StackRadar

CVE-2026-84303

Medium

Advisory

Published 2 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,293
of 17,787 indexed, latest versions
Container images
2,768
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,293 of 17,787 indexed charts deploy, on 2,768 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,764
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
OSV records
GHSA-qc2q-p7wx-3px3UBUNTU-CVE-2026-84303
Trending
Rank 41 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,293 by stars
ChartLatestAffected imagesRadar Score
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

26,371
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
google.golang.org/grpc@v1.69.4
1.83.1

Open the chart page →

2,113
everest-lakefs-csi-driverlakefsVerified publisher1.3.03 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

3 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
google.golang.org/grpc@v1.82.1
1.83.1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
google.golang.org/grpc@v1.79.3
1.83.1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

841
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
google.golang.org/grpc@v1.69.2
1.83.1

Open the chart page →

1,330
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
google.golang.org/grpc@v1.62.1
1.83.1

Open the chart page →

1,378
pinglbenicio-communityVerified publisher0.1.11 of 1See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

594
speedtestlbenicio-communityVerified publisher0.1.01 of 1See more

speedtest lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

293
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

32,893
whoamilbenicio-communityVerified publisher0.1.21 of 1See more

whoami lbenicio-community 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

87
ld-relayld-relay3.11.11 of 1See more

ld-relay ld-relay 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
launchdarkly/ld-relay:8.21.08fc1437962a9
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

202
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

9,092
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

3,191
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

8,484
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

4,271
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
google.golang.org/grpc@v1.69.2
1.83.1

Open the chart page →

1,312
kltlifecycle-toolkitOfficialVerified publisher0.2.63 of 4See more

klt lifecycle-toolkit 0.2.6

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
google.golang.org/grpc@v1.57.0
1.83.1
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
google.golang.org/grpc@v1.52.3
1.83.1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
google.golang.org/grpc@v1.57.0
1.83.1

Open the chart page →

4,659
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
google.golang.org/grpc@v1.61.0
1.83.1

Open the chart page →

1,116
linkerd-enterprise-multiclusterlinkerd-buoyantVerified publisher2.20.21 of 3See more

linkerd-enterprise-multicluster linkerd-buoyant 2.20.2

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:enterprise-2.20.2801696b26e67
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

102
linkerd-preview-multiclusterlinkerd-buoyantVerified publisher26.8.41 of 3See more

linkerd-preview-multicluster linkerd-buoyant 26.8.4

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/controller:preview-26.8.431a2f3922a61
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

61
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.34 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
google.golang.org/grpc@v1.71.1
1.83.1
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
google.golang.org/grpc@v1.66.0
1.83.1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
google.golang.org/grpc@v1.71.1
1.83.1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.12 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/linkerd-dashboard-server:0.11.1dd6a29588242
google.golang.org/grpc@v1.83.0
1.83.1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

1,037
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.45 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

5 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
google.golang.org/grpc@v1.80.0
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

2,933
ccm-linodelinode-cloud-controller-managerOfficialVerified publisher0.9.81 of 1See more

ccm-linode linode-cloud-controller-manager 0.9.8

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
linode/linode-cloud-controller-manager:v0.9.8cd8c17512206
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

153
liqo-upgrade-operatorliqo-upgrade-operatorVerified publisher0.1.01 of 1See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kazem26/liqo-upgrade-operator:v0.1268b7c6a59dd
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

368
pocketbase-halitesql0.0.31 of 1See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

1,106
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

10,773
livekit-recorderlivekit-server0.3.131 of 1See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
livekit/livekit-recorder:v0.3.13ecf1409c75e0
google.golang.org/grpc@v1.42.0
1.83.1

Open the chart page →

2,129
livekit-serverlivekit-server1.9.01 of 1See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.9.03602a85840d5
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

1,553
llmarinerllmariner1.53.113 of 21See more

llmariner llmariner 1.53.1

13 of the 21 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
google.golang.org/grpc@v1.67.1
1.83.1
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
google.golang.org/grpc@v1.68.1
1.83.1
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
google.golang.org/grpc@v1.73.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
google.golang.org/grpc@v1.79.3
1.83.1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server:1.45.090b890f800ab
google.golang.org/grpc@v1.67.1
1.83.1
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
google.golang.org/grpc@v1.67.0
1.83.1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:1.9.0f24ecd37fbaa
google.golang.org/grpc@v1.67.1
1.83.1
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

12,034
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

2,524
mt-mcp-grafanaloafoe0.10.02 of 2See more

mt-mcp-grafana loafoe 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/loafoe/mt-mcp-grafana:v0.1.12332d9b47475
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

1,845
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

2,155
patch-operatorloafoe0.11.31 of 2See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

4,904
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
google.golang.org/grpc@v1.56.2
1.83.1

Open the chart page →

2,101
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

2,020
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,510
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
google.golang.org/grpc@v1.62.1
1.83.1

