StackRadar

CVE-2026-84303

Medium

Advisory

Published 1 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,305
of 17,813 indexed, latest versions
Container images
2,756
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,305 of 17,813 indexed charts deploy, on 2,756 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,752
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
OSV records
GHSA-qc2q-p7wx-3px3UBUNTU-CVE-2026-84303
Also known as
GO-2026-6441

Charts affected

2,305 by stars
ChartLatestAffected imagesRadar Score
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,511
apica-ascentlogiqai2.0.47 of 19See more

apica-ascent logiqai 2.0.4

7 of the 19 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
google.golang.org/grpc@v1.62.1
1.83.1
logiqai/flash-discovery:v2.0.3f5b551bca98e
google.golang.org/grpc@v1.29.1
1.83.1
logiqai/logiqctl:2.0.4798306811f2d
google.golang.org/grpc@v1.32.0
1.83.1
logiqai/tracing:v1.35.2-lq1-c3e149f6781b8
google.golang.org/grpc@v1.46.2
1.83.1
logiqai/tracing:v1.35.2-lq1-q4a746ff04d6a
google.golang.org/grpc@v1.46.2
1.83.1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
google.golang.org/grpc@v1.22.0
1.83.1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
google.golang.org/grpc@v1.26.0
1.83.1

Open the chart page →

23,806
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

788
cloudflare-tunnel-remotelovemew67Verified publisher0.1.21 of 1See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

356
corednslovemew67Verified publisher1.36.01 of 1See more

coredns lovemew67 1.36.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
coredns/coredns:1.11.39caabbf6238b
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

1,183
loxilbloxilbVerified publisher0.1.01 of 2See more

loxilb loxilb 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

4,563
lsdisklsdiskVerified publisher2.0.73 of 4See more

lsdisk lsdisk 2.0.7

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.00d23a6fd60c4
google.golang.org/grpc@v1.65.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.0.27b9cdb5830d0
google.golang.org/grpc@v1.64.0
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

5,084
chronograflsst-sqre1.3.51 of 1See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

2,350
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
google.golang.org/grpc@v1.36.0
1.83.1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

9,351
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
google.golang.org/grpc@v1.28.1
1.83.1

Open the chart page →

6,675
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
google.golang.org/grpc@v1.38.0
1.83.1

Open the chart page →

3,774
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,165
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

764
whoamim11sVerified publisher0.3.01 of 1See more

whoami m11s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
traefik/whoami:v1.12.0c4717a8d1f01
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

93
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

9,858
magistralamagistrala-devopsVerified publisher0.16.26 of 42See more

magistrala magistrala-devops 0.16.2

6 of the 42 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
authzed/spicedb:latestdb0d1a16e6a4
google.golang.org/grpc@v1.83.0
1.83.1
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/grpc@v1.60.0
1.83.1
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
google.golang.org/grpc@v1.83.0
1.83.1
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

24,771
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

3,739
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
google.golang.org/grpc@v1.63.0
1.83.1

Open the chart page →

1,928
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

1,607
mattermostmattermostVerified publisher2.8.11 of 1See more

mattermost mattermost 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:11.7ca5e5553a767
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

455
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
google.golang.org/grpc@v1.60.0
1.83.1

Open the chart page →

1,423
mattermost-chaos-enginemattermostVerified publisher0.2.01 of 1See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mattermost/mattermost-app-chaosengine:c153e436268954edd67
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

4,076
mattermost-push-proxymattermostVerified publisher0.14.31 of 1See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mattermost/mattermost-push-proxy:6.3.045c53061c74e
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

897
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
google.golang.org/grpc@v1.72.0
1.83.1

Open the chart page →

4,131
mayastormayastorVerified publisher2.12.111 of 31See more

mayastor mayastor 2.12.1

11 of the 31 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
google.golang.org/grpc@v1.71.0
1.83.1
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.83.1
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.83.1
openebs/provisioner-localpv:4.6.099f5116f5cb8
google.golang.org/grpc@v1.82.1
1.83.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.83.1

Open the chart page →

21,494
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,712
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

431
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

418
mdai-hubmdai-hubVerified publisher0.10.15 of 14See more

mdai-hub mdai-hub 0.10.1

5 of the 14 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
google.golang.org/grpc@v1.79.3
1.83.1
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.83.1
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

