CVE-2026-78669

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,325; of 18,108 indexed, latest versions
Container images: 6,126; deployed by those charts
Fix available: 2 of 4; affected packages

Excessive CPU consumption from repeated initial window changes in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,104
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,888
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-w6c4-5355-g6w8 DEBIAN-CVE-2026-78669 GO-2026-6611
Also known as: CGA-w74x-3c39-v8mc
Trending: Rank 4 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars

Chart

Latest

Affected images

Radar Score

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

8,571

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

2,475

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

3,212

kubeuserkubeuser

0.1.2

1 of 1 See more

kubeuser kubeuser 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/openkube-hub/kubeuser-controller :0.1.2	27cc7b4dfa0a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

208

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	golang.org/x/net@v0.7.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

2,237

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	golang.org/x/net@v0.37.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,331

admission-controllerkubewarden

6.1.0

2 of 2 See more

admission-controller kubewarden 6.1.0

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kubewarden/adm-controller/audit-scanner :v1.38.2	c3dda1e1149a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/kubewarden/adm-controller/controller :v1.38.2	383f71d05b44	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

416

runtime-enforcerkubewarden

0.2.1

3 of 3 See more

runtime-enforcer kubewarden 0.2.1

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.161.0	fd328de25524	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/kubewarden/runtime-enforcer/agent :v0.10.1	dc463d8f7553	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/kubewarden/runtime-enforcer/controller :v0.10.1	b005743f7868	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

637

kubiks-agentkubiks

0.4.0

3 of 3 See more

kubiks-agent kubiks 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/beyla :2.2.2	a9cf4560472e	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.60.0 1.26.9
otel/opentelemetry-collector-contrib :0.128.0	1ab0baba0ee3	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	golang.org/x/net@v0.34.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

4,798

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.18	0.60.0 1.26.9
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.18.1	0.60.0 1.26.9

Open the chart page →

6,634

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

10,620

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

4,529

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

9,479

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.26.9

Open the chart page →

1,049

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0 stdlib@go1.18.5	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

10,568

kubeservice-scheduler-pluskubservice-charts

0.2.1

2 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.60.0 1.26.9
dongjiang1989/node-metrics :latest	3f1f266190bb	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

2,754

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

964

kitcaddykvalitetsit

1.5.11

1 of 2 See more

kitcaddy kvalitetsit 1.5.11

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
kvalitetsit/kitcaddy :1.5.11	0e66907ea266	golang.org/x/net@v0.55.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

412

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.60.0 1.26.9
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.26.9

Open the chart page →

4,097

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.60.0 1.26.9
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.60.0 1.26.9
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

22,370

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

643

chibisafel4g

0.1.1

2 of 3 See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.26.9
library/caddy :2-alpine	d44355d3c214	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

6,067

auditflowlabs64io-helm-charts

0.15.17

1 of 3 See more

auditflow labs64io-helm-charts 0.15.17

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
labs64/auditflowdigest-pinned	9c1bd414fcfb	stdlib@go1.26.7	1.26.9

Open the chart page →

708

authz-pdplabs64io-helm-charts

0.8.7

1 of 1 See more

authz-pdp labs64io-helm-charts 0.8.7

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/cerbos/cerbosdigest-pinned	540643bc67ba	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

205

checkoutlabs64io-helm-charts

0.11.8

2 of 3 See more

checkout labs64io-helm-charts 0.11.8

2 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
labs64/checkoutdigest-pinned	4009b8251b57	stdlib@go1.26.7	1.26.9
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

2,505

payment-gatewaylabs64io-helm-charts

0.10.8

2 of 2 See more

payment-gateway labs64io-helm-charts 0.10.8

2 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
labs64/payment-gatewaydigest-pinned	5421f763b53e	stdlib@go1.26.7	1.26.9
library/postgres :18	74935e722416	stdlib@go1.24.6	1.26.9

Open the chart page →

2,483

lagoon-remotelagoon-charts

0.107.0

1 of 1 See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

3,077

lakilaki

1.11.0

1 of 2 See more

laki laki 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/laki-n/laki :v1.6.0	599a10c453a3	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

739

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,496

glancelbenicio-community

0.1.3

1 of 1 See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
glanceapp/glance :latest	9dfb09470b20	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

376

lgtmlgtm

0.28.2

7 of 9 See more

lgtm lgtm 0.28.2

7 of the 9 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
grafana/loki :3.7.8	1107dd5274e0	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
grafana/pyroscope :2.3.1	86a9ee744848	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
grafana/tempo :2.10.8	f0561deb1c68	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.160.0	5323a0df9508	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,032

lgtm-stacklgtm-stack

0.1.3

5 of 8 See more

lgtm-stack lgtm-stack 0.1.3

5 of the 8 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.18.1	0f4434c92b3e	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
grafana/grafana :13.1.0	121a7a9ece6d	golang.org/x/net@v0.55.0 stdlib@go1.25.7	0.60.0 1.26.9
grafana/loki :3.7.6	efd47c67f9ba	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9
grafana/mimir :3.2.0	736f7459913d	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9
grafana/tempo :2.10.8	f0561deb1c68	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