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

32,893
central-hostpath-mapperloftVerified publisher0.2.91 of 1See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/central-hostpath-mapper:0.2.9fa6dba122171
google.golang.org/grpc@v1.64.0
1.83.1

Open the chart page →

917
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

3,225
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

3,086
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

2,444
loft-direct-cluster-endpointloftVerified publisher1.14.01 of 1See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
loftsh/directclusterendpoint:1.14.0310cc7d690f5
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

3,112
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

3,225
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

1,269
vcluster-hpmloftVerified publisher0.2.71 of 1See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-hpm:0.2.7f65f6810ea23
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

826
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/grpc@v1.50.1
1.83.1
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.102 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

2 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
google.golang.org/grpc@v1.55.0
1.83.1
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
google.golang.org/grpc@v1.41.0
1.83.1

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
google.golang.org/grpc@v1.51.0
1.83.1
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

5,770

Container images carrying it

2,768 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
google.golang.org/grpc@v1.81.0
1.83.1
3
grafana/grafana:8.2.500568d89c4f8
google.golang.org/grpc@v1.40.0
1.83.1
3
grafana/grafana:11.0.00dc5a246ab16
google.golang.org/grpc@v1.62.1
1.83.1
3
grafana/grafana:13.1.17cb8c64c4d57
google.golang.org/grpc@v1.81.1
1.83.1
3
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.83.1
3
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.83.1
3
grafana/loki:3.7.7:latestd70e4659623f
google.golang.org/grpc@v1.82.1
1.83.1
3
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.83.1
3
grafana/promtail:2.4.2626900031c4e
google.golang.org/grpc@v1.40.0
1.83.1
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
google.golang.org/grpc@v1.76.0
1.83.1
3
kubegems/kubegems:v1.24.10a730bcf9322a
google.golang.org/grpc@v1.58.0
1.83.1
3
library/docker:20.10-dind:20-dindaf96c680a7e1
google.golang.org/grpc@v1.50.1
1.83.1
3
mcp/grafana:latest9362bcf6aa0e
google.golang.org/grpc@v1.80.0
1.83.1
3
migrate/migrate:latestcc4ad8e19d66
google.golang.org/grpc@v1.74.2
1.83.1
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
google.golang.org/grpc@v1.26.0
1.83.1
3
neosmemo/memos:0.30.071a5b4738d1b
google.golang.org/grpc@v1.80.0
1.83.1
3
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.83.1
3
prom/prometheus:v3.0.1565ee8650122
google.golang.org/grpc@v1.67.1
1.83.1
3
prom/prometheus:v2.19.0bfad037f95e5
google.golang.org/grpc@v1.29.1
1.83.1
3
solace/solace-pubsub-standard:latest8e8ad105595e
google.golang.org/grpc@v1.82.1
1.83.1
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
google.golang.org/grpc@v1.80.0
1.83.1
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
google.golang.org/grpc@v1.80.0
1.83.1
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
google.golang.org/grpc@v1.72.1
1.83.1
3
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
google.golang.org/grpc@v1.69.2
1.83.1
3
ghcr.io/coder/coder:v2.37.10c6994bb4c5a
google.golang.org/grpc@v1.80.0
1.83.1
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.83.1
3
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
google.golang.org/grpc@v1.82.1
1.83.1
3
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
google.golang.org/grpc@v1.82.1
1.83.1
3
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
google.golang.org/grpc@v1.76.0
1.83.1
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
google.golang.org/grpc@v1.76.0
1.83.1
3
ghcr.io/sigstore/scaffolding/trillian_log_server5a878e4e4f03
google.golang.org/grpc@v1.82.0
1.83.1
3
ghcr.io/sigstore/scaffolding/trillian_log_signer28c5ff40963f
google.golang.org/grpc@v1.82.0
1.83.1
3
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
google.golang.org/grpc@v1.83.0
1.83.1
3
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
google.golang.org/grpc@v1.75.1
1.83.1
3
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
google.golang.org/grpc@v1.41.0
1.83.1
3
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.83.1
3
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
google.golang.org/grpc@v1.33.1
1.83.1
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
google.golang.org/grpc@v1.53.0
1.83.1
3
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
google.golang.org/grpc@v1.82.1
1.83.1
3
quay.io/cilium/operator-generic:v1.20.16c3885fc7b62
google.golang.org/grpc@v1.82.1
1.83.1
3
quay.io/devtron/ai-agent:0.0.16545dac92173
google.golang.org/grpc@v1.64.0
1.83.1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
google.golang.org/grpc@v1.43.0
1.83.1
3
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/grpc@v1.27.1
1.83.1
3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/grpc@v1.27.1
1.83.1
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/grpc@v1.27.1
1.83.1
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
google.golang.org/grpc@v1.79.3
1.83.1
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
google.golang.org/grpc@v1.79.3
1.83.1
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
google.golang.org/grpc@v1.79.3
1.83.1
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
google.golang.org/grpc@v1.79.3
1.83.1
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
google.golang.org/grpc@v1.79.3
1.83.1
3

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.