4,930
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,339
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

3,737
msmmedia-streaming-meshVerified publisher0.1.173 of 6See more

msm media-streaming-mesh 0.1.17

3 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
google.golang.org/grpc@v1.66.2
1.83.1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
google.golang.org/grpc@v1.66.2
1.83.1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

11,651
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,521
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,042
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

3,854
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,152
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
google.golang.org/grpc@v1.26.0
1.83.1

Open the chart page →

3,152
kube-prometheus-stackmesosphere87.16.03 of 7See more

kube-prometheus-stack mesosphere 87.16.0

3 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

7,524
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
google.golang.org/grpc@v1.35.0
1.83.1

Open the chart page →

10,532
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

11,740
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

3,351
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
google.golang.org/grpc@v1.27.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
google.golang.org/grpc@v1.26.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
google.golang.org/grpc@v1.27.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
google.golang.org/grpc@v1.26.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
google.golang.org/grpc@v1.34.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
google.golang.org/grpc@v1.34.0
1.83.1

Open the chart page →

14,113
cert-manager-setupmesosphere-stable0.2.103 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.83.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

7,217
dexmesosphere-stable2.14.12 of 5See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
google.golang.org/grpc@v1.56.1
1.83.1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
google.golang.org/grpc@v1.61.0
1.83.1

Open the chart page →

19,326
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,042
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.83.1

Open the chart page →

3,614
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

3,359
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

4,682
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

7,529

Container images carrying it

2,756 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/pierinho13/github-platform-operator:v0.7.5d2ef2d53ec7a
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/pii-shield/pii-shield-operator:2.2.4a634aa90da30
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.83.1
1
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
google.golang.org/grpc@v1.75.0
1.83.1
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
google.golang.org/grpc@v1.60.1
1.83.1
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
google.golang.org/grpc@v1.48.0
1.83.1
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
google.golang.org/grpc@v1.82.0
1.83.1
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
google.golang.org/grpc@v1.69.2
1.83.1
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/quenchworks/images/caddy73689c430946
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/chartmuseum3af8698e0524
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/dex8b41a7c5f1bf
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/etcd05765ee83074
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/oauth2-proxy6c479b032dcd
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/otel-collector695e7fd14483
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
google.golang.org/grpc@v1.45.0
1.83.1
1
ghcr.io/riotkit-org/waf-proxy:snapshot683656fdace2
google.golang.org/grpc@v1.44.0
1.83.1
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
google.golang.org/grpc@v1.68.1
1.83.1
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
google.golang.org/grpc@v1.51.0
1.83.1
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
google.golang.org/grpc@v1.77.0
1.83.1
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
google.golang.org/grpc@v1.31.0
1.83.1
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
google.golang.org/grpc@v1.64.0
1.83.1
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
google.golang.org/grpc@v1.64.1
1.83.1
1
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.15.0fbc553921145
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.20.095ef74cce03e
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergelogvinov/proxmox-csi-node:v0.20.0e0151137a1c5
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergeyslonimsky/elara:0.4.050fb24449dc3
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
google.golang.org/grpc@v1.63.2
1.83.1
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
google.golang.org/grpc@v1.71.1
1.83.1
1
ghcr.io/sigstore/rekor-tiles/gcp:v2.2.1e401cfe033c9
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/sigstore/scaffolding/serverae8eb69c7b70
google.golang.org/grpc@v1.76.0
1.83.1
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/sigstore/timestamp-server:v2.1.08637f0482ed1
google.golang.org/grpc@v1.81.0
1.83.1
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
google.golang.org/grpc@v1.64.1
1.83.1
1
ghcr.io/slinkyproject/slurm-bridge-scheduler:1.2.2d0eec33ab53e
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/slinkyproject/slurm-operator:1.2.20ce1930f20de
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/slinkyproject/slurm-operator-webhook:1.2.2da98125cd06f
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
grpc@1.16.1-1ubuntu5
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
grpc@1.16.1-1ubuntu5
no fix listed
1
ghcr.io/spegel-org/spegel26c60b05e08a
google.golang.org/grpc@v1.79.3
1.83.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.