CVE-2026-84303

Medium

Advisory

Published 2 Sept 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,288; of 17,790 indexed, latest versions
Container images: 2,765; deployed by those charts
Fix available: 1 of 2; affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,288 of 17,790 indexed charts deploy, on 2,765 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more	1.83.1	2,761
grpcdeb	1.16.1-1ubuntu5, 1.51.1-4.1build5	no fix listed	4

OSV records: GHSA-qc2q-p7wx-3px3 UBUNTU-CVE-2026-84303
Also known as: GO-2026-6441
Trending: Rank 47 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,288 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

2 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.81.1	1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

655

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.83.1
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

3,003

prometheusprometheus-community

29.30.0

3 of 6 See more

prometheus prometheus-community 29.30.0

3 of the 6 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.83.1
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

478

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

163

vaulthashicorp

0.34.1

1 of 2 See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

549

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	google.golang.org/grpc@v1.81.1	1.83.1
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	google.golang.org/grpc@v1.81.1	1.83.1
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.83.1
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.83.1
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	google.golang.org/grpc@v1.81.0	1.83.1

Open the chart page →

1,686

external-secretsexternal-secrets-operator

2.10.0

1 of 1 See more

external-secrets external-secrets-operator 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.10.0	814117b0fd6d	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

longhornlonghorn

1.12.1

2 of 3 See more

longhorn longhorn 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	google.golang.org/grpc@v1.83.0	1.83.1
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

595

gitlab-runnergitlab

0.92.2

1 of 1 See more

gitlab-runner gitlab 0.92.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.2	5448611a3c54	google.golang.org/grpc@v1.83.0	1.83.1

Open the chart page →

290

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	google.golang.org/grpc@v1.80.0	1.83.1

Open the chart page →

1,347

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	google.golang.org/grpc@v1.72.1	1.83.1
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	google.golang.org/grpc@v1.68.1	1.83.1
quay.io/metallb/speaker :v0.16.1	16561e96531e	google.golang.org/grpc@v1.72.1	1.83.1

Open the chart page →

2,149

cloudnative-pgcloudnative-pg

0.29.0

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

124

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	google.golang.org/grpc@v1.79.3	1.83.1
rancher/shell :v0.8.1	f293af9c635f	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

1,487

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

154

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	google.golang.org/grpc@v1.81.1	1.83.1
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	google.golang.org/grpc@v1.81.1	1.83.1
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

892

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	google.golang.org/grpc@v1.78.0	1.83.1
artifacthub/hub :v1.23.0	7d3a91c539dc	google.golang.org/grpc@v1.82.0	1.83.1
artifacthub/scanner :v1.23.0	2d8365601f0e	google.golang.org/grpc@v1.78.0	1.83.1
artifacthub/tracker :v1.23.0	5368d21a6e5c	google.golang.org/grpc@v1.75.1	1.83.1

Open the chart page →

10,840

kube-state-metricsprometheus-community

8.5.0

1 of 1 See more

kube-state-metrics prometheus-community 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.19.2	b8ec653c4423	google.golang.org/grpc@v1.83.0	1.83.1

Open the chart page →

1,151

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.83.1

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

576

argo-rolloutsargo

2.43.1

1 of 1 See more

argo-rollouts argo 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	google.golang.org/grpc@v1.80.0	1.83.1

Open the chart page →

122

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.83.1
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

3,003

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

302

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	google.golang.org/grpc@v1.58.3	1.83.1

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

4 of 6 See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	google.golang.org/grpc@v1.82.1	1.83.1
grafana/rollout-operator :v0.38.1	32fe838b79dd	google.golang.org/grpc@v1.82.0	1.83.1
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.83.1
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.83.1

Open the chart page →

4,548

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

725

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

238

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	google.golang.org/grpc@v1.72.1	1.83.1

Open the chart page →

1,773

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	google.golang.org/grpc@v1.79.2	1.83.1

Open the chart page →

30,217

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	google.golang.org/grpc@v1.79.3	1.83.1
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	google.golang.org/grpc@v1.79.3	1.83.1
falcosecurity/falcoctl :0.13.0	0eeb79adc580	google.golang.org/grpc@v1.80.0	1.83.1

Open the chart page →

5,398

alertmanagerprometheus-community

1.43.1

1 of 1 See more

alertmanager prometheus-community 1.43.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :3.5	979f12864a13	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

