StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,257
of 17,792 indexed, latest versions
Container images
2,719
deployed by those charts
Fix available
2 of 3
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,257 of 17,792 indexed charts deploy, on 2,719 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+114 more1.83.12,715
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed3
kubernetes-1.34apk1.34.11-r21.34.11-r61
OSV records
CGA-2w5g-qvhw-4526GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
CGA-2w99-fmrr-7c59, CGA-37h3-vm4r-h6gp, CGA-4rmw-5272-crfm, CGA-8mvv-qrfc-pwm2, CGA-94hq-vh86-c5h5, CGA-9c5q-7vcp-52g3, CGA-j2mp-r3h6-gw3j, CGA-j357-xxg6-gx2j, CGA-w54h-8g59-4jxp, CGA-wj6g-63h9-g67r, CGA-xmw7-6f5r-33jj, GO-2026-6348
Trending
Rank 35 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,257 by stars
ChartLatestAffected imagesRadar Score
koptimizejaconiVerified publisher0.5.42 of 2See more

koptimize jaconi 0.5.4

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
google.golang.org/grpc@v1.53.0
1.83.1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

5,730
janus-shieldjanus-shield1.0.01 of 2See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.1.096fac2482898
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

2,408
newtjeffrescVerified publisher0.2.11 of 1See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
fosrl/newt:1.10.4ccd2b0e9a049
google.golang.org/grpc@v1.79.1
1.83.1

Open the chart page →

1,104
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
google.golang.org/grpc@v1.76.0
1.83.1

Open the chart page →

1,344
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
google.golang.org/grpc@v1.20.1
1.83.1

Open the chart page →

4,232
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
google.golang.org/grpc@v1.62.1
1.83.1

Open the chart page →

4,052
jx-app-flaggerjenkins-x0.0.51 of 2See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
google.golang.org/grpc@v1.23.1
1.83.1

Open the chart page →

6,035
knative-servingjenkins-x0.19.124 of 4See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned1e3db4f2eeed
google.golang.org/grpc@v1.33.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinneddb6ceff2aab4
google.golang.org/grpc@v1.33.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedb2cd45b8a8a4
google.golang.org/grpc@v1.33.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedd27b4495ccc3
google.golang.org/grpc@v1.33.1
1.83.1

Open the chart page →

9,724
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

3,977
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

2,418
job-manager-syncerjob-manager-syncer1.27.01 of 1See more

job-manager-syncer job-manager-syncer 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer:1.27.086957bbeeff5
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

462
cloudnative-pgjouveVerified publisher0.27.01 of 1See more

cloudnative-pg jouve 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.28.034198e85b6e6
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

653
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

894
distributionjouveVerified publisher0.2.31 of 1See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
distribution/distribution:3.1.1bca24727f400
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

842
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

16,680
daily-restartjuniorjpdj0.1.691 of 1See more

daily-restart juniorjpdj 0.1.69

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

464
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

965
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

365
k8s-aibomk8s-aibomVerified publisher1.4.01 of 1See more

k8s-aibom k8s-aibom 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/googlecloudplatform/k8s-aibomdigest-pinned05e86c39c535
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

79
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,902
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
google.golang.org/grpc@v1.68.1
1.83.1

Open the chart page →

8,899
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

2,146
maddyk8s-home-lab-repo4.2.11 of 1See more

maddy k8s-home-lab-repo 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
foxcpp/maddy:0.8.2eeb5813fc4d1
google.golang.org/grpc@v1.70.0
1.83.1

Open the chart page →

1,059
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
google.golang.org/grpc@v1.30.0
1.83.1

Open the chart page →

14,872
k8s-redirectsk8s-redirects1.0.01 of 1See more

k8s-redirects k8s-redirects 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

93
k8s-s3-bucket-operatork8s-s3-bucket-operator0.2.21 of 1See more

k8s-s3-bucket-operator k8s-s3-bucket-operator 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/devangradadiya/k8s-s3-bucket-operator:0.2.258288de9f9fa
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

