StackRadar

CVE-2026-84303

Medium

Advisory

Published 1 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,232
of 17,803 indexed, latest versions
Container images
2,708
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,232 of 17,803 indexed charts deploy, on 2,708 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+114 more1.83.12,705
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed3
OSV records
GHSA-qc2q-p7wx-3px3UBUNTU-CVE-2026-84303
Also known as
GO-2026-6441

Charts affected

2,232 by stars
ChartLatestAffected imagesRadar Score
exa-csiexa-csi-driver0.2.0-rev26 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

6 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
google.golang.org/grpc@v1.27.1
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.5.19dcd469f02bb
google.golang.org/grpc@v1.60.1
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
google.golang.org/grpc@v1.60.1
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
1.83.1

Open the chart page →

7,092
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

211
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
google.golang.org/grpc@v1.56.3
1.83.1
grafana/loki-canary:2.9.6549a40203e97
google.golang.org/grpc@v1.56.3
1.83.1
grafana/promtail:3.5.165bfae480b57
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

5,826
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
google.golang.org/grpc@v1.40.0
1.83.1

Open the chart page →

7,723
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
factly/mande-server:0.34.1384d384310ef
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

4,785
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
google.golang.org/grpc@v1.76.0
1.83.1

Open the chart page →

2,849
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

1,743
stackdriver-metrics-adapterfairwinds-incubator0.3.01 of 1See more

stackdriver-metrics-adapter fairwinds-incubator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
google.golang.org/grpc@v1.38.0
1.83.1

Open the chart page →

1,765
fairwinds-insightsfairwinds-stableVerified publisher10.1.103 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

3 of the 13 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
google.golang.org/grpc@v1.79.3
1.83.1
temporalio/server:1.31.2b5ecdb8282be
google.golang.org/grpc@v1.79.3
1.83.1
temporalio/ui:2.52.0fc47cd8202c9
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

3,814
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
google.golang.org/grpc@v1.67.1
1.83.1

Open the chart page →

502
aspmrelayfalcon-helmVerified publisher1.1.01 of 1See more

aspmrelay falcon-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/bionicstork/bionicstork/relay:latest13290b9a64af
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

142
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.29 of 18See more

farm-observability farm-observability 0.27.2

9 of the 18 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
google.golang.org/grpc@v1.80.0
1.83.1
grafana/alloy:v1.12.2f94b1c82957a
google.golang.org/grpc@v1.76.0
1.83.1
grafana/grafana:13.0.1-security-012d1f9ae67c17
google.golang.org/grpc@v1.79.3
1.83.1
grafana/loki:3.6.73c8fd3570dd9
google.golang.org/grpc@v1.75.1
1.83.1
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.83.1
grafana/pyroscope:2.0.3cfd00e7f73c2
google.golang.org/grpc@v1.80.0
1.83.1
grafana/tempo:2.9.065a578975943
google.golang.org/grpc@v1.75.0
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

13,428
featureformfeatureformVerified publisher0.15.101 of 12See more

featureform featureform 0.15.10

1 of the 12 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

102
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

13,512
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
google.golang.org/grpc@v1.24.0
1.83.1

Open the chart page →

14,714
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
google.golang.org/grpc@v1.75.0
1.83.1

Open the chart page →

756
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
google.golang.org/grpc@v1.39.0
1.83.1

Open the chart page →

3,320
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
google.golang.org/grpc@v1.30.0
1.83.1

Open the chart page →

3,373
podinfoflagger6.1.41 of 1See more

podinfo flagger 6.1.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
google.golang.org/grpc@v1.43.0
1.83.1

Open the chart page →

2,815
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

6,175
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

5,382
mission-controlflanksourceVerified publisher0.1.3381 of 8See more

mission-control flanksource 0.1.338

1 of the 8 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
google.golang.org/grpc@v1.74.2
1.83.1

Open the chart page →

8,956
mission-control-tenantflanksourceVerified publisher1.0.923 of 3See more

mission-control-tenant flanksource 1.0.92

3 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
google.golang.org/grpc@v1.40.0
1.83.1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
google.golang.org/grpc@v1.57.0
1.83.1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

5,709
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

3,483
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

2,424
flyte-devboxflyte0.1.07 of 13See more

flyte-devbox flyte 0.1.0

7 of the 13 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

4,671
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

4,658
free5gc-chffree5gc-chfVerified publisher0.1.31 of 1See more

free5gc-chf free5gc-chf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
free5gc/chf:v3.4.3e2a4dd98a4ed
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,004
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,256
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
google.golang.org/grpc@v1.68.0
1.83.1

