StackRadar

CVE-2026-84303

Medium

Advisory

Published 2 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,288
of 17,790 indexed, latest versions
Container images
2,765
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Carried by container images the latest versions of 2,288 of 17,790 indexed charts deploy, on 2,765 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,761
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
OSV records
GHSA-qc2q-p7wx-3px3UBUNTU-CVE-2026-84303
Also known as
GO-2026-6441
Trending
Rank 47 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,288 by stars
ChartLatestAffected imagesRadar Score
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

32,812
kcmkcm1.11.05 of 12See more

kcm kcm 1.11.0

5 of the 12 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-controller:v1.21.0e370f7800a53
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.21.0c33cca307541
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

2,857
kcp-operatorkcp-devVerified publisher0.7.101 of 1See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

134
qdrant-operatorkeiailabVerified publisher0.10.11 of 1See more

qdrant-operator keiailab 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/keiailab/qdrant-operator:v0.10.1360ec1df72b5
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

37
kestra-starterkestraOfficialVerified publisher2.0.21 of 5See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
library/docker:dind-rootlessc876e00a0d81
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,455
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
google.golang.org/grpc@v1.20.0
1.83.1

Open the chart page →

3,364
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

2,083
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

3,514
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.83.1
grafana/promtail:2.6.1072527b12cdf
google.golang.org/grpc@v1.44.0
1.83.1
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.83.1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
google.golang.org/grpc@v1.50.1
1.83.1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
google.golang.org/grpc@v1.49.0
1.83.1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

19,257
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

12,206
rabbitmq-cluster-operatorklicktippVerified publisher0.4.22 of 3See more

rabbitmq-cluster-operator klicktipp 0.4.2

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

810
rabbitmq-topology-operatorklicktippVerified publisher0.4.11 of 2See more

rabbitmq-topology-operator klicktipp 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

549
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,777
cloudflare-tunnel-remotekomailo-helm-charts1.3.11 of 1See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

336
external-secretskomailo-helm-charts6.1.01 of 1See more

external-secrets komailo-helm-charts 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

84
k8s-metrics-serverkomailo-helm-charts1.2.01 of 1See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

163
longhornkomailo-helm-charts0.6.02 of 3See more

longhorn komailo-helm-charts 0.6.0

2 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

595
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.83.1
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.83.1
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

2,149
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,272
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,208
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/grpc@v1.33.2
1.83.1

Open the chart page →

3,185
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

3,252
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

2,542
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

1,512
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
google.golang.org/grpc@v1.67.1
1.83.1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
google.golang.org/grpc@v1.42.0
1.83.1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

70,968
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
google.golang.org/grpc@v1.38.0
1.83.1
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.83.1
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

8,471
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

2,320
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

3,819
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

3,207
dns-operatorkuadrantOfficialVerified publisher0.17.21 of 1See more

dns-operator kuadrant 0.17.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/kuadrant/dns-operator:v0.17.2da9ff8211856
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

71
kubearmor-operatorkubearmor1.7.41 of 1See more

kubearmor-operator kubearmor 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubearmor/kubearmor-operator:v1.7.43faab85da688
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

132
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

2,276
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.83.1
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.83.1

Open the chart page →

8,174
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

3,995
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.83.1

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/grpc@v1.50.1
1.83.1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/grpc@v1.52.3
1.83.1

Open the chart page →

7,471
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

6,502
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/grpc@v1.51.0
1.83.1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

2,420
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.83.1
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

13,834
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,885
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
google.golang.org/grpc@v1.61.1
1.83.1
calico/kube-controllers:v3.28.08f04e4772a2b
google.golang.org/grpc@v1.61.1
1.83.1
calico/node:v3.28.0385bf6391fea
google.golang.org/grpc@v1.61.1
1.83.1

Open the chart page →

3,308
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,306
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/grpc@v1.29.1
1.83.1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

13,572
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-84303.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

5,130

Container images carrying it

2,765 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
1.83.1
2
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
1.83.1
2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
1.83.1
2
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
google.golang.org/grpc@v1.75.0
1.83.1
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
google.golang.org/grpc@v1.64.0
1.83.1
2
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/juanfont/headscale:0.29.3:v0.29.30e7f1c6e4ce6
google.golang.org/grpc@v1.81.1
1.83.1
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
google.golang.org/grpc@v1.79.3
1.83.1
2
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
google.golang.org/grpc@v1.58.3
1.83.1
2
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
google.golang.org/grpc@v1.68.0
1.83.1
2
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
google.golang.org/grpc@v1.68.0
1.83.1
2
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
google.golang.org/grpc@v1.65.0
1.83.1
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
google.golang.org/grpc@v1.58.3
1.83.1
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
google.golang.org/grpc@v1.71.0
1.83.1
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
google.golang.org/grpc@v1.71.0
1.83.1
2
ghcr.io/opencost/opencost:1.121.2de2784434527
google.golang.org/grpc@v1.79.3
1.83.1
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
google.golang.org/grpc@v1.55.0
1.83.1
2
ghcr.io/projectcapsule/capsule:v0.14.6ac02588e65e8
google.golang.org/grpc@v1.83.0
1.83.1
2
ghcr.io/quenchworks/images/alertmanager7131b1e72afc
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/quenchworks/images/coolify-realtimef128e512c9c0
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/quenchworks/images/loki97bbf905a6c1
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/quenchworks/images/otel-collector695e7fd14483
google.golang.org/grpc@v1.83.0
1.83.1
2
ghcr.io/quenchworks/images/prometheuse9037c190bc1
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/quenchworks/images/tempo9e889ec33f96
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1
2
ghcr.io/sigstore/fulcio:v1.8.8ef72cf56c64b
google.golang.org/grpc@v1.81.1
1.83.1
2
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
google.golang.org/grpc@v1.51.0
1.83.1
2
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
google.golang.org/grpc@v1.83.0
1.83.1
2
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
google.golang.org/grpc@v1.71.0
1.83.1
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
google.golang.org/grpc@v1.76.0
1.83.1
2
ghcr.io/spiffe/spire-controller-manager:0.7.0d7b9e710f542
google.golang.org/grpc@v1.82.1
1.83.1
2
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
google.golang.org/grpc@v1.83.0
1.83.1
2
ghcr.io/squat/generic-device-plugin:36bfc606bba2064de6ede0ff2764cbb52edff70dba6f0b4cf6c8
google.golang.org/grpc@v1.56.3
1.83.1
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
google.golang.org/grpc@v1.62.1
1.83.1
2
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
google.golang.org/grpc@v1.81.1
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
google.golang.org/grpc@v1.67.1
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
google.golang.org/grpc@v1.68.1
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
google.golang.org/grpc@v1.73.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
google.golang.org/grpc@v1.79.3
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
google.golang.org/grpc@v1.67.0
1.83.1
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
google.golang.org/grpc@v1.51.0
1.83.1
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
google.golang.org/grpc@v1.41.0
1.83.1
2
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
google.golang.org/grpc@v1.51.0
1.83.1
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.