535
kagentkagent0.10.13 of 6See more

kagent kagent 0.10.1

3 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
google.golang.org/grpc@v1.79.3
1.83.1
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

2,942
gpu-provisionerkaitoVerified publisher0.2.01 of 1See more

gpu-provisioner kaito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,045
ragenginekaitoVerified publisher0.12.01 of 1See more

ragengine kaito 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/ragengine:0.12.07bfe651c92db
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

37
workspacekaitoVerified publisher0.12.06 of 7See more

workspace kaito 0.12.0

6 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
google.golang.org/grpc@v1.83.0
1.83.1
mcr.microsoft.com/acstor/local-csi-manager:v0.3.04f464b52ba85
google.golang.org/grpc@v1.83.0
1.83.1
mcr.microsoft.com/aks/kaito/workspace:0.12.0c4b887ca0542
google.golang.org/grpc@v1.82.1
1.83.1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v5.2.0afdfa3da79df
google.golang.org/grpc@v1.69.2
1.83.1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v1.13.2fa8eba9843ff
google.golang.org/grpc@v1.69.2
1.83.1
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

2,410
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

2,041
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
google.golang.org/grpc@v1.76.0
1.83.1

Open the chart page →

1,485
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

32,812
kcmkcm1.11.05 of 12See more

kcm kcm 1.11.0

5 of the 12 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-controller:v1.21.0e370f7800a53
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.21.0c33cca307541
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

2,857
kcp-operatorkcp-devVerified publisher0.7.101 of 1See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

134
qdrant-operatorkeiailabVerified publisher0.10.11 of 1See more

qdrant-operator keiailab 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/keiailab/qdrant-operator:v0.10.1360ec1df72b5
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

37
kestra-starterkestraOfficialVerified publisher2.0.21 of 5See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/docker:dind-rootlessc876e00a0d81
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,455
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
google.golang.org/grpc@v1.20.0
1.83.1

Open the chart page →

3,364
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

2,083
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

3,514
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.83.1
grafana/promtail:2.6.1072527b12cdf
google.golang.org/grpc@v1.44.0
1.83.1
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.83.1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
google.golang.org/grpc@v1.50.1
1.83.1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
google.golang.org/grpc@v1.49.0
1.83.1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

19,257
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

12,206
rabbitmq-cluster-operatorklicktippVerified publisher0.4.22 of 3See more

rabbitmq-cluster-operator klicktipp 0.4.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

810
rabbitmq-topology-operatorklicktippVerified publisher0.4.11 of 2See more

rabbitmq-topology-operator klicktipp 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

549
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,777
cloudflare-tunnel-remotekomailo-helm-charts1.3.11 of 1See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

336
external-secretskomailo-helm-charts6.1.01 of 1See more

external-secrets komailo-helm-charts 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

84
k8s-metrics-serverkomailo-helm-charts1.2.01 of 1See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