Open the chart page →

1,237
generic-device-plugingabe565Verified publisher0.1.31 of 1See more

generic-device-plugin gabe565 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:latestdc192e164c69
google.golang.org/grpc@v1.81.0
1.83.1

Open the chart page →

260
smarter-device-managergabe565Verified publisher0.5.21 of 1See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

1,226
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

801
galoygaloymoney0.34.73 of 24See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.83.1
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.83.1
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

8,700
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

11,982
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,161
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.83.1
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.83.1

Open the chart page →

5,316
galoygaloymoney20.34.73 of 24See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.83.1
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.83.1
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

8,700
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

11,982
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,161
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.83.1
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.83.1

Open the chart page →

5,316
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

376
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
google.golang.org/grpc@v1.38.0
1.83.1

Open the chart page →

3,243
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

7,477
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,369
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

136
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

560
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.83.1

Open the chart page →

4,558
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
google.golang.org/grpc@v1.39.0
1.83.1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
google.golang.org/grpc@v1.39.0
1.83.1

Open the chart page →

16,870
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.1
litestream/litestream:0.3c5a1e1b01916
google.golang.org/grpc@v1.57.0
1.83.1

Open the chart page →

9,097

Container images carrying it

2,708 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookd27b4495ccc3
google.golang.org/grpc@v1.33.1
1.83.1
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookf16c0e022203
google.golang.org/grpc@v1.28.1
1.83.1
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
google.golang.org/grpc@v1.67.1
1.83.1
1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
google.golang.org/grpc@v1.27.1
1.83.1
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
google.golang.org/grpc@v1.59.0
1.83.1
1
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
google.golang.org/grpc@v1.27.1
1.83.1
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
google.golang.org/grpc@v1.69.4
1.83.1
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
google.golang.org/grpc@v1.19.1
1.83.1
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
google.golang.org/grpc@v1.19.1
1.83.1
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.83.1
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.83.1
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.83.1
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.83.1
1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
google.golang.org/grpc@v1.44.0
1.83.1
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
google.golang.org/grpc@v1.55.0
1.83.1
1
gcr.io/projectsigstore/cosigned784518ff3ee7
google.golang.org/grpc@v1.46.0
1.83.1
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
google.golang.org/grpc@v1.46.0
1.83.1
1
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
google.golang.org/grpc@v1.59.0
1.83.1
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
google.golang.org/grpc@v1.70.0
1.83.1
1
ghcr.io/alpineworks/katalog-agent:v1.0.48f50bd568c2b
google.golang.org/grpc@v1.68.0
1.83.1
1
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
google.golang.org/grpc@v1.68.0
1.83.1
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
google.golang.org/grpc@v1.64.1
1.83.1
1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
google.golang.org/grpc@v1.71.0
1.83.1
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
google.golang.org/grpc@v1.44.0
1.83.1
1
ghcr.io/andibraeu/cert-manager-webhook-inwx:v0.9.0f015e745983e
google.golang.org/grpc@v1.75.1
1.83.1
1
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
google.golang.org/grpc@v1.69.2
1.83.1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
google.golang.org/grpc@v1.59.0
1.83.1
1
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/apache/superset-kubernetes-operator:0.2.04351831f757f
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
google.golang.org/grpc@v1.76.0
1.83.1
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
google.golang.org/grpc@v1.72.1
1.83.1
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
google.golang.org/grpc@v1.72.1
1.83.1
1
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
google.golang.org/grpc@v1.40.0
1.83.1
1
ghcr.io/appscode/aws-credential-manager:v0.1.00511bbe501c3
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/appscode/azure-credential-manager:v0.1.0f5c797f7fbe7
google.golang.org/grpc@v1.78.0
1.83.1
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
google.golang.org/grpc@v1.63.2
1.83.1
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
google.golang.org/grpc@v1.75.1
1.83.1
1
ghcr.io/appscode/cert-manager-webhook-ace:v0.0.2dc6b5fdcec06
google.golang.org/grpc@v1.75.1
1.83.1
1
ghcr.io/appscode/cluster-connector:v0.0.140efd9d9ef6ca
google.golang.org/grpc@v1.76.0
1.83.1
1
ghcr.io/appscode/cluster-presets:v0.0.128fbdd2479645
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
google.golang.org/grpc@v1.40.0
1.83.1
1
ghcr.io/appscode/external-dns-operator:v0.4.05605f97e636d
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/appscode/falco-ui-server:v0.0.66ec488d89b56
google.golang.org/grpc@v1.74.2
1.83.1
1
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
google.golang.org/grpc@v1.62.1
1.83.1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.