CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,330; of 18,108 indexed, latest versions
Container images: 6,140; deployed by those charts
Fix available: 2 of 4; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,330 of 18,108 indexed charts deploy, on 6,140 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,118
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,900
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc
Trending: Rank 3 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,330 by stars

Chart

Latest

Affected images

Radar Score

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.60.0 1.26.9
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.9

Open the chart page →

6,916

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

7,534

rekor-tilessigstore

1.2.6

1 of 1 See more

rekor-tiles sigstore 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/rekor-tiles/gcp :v2.2.1	e401cfe033c9	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

685

scaffoldsigstore

0.6.117

11 of 15 See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.26.9
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.26.9
ghcr.io/sigstore/fulcio :v1.9.0	2de0226c5f82	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sigstore/rekor/rekor-server :v1.5.4	100d793d68d0	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	4d64dac937e2	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.33	e591f98e3899	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	16673c1099a5	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.33	4c845ced03d8	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/ct_server :v0.7.33	24293fa1ed50	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	32ee491f4d00	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	3d0152303816	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

12,006

octopusdeploysimcube

1.0.21

1 of 2 See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

218

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

747

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.60.0 1.26.9

Open the chart page →

5,606

postgresql-singlesinextra

1.15.2

1 of 1 See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

6,267

registry-mirrorssinextra

2.0.19

1 of 1 See more

registry-mirrors sinextra 2.0.19

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.21	6b69512c00dc	golang.org/x/net@v0.58.0 stdlib@go1.26.8-X:jsonv2	0.60.0 1.26.9

Open the chart page →

685

skippersinextra

0.8.13

1 of 1 See more

skipper sinextra 0.8.13

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/skipper :v0.27.88	3a357a2a4bef	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

394

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

8,308

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,267

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

3,531

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	golang.org/x/net@v0.44.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,287

wireguardslybase-wireguard

2.0.9

1 of 1 See more

wireguard slybase-wireguard 2.0.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls125	437a490f7afc	golang.org/x/net@v0.47.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

738

smallest-self-hostsmallest-self-host

0.2.2

7 of 12 See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.60.0 1.26.9
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

11,758

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

1,979

aws-otel-collectorsnowplow-devops

0.17.0

1 of 1 See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-otel-collector :v0.50.0	7968fb60db6a	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

323

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.26.9

Open the chart page →

2,313

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.60.0 1.26.9
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.26.9
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

18,700

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.60.0 1.26.9

Open the chart page →

3,890

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.60.0 1.26.9
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.9

Open the chart page →

7,838

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.60.0 1.26.9

Open the chart page →

4,097

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.9

Open the chart page →

3,196

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

8,854

pubsubplussolace

3.10.0

1 of 1 See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

490

pubsubplus-devsolace

3.10.0

1 of 1 See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

490

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.26.9

Open the chart page →

5,496

rabbitmqsolidcharts

0.7.6

1 of 2 See more

rabbitmq solidcharts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	751bf4eeaa69	stdlib@go1.22.2	1.26.9

Open the chart page →

1,348

thanossolidcharts

0.12.2

1 of 1 See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

502

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

13,317

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,769

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,493

stackradar-scannerstackradar

0.6.0

1 of 1 See more

stackradar-scanner stackradar 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.6.0	a90480c17377	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,865

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.26.9

Open the chart page →

2,642

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.60.0 1.26.9

Open the chart page →

12,446

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,866

graph-nodestakewise

3.1.0

2 of 3 See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :v0.37.0	f4452cdedd68	stdlib@go1.24.1	1.26.9
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

6,170

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

7,447

multusstartechnica

0.1.2

1 of 1 See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :stable	9dc8ca645a78	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

691

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.60.0 1.26.9

Open the chart page →

4,599

thanosstevehipwell-helm-charts-thanos

1.24.1

1 of 1 See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

502

stornxstornx

1.1.1

9 of 9 See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.60.0 1.26.9
alazidis/stornx :1.1.1	602d4f7f090c	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9
quay.io/kiali/kiali :v2.23.0	7652b1285f50	golang.org/x/net@v0.49.0 stdlib@go1.25.0	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

16,508

consolestratos

4.4.0

1 of 4 See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
splatform/stratos-jetstream :4.4.0-bc65c315c	886311c331b9	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