163
longhornkomailo-helm-charts0.6.02 of 3See more

longhorn komailo-helm-charts 0.6.0

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

595

Container images carrying it

2,719 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
google.golang.org/grpc@v1.51.0
1.83.1
1
cockroachdb/cockroach-operator:v2.1.0983312754620
google.golang.org/grpc@v1.29.1
1.83.1
1
codenotary/immudb:1.9.77c85d7cc4f22
google.golang.org/grpc@v1.57.1
1.83.1
1
coderenvs/coder-service:1.44.61deffc4670e6
google.golang.org/grpc@v1.52.3
1.83.1
1
cometbft/cometbft:v0.38.1722c2ac018f40
google.golang.org/grpc@v1.70.0
1.83.1
1
concourse/concourse:8.3.040a143ce5873
google.golang.org/grpc@v1.80.0
1.83.1
1
conduction/agendaservice-php:latest9cfeeb6c7c20
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/balance-registration-php:devc36094a41369
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/betaalservice-php:latestece1ab544c57
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/cgrc-php:dev25415534d245
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/checkin-component-php:dev3423845692c1
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/conduction-ui-php:dev2744565516e8
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/docparser-php:devb6f95c8ead7d
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/kvk-php:dev8f177f9f8a7b
google.golang.org/grpc@v1.27.0
1.83.1
1
conduction/pan-php:dev24f03c57568f
google.golang.org/grpc@v1.27.0
1.83.1
1
containous/maesh:v1.3.2587162516502
google.golang.org/grpc@v1.27.1
1.83.1
1
coordimap/coordimap-agent:latest7748fd0fae9f
google.golang.org/grpc@v1.67.1
1.83.1
1
coredns/coredns:1.12.040384aa1f5ea
google.golang.org/grpc@v1.68.0
1.83.1
1
coredns/coredns:1.7.073ca82b4ce82
google.golang.org/grpc@v1.29.1
1.83.1
1
coredns/coredns:1.14.6900f9c109f7a
google.golang.org/grpc@v1.82.0
1.83.1
1
coredns/coredns:1.10.1a0ead06651cf
google.golang.org/grpc@v1.52.3
1.83.1
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
google.golang.org/grpc@v1.61.1
1.83.1
1
cortezaproject/corteza:2024.9.08eb7a26605c9
google.golang.org/grpc@v1.61.1
1.83.1
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
google.golang.org/grpc@v1.61.1
1.83.1
1
craftypath/sops-operator:v0.8.0402a0024c732
google.golang.org/grpc@v1.27.0
1.83.1
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
google.golang.org/grpc@v1.27.0
1.83.1
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
google.golang.org/grpc@v1.26.0
1.83.1
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
google.golang.org/grpc@v1.33.1
1.83.1
1
cyberark/conjur-k8s-csi-provider:latest737a967088d9
google.golang.org/grpc@v1.82.1
1.83.1
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
google.golang.org/grpc@v1.75.0
1.83.1
1
cyverse/irods-csi-driver:v0.12.0aa69d105b292
google.golang.org/grpc@v1.81.0
1.83.1
1
czerwonk/junos_exporter:v0.16.2cb2279ae53d7
google.golang.org/grpc@v1.83.0
1.83.1
1
daprio/dashboard:0.15.04be696707bd1
google.golang.org/grpc@v1.61.0
1.83.1
1
daprio/dashboard:0.14.07ba5d51e5b97
google.golang.org/grpc@v1.53.0
1.83.1
1
daprio/injector:1.11.2763b9b70b0c8
google.golang.org/grpc@v1.56.2
1.83.1
1
daprio/operator:1.11.2c584428aa12d
google.golang.org/grpc@v1.56.2
1.83.1
1
daprio/placement:1.11.2d8e1446da996
google.golang.org/grpc@v1.56.2
1.83.1
1
daprio/sentry:1.11.21f507c1a181b
google.golang.org/grpc@v1.56.2
1.83.1
1
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
google.golang.org/grpc@v1.64.1
1.83.1
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
google.golang.org/grpc@v1.75.1
1.83.1
1
darthsim/imgproxy:v3.15.040f6eb807444
google.golang.org/grpc@v1.53.0
1.83.1
1
darthsim/imgproxy:v3.26476cb08c816a
google.golang.org/grpc@v1.67.1
1.83.1
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
google.golang.org/grpc@v1.73.0
1.83.1
1
datadog/agent:6aad9994de6a7
google.golang.org/grpc@v1.62.1
1.83.1
1
datappeal/hive-metastore:lateste38c085a3567
google.golang.org/grpc@v1.22.0
1.83.1
1
datasaker/dsk-container-agent:latest08b52999f67b
google.golang.org/grpc@v1.57.0
1.83.1
1
datasaker/dsk-k8s-agent:latest2542ee73be51
google.golang.org/grpc@v1.50.1
1.83.1
1
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
google.golang.org/grpc@v1.58.3
1.83.1
1
datasaker/dsk-node-agent:latest1b95913b6729
google.golang.org/grpc@v1.58.3
1.83.1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.