StackRadar

CVE-2026-84303

Medium

Advisory

Published 1 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,309
of 17,821 indexed, latest versions
Container images
2,767
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,309 of 17,821 indexed charts deploy, on 2,767 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,763
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
OSV records
GHSA-qc2q-p7wx-3px3UBUNTU-CVE-2026-84303
Also known as
GO-2026-6441

Charts affected

2,309 by stars
ChartLatestAffected imagesRadar Score
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
google.golang.org/grpc@v1.66.0
1.83.1

Open the chart page →

1,825
jaegerbook-k8sinfra-v23.4.03 of 5See more

jaeger book-k8sinfra-v2 3.4.0

3 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/grpc@v1.60.0
1.83.1

Open the chart page →

19,390
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

6,066
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
google.golang.org/grpc@v1.67.1
1.83.1

Open the chart page →

5,324
pyroscopebook-k8sinfra-v21.10.02 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
google.golang.org/grpc@v1.63.2
1.83.1
grafana/pyroscope:1.10.0319bf32ae06b
google.golang.org/grpc@v1.62.1
1.83.1

Open the chart page →

3,268
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

1,877
boundary-softsciboundary-softsci0.2.41 of 1See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hashicorp/boundary:latest76a201954ca0
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

879
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
google.golang.org/grpc@v1.68.1
1.83.1

Open the chart page →

73,199
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

1,411
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,409
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
google.golang.org/grpc@v1.57.1
1.83.1

Open the chart page →

2,781
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

1,201
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
google.golang.org/grpc@v1.79.1
1.83.1

Open the chart page →

1,706
etcdcagriekinVerified publisher0.1.51 of 1See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.16d967d98a12dc
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

907
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

4,527
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

2,202
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,337
caninecanine0.1.104 of 7See more

canine canine 0.1.10

4 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/caninehq/canine:latesta058034ca006
google.golang.org/grpc@v1.65.0
1.83.1
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
google.golang.org/grpc@v1.64.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
google.golang.org/grpc@v1.64.1
1.83.1

Open the chart page →

14,442
cert-managercanine1.15.32 of 4See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
google.golang.org/grpc@v1.64.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
google.golang.org/grpc@v1.64.1
1.83.1

Open the chart page →

2,909
traefikcanine40.2.01 of 1See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

1,058
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

2,080
ranchercarbide-charts2.15.12 of 2See more

rancher carbide-charts 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.83.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

1,534
casdoor-helm-chartscasdoor4.7.01 of 1See more

casdoor-helm-charts casdoor 4.7.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
casbin/casdoor:4.7.09d015582847d
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

963
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

4,145
oci-csi-drivercastaiVerified publisher1.13.86 of 7See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

1,775
temporalcastaiVerified publisher0.54.25 of 14See more

temporal castai 0.54.2

5 of the 14 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
google.golang.org/grpc@v1.62.1
1.83.1
temporalio/admin-tools:1.26.237e2e33dbd7b
google.golang.org/grpc@v1.67.1
1.83.1
temporalio/server:1.26.21e2626efcbc1
google.golang.org/grpc@v1.56.3
1.83.1
temporalio/ui:2.33.05c586a3c8ec5
google.golang.org/grpc@v1.66.0
1.83.1
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
google.golang.org/grpc@v1.64.0
1.83.1

Open the chart page →

16,272
catalyst-agentscatalyst-agents0.1.3311 of 18See more

catalyst-agents catalyst-agents 0.1.33

11 of the 18 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
google.golang.org/grpc@v1.70.0
1.83.1
grafana/grafana:13.1.3ab5cb380e3ff
google.golang.org/grpc@v1.82.1
1.83.1
grafana/loki:3.0.0757b5fadf816
google.golang.org/grpc@v1.62.1
1.83.1
grafana/loki-canary:3.0.028d7c00588aa
google.golang.org/grpc@v1.62.1
1.83.1
grafana/tempo:2.5.0f0200a9bff6d
google.golang.org/grpc@v1.63.2
1.83.1
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
1.83.1
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.83.1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
google.golang.org/grpc@v1.79.3
1.83.1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.93.0a001ed10a382
google.golang.org/grpc@v1.82.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

17,699
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

668
ceph-csi-operatorceph-csi-operator1.0.51 of 1See more

ceph-csi-operator ceph-csi-operator 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.0.5f8f4e990bc9f
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

61
cert-manager-csi-driver-spiffecert-managerOfficialVerified publisher0.15.03 of 4See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver-spiffe:v0.15.01755a3802efd
google.golang.org/grpc@v1.83.0
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

585
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

1,337
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
google.golang.org/grpc@v1.64.1
1.83.1

Open the chart page →

1,424
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
google.golang.org/grpc@v1.69.2
1.83.1

Open the chart page →

1,247
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
google.golang.org/grpc@v1.69.4
1.83.1

Open the chart page →

847
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
google.golang.org/grpc@v1.57.0
1.83.1

Open the chart page →

1,286
cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones0.1.51 of 1See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

422
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

2,353
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

1,767
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

1,088
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
google.golang.org/grpc@v1.64.1
1.83.1

Open the chart page →

897
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

536
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,788
clechaosnative0.2.72 of 6See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
google.golang.org/grpc@v1.32.0
1.83.1
chaosnative/cle-server:2.7.0e7bcff4a20c0
google.golang.org/grpc@v1.42.0
1.83.1

Open the chart page →

16,437
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

4,429
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.83.1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
google.golang.org/grpc@v1.75.0
1.83.1

Open the chart page →

7,529
memoscharts-derwitt-devVerified publisher1.4.01 of 1See more

memos charts-derwitt-dev 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
neosmemo/memos:0.30.071a5b4738d1b
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

707
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

812
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

8,419
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
google.golang.org/grpc@v1.74.2
1.83.1

Open the chart page →

1,230
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
google.golang.org/grpc@v1.26.0
1.83.1

Open the chart page →

2,877

Container images carrying it

2,767 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
google.golang.org/grpc@v1.51.0
1.83.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
google.golang.org/grpc@v1.47.0
1.83.1
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
google.golang.org/grpc@v1.72.1
1.83.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
google.golang.org/grpc@v1.60.1
1.83.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
google.golang.org/grpc@v1.38.0
1.83.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
google.golang.org/grpc@v1.65.0
1.83.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
google.golang.org/grpc@v1.47.0
1.83.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
google.golang.org/grpc@v1.65.0
1.83.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
1.83.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
google.golang.org/grpc@v1.38.0
1.83.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
1.83.1
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
1.83.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
1.83.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
1.83.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
1.83.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
google.golang.org/grpc@v1.71.0
1.83.1
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
1.83.1
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.