31,232

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	golang.org/x/net@v0.36.0 stdlib@go1.23.8	0.60.0 1.26.9
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	golang.org/x/net@v0.36.0 stdlib@go1.23.8	0.60.0 1.26.9

Open the chart page →

2,324

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.60.0 1.26.9
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

16,930

supabasesupabse

0.8.0

4 of 11 See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9
supabase/gotrue :v2.189.0	385184459f57	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9
supabase/postgres :17.6.1.136	f371b5f3f2ac	stdlib@go1.26.1	1.26.9

Open the chart page →

22,505

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9

Open the chart page →

3,868

switchboardswitchboard

0.7.4

1 of 1 See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/borchero/switchboard :0.7.4	54a193b757da	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

1,316

switcher-gitopsswitcherapi

1.0.3

1 of 1 See more

switcher-gitops switcherapi 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
trackerforce/switcher-gitops :latest	20235fe419e4	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

Container images carrying it

6,140 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.60.0 1.26.9	1
zufardhiyaulhaq/nodejsweekly :v1.1.0	306859a3f167	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.40.0	135327c978de	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.13.15	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.60.0 1.26.9	1
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9	1
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.5	0.60.0 1.26.9	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.60.0 1.26.9	1
gcr.io/datadoghq/cluster-agent :7.61.0	6efe04ba4e06	golang.org/x/net@v0.33.0 stdlib@go1.22.8	0.60.0 1.26.9	1
gcr.io/datadoghq/csi-driver :1.4.0	86c713de81d9	golang.org/x/net@v0.57.0 stdlib@go1.25.12	0.60.0 1.26.9	1
gcr.io/datadoghq/observability-pipelines-worker :2.23.2	2f3d6f2d0015	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
gcr.io/datadoghq/private-action-runner :v1.21.0	5f5918f843a4	stdlib@go1.25.8	1.26.9	1
gcr.io/etcd-development/etcd :v3.7.2	7c6c239825d0	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
gcr.io/etcd-development/etcd :v3.5.9	8c956d9b0d39	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.60.0 1.26.9	1
gcr.io/gke-release/custom-metrics-stackdriver-adapter :v0.13.1-gke.0	6937c0a9b203	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.19.3	0.60.0 1.26.9	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.60.0 1.26.9	1
gcr.io/google.com/cloudsdktool/google-cloud-cli :alpine	7002c0b3cec5	stdlib@go1.26.6	1.26.9	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.60.0 1.26.9	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.60.0 1.26.9	1
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.60.0 1.26.9	1
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	golang.org/x/net@v0.3.0 stdlib@go1.20.5	0.60.0 1.26.9	1
gcr.io/k8s-staging-sig-storage/objectstorage-controller :v20221027-v0.1.1-8-g300019f	a84b574e8027	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
gcr.io/kasten-images/aggregatedapis :9.0.7	9a189cf0aff8	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/auth :9.0.7	16efe4c210e0	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/bloblifecyclemanager :9.0.7	83f7c06dc4d1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/catalog :9.0.7	0ea3df63f5b6	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/configmap-reload :9.0.7	b9b8a1b65f7a	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/controllermanager :9.0.7	a01f872d8e0c	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/crypto :9.0.7	6c6b6d9af1d4	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/dashboardbff :9.0.7	1a8b1ccfc402	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/events :9.0.7	e7beb79514f9	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/executor :9.0.7	4fe7419cecd9	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/garbagecollector :9.0.7	4dfd4a2dae57	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/gateway :9.0.7	6f14d4acd0c5	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/jobs :9.0.7	a093d080604f	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/kanister :9.0.7	03d05d517803	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/kanister-tools :9.0.7	9778af80396e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/logging :9.0.7	e41747f4a3c3	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/metering :9.0.7	209e1aaee219	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/prometheus :9.0.7	93bdb766db72	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/repositories :9.0.7	5c5435aea185	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9	1
gcr.io/kasten-images/state :9.0.7	c4bfd7feb74a	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/kasten-images/upgrade :9.0.7	b2447f8bc553	stdlib@go1.27.1	1.27.2	1
gcr.io/kasten-images/vbrintegrationapi :9.0.7	85e432303eff	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter	d675f211a40f	golang.org/x/net@v0.30.0 stdlib@go1.22.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress	ec4b544499ba	golang.org/x/net@v0.30.0 stdlib@go1.22.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker	395f4ff1bd34	golang.org/x/net@v0.30.0 stdlib@go1.22.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9	1