1	1.26.9	1
yandex/clickhouse-server :latest	1cbf75aabe1e	stdlib@go1.16.7	1.26.9	1
yetiplatform/bloomcheck :dev	85683ddfccbb	stdlib@go1.24.2	1.26.9	1
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.26.9	1
yidadaa/chatgpt-next-web :latest	eaaa469ddeeb	stdlib@go1.20.12	1.26.9	1