4,331

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,029

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,145

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,382

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.60.0 1.26.9

Open the chart page →

5,865

lightrun-k8s-operatorlightrun-k8s-operator

0.4.8

1 of 1 See more

lightrun-k8s-operator lightrun-k8s-operator 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
lightruncom/lightrun-k8s-operator :0.4.8	dfb8bff4646b	golang.org/x/net@v0.57.0	0.60.0

Open the chart page →

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.60.0 1.26.9
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,215

halitesql

0.1.5

1 of 2 See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/ha :latest	14d266f40e00	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

964

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	golang.org/x/net@v0.40.0 stdlib@go1.23.8	0.60.0 1.26.9

Open the chart page →

9,776

go-hello-worldloafoe

0.17.0

1 of 1 See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.16.0	22d94845e317	golang.org/x/net@v0.59.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

592

locust-k8s-operatorlocust-k8s-operator

2.3.1

1 of 1 See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
lotest/locust-k8s-operator :2.3.1	859b0d36f371	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

250

home-assistantloeken-at-home

2026.5.1

1 of 1 See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
loeken/home-assistant :2026.5.1	4ce6abc553b3	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

4,099

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

3,357

vcluster-eksloft

0.0.0-ci.3

3 of 4 See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.60.0 1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.9

Open the chart page →

5,712

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

4,047

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9

Open the chart page →

3,028

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,161

lokxylokxy

0.2.0

1 of 1 See more

lokxy lokxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
lokxy/lokxy :v0.9.0	e4ac800dc55d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

500

plexluiscajl

1.0.1

1 of 2 See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-78669.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	3f71bd6eb6a4	stdlib@go1.26.7	1.26.9

Open the chart page →

836

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/net@v0.10.0 stdlib@go1.20.8	0.60.0 1.26.9	1
ghcr.io/benc-uk/kubeview :latest	45b64d7c7016	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.60.0 1.26.9	1
ghcr.io/bionicstork/bionicstork/relay :latest	978a59e0f79f	stdlib@go1.25.14	1.26.9	1
ghcr.io/biru-scop/tenzu-front :latest	16759fa523f8	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10	b6373349a301	golang.org/x/net@v0.43.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitwarden/admin :2026.9.2	e82f37409cce	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/api :2026.9.2	72abdfb33c83	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/attachments :2026.9.2	a3e09f120b64	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/events :2026.9.2	818a1d907fc4	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/icons :2026.9.2	5e23eaab3976	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/identity :2026.9.2	63037d60f7d8	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/notifications :2026.9.2	029f0d8a576f	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/sm-operator :2.1.0	846624161f32	golang.org/x/net@v0.53.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/bitwarden/sso :2026.9.2	3ef058df2039	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/web :2026.9.1	0d9b5f239cb8	stdlib@go1.26.5	1.26.9	1
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.60.0 1.26.9	1
ghcr.io/blakeblackshear/frigate :0.13.0	7a5244e4c8dc	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9	1
ghcr.io/blind-oracle/cortex-tenant :v2.0.0	9f8896ffc15b	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.60.0 1.26.9	1
ghcr.io/bluesky-social/pds :0.4	3a8feb3415e3	stdlib@go1.25.10	1.26.9	1
ghcr.io/bluesky-social/pds :0.4.208	637083d9369d	stdlib@go1.25.7	1.26.9	1
ghcr.io/bluesky-social/pds :0.4.204	cbc6e3ea157d	stdlib@go1.25.6	1.26.9	1
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.60.0 1.26.9	1
ghcr.io/bodgit/nri-plugin-runtime :v0.0.3	130c0b1b6fa3	stdlib@go1.26.4	1.26.9	1
ghcr.io/bojanzelic/cloudflare-zero-trust-operator :0.7.1	f4b2dbc19a78	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	1
ghcr.io/borchero/switchboard :0.7.4	54a193b757da	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.26.9	1
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	stdlib@go1.21.6	1.26.9	1
ghcr.io/breezycourses/presage :0.2.0	e3ff88833b1f	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/browserless/chrome :v2.57.0	f4fcb054396a	stdlib@go1.26.7	1.26.9	1
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	golang.org/x/net@v0.42.0 stdlib@go1.25.0	0.60.0 1.26.9	1
ghcr.io/bryopsida/k8s-wireguard-mgr :main	c4febc0da1a4	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.26.9	1
ghcr.io/buildbarn/bb-scheduler :20260908T142432Z-77f7642	f627ab242890	golang.org/x/net@v0.55.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/buildbarn/bb-storage :20260908T142448Z-db62041	32ebc54b769b	golang.org/x/net@v0.55.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/buoyantio/controller :enterprise-2.20.4	33f05af5eb7c	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/buoyantio/controller :preview-26.10.1	aaf3c77c7980	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/buoyantio/linkerd-dashboard-server :0.11.2	0fd04bb5fd14	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	golang.org/x/net@v0.35.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.26.9	1
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.2	0.60.0 1.26.9	1
ghcr.io/caas-team/gokubedownscaler :1.4.1	da4507aa387b	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
ghcr.io/cableship/argocd-source-tracker :0.0.6	ff7dd45aa774	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/cableship/chart-sentinel :0.1.0	a037f1042b28	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1