1,186

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	google.golang.org/grpc@v1.65.0	1.83.1

Open the chart page →

1,369

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/ceph-csi-operator :v1.0.4	c62933fd4083	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

1,454

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	google.golang.org/grpc@v1.72.2	1.83.1

Open the chart page →

976

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

432

victoria-metrics-k8s-stackvictoriametrics

0.92.1

3 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

3 of the 7 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	google.golang.org/grpc@v1.81.1	1.83.1
victoriametrics/operator :v0.74.1	7310c4a80b94	google.golang.org/grpc@v1.82.1	1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

1,910

openebsopenebs

4.6.1

15 of 35 See more

openebs openebs 4.6.1

15 of the 35 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	google.golang.org/grpc@v1.71.0	1.83.1
grafana/loki :3.4.2	58a6c186ce78	google.golang.org/grpc@v1.70.0	1.83.1
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	google.golang.org/grpc@v1.71.1	1.83.1
openebs/lvm-driver :1.10.1	41f73aba7f31	google.golang.org/grpc@v1.79.3	1.83.1
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	google.golang.org/grpc@v1.82.1	1.83.1
openebs/zfs-driver :2.11.1	16f1a74bb249	google.golang.org/grpc@v1.82.1	1.83.1
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.83.1
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.83.1
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	google.golang.org/grpc@v1.69.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	google.golang.org/grpc@v1.69.2	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	google.golang.org/grpc@v1.75.1	1.83.1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	google.golang.org/grpc@v1.72.1	1.83.1
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.83.1
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	google.golang.org/grpc@v1.68.0	1.83.1

Open the chart page →

24,128

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	google.golang.org/grpc@v1.60.1	1.83.1

Open the chart page →

937

actions-runner-controlleractions-runner-controller

0.23.7

1 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	google.golang.org/grpc@v1.47.0	1.83.1

Open the chart page →

2,890

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	google.golang.org/grpc@v1.82.0	1.83.1

Open the chart page →

336

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	google.golang.org/grpc@v1.71.1	1.83.1

Open the chart page →

3,118

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	google.golang.org/grpc@v1.83.0	1.83.1

Open the chart page →

3,131

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	google.golang.org/grpc@v1.77.0	1.83.1

Open the chart page →

1,984

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.83.1
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.83.1

Open the chart page →

2,497

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

273

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.83.1
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

3,558

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	google.golang.org/grpc@v1.80.0	1.83.1
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	google.golang.org/grpc@v1.80.0	1.83.1
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	google.golang.org/grpc@v1.80.0	1.83.1
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	google.golang.org/grpc@v1.80.0	1.83.1
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	google.golang.org/grpc@v1.81.1	1.83.1
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	google.golang.org/grpc@v1.81.1	1.83.1
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

3,006

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	google.golang.org/grpc@v1.83.0	1.83.1
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	google.golang.org/grpc@v1.65.0	1.83.1

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-84303.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	google.golang.org/grpc@v1.58.3	1.83.1

Open the chart page →

1,374

Container images carrying it

2,765 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	105bdd14ecaa	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook	15f1ce7f35b4	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	1282a399cbb9	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	google.golang.org/grpc@v1.27.1	1.83.1	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	google.golang.org/grpc@v1.59.0	1.83.1	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	google.golang.org/grpc@v1.27.1	1.83.1	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	google.golang.org/grpc@v1.69.4	1.83.1	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	google.golang.org/grpc@v1.19.1	1.83.1	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	google.golang.org/grpc@v1.19.1	1.83.1	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	google.golang.org/grpc@v1.55.0	1.83.1	1
gcr.io/projectsigstore/cosigned	784518ff3ee7	google.golang.org/grpc@v1.46.0	1.83.1	1
gcr.io/projectsigstore/policy-webhook	82940e8c3e0d	google.golang.org/grpc@v1.46.0	1.83.1	1
ghcr.io/absmach/magistrala/ui-backend :latest	4adf360dbf1e	google.golang.org/grpc@v1.83.0	1.83.1	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	google.golang.org/grpc@v1.59.0	1.83.1	1
ghcr.io/alpineworks/ip :v1.0.0	4e0d4d51f0bc	google.golang.org/grpc@v1.70.0	1.83.1	1
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	google.golang.org/grpc@v1.68.0	1.83.1	1
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	google.golang.org/grpc@v1.68.0	1.83.1	1