StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,270
of 17,792 indexed, latest versions
Container images
2,742
deployed by those charts
Fix available
2 of 3
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,270 of 17,792 indexed charts deploy, on 2,742 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,737
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
kubernetes-1.34apk1.34.11-r21.34.11-r61
OSV records
CGA-2w5g-qvhw-4526GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
CGA-2w99-fmrr-7c59, CGA-37h3-vm4r-h6gp, CGA-4rmw-5272-crfm, CGA-8mvv-qrfc-pwm2, CGA-94hq-vh86-c5h5, CGA-9c5q-7vcp-52g3, CGA-j2mp-r3h6-gw3j, CGA-j357-xxg6-gx2j, CGA-w54h-8g59-4jxp, CGA-wj6g-63h9-g67r, CGA-xmw7-6f5r-33jj, GO-2026-6348
Trending
Rank 47 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,270 by stars
ChartLatestAffected imagesRadar Score
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

3,515
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.83.1
grafana/promtail:2.6.1072527b12cdf
google.golang.org/grpc@v1.44.0
1.83.1
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.83.1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
google.golang.org/grpc@v1.50.1
1.83.1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
google.golang.org/grpc@v1.49.0
1.83.1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

19,267
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

12,256
rabbitmq-cluster-operatorklicktippVerified publisher0.4.22 of 3See more

rabbitmq-cluster-operator klicktipp 0.4.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

810
rabbitmq-topology-operatorklicktippVerified publisher0.4.11 of 2See more

rabbitmq-topology-operator klicktipp 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

549
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,777
cloudflare-tunnel-remotekomailo-helm-charts1.3.11 of 1See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

343
external-secretskomailo-helm-charts6.1.01 of 1See more

external-secrets komailo-helm-charts 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

84
k8s-metrics-serverkomailo-helm-charts1.2.01 of 1See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

163
longhornkomailo-helm-charts0.6.02 of 3See more

longhorn komailo-helm-charts 0.6.0

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

604
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.83.1
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.83.1
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

2,151
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,272
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,208
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/grpc@v1.33.2
1.83.1

Open the chart page →

3,185
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

3,253
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

2,542
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

1,505
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
google.golang.org/grpc@v1.67.1
1.83.1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
google.golang.org/grpc@v1.42.0
1.83.1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

71,075
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
google.golang.org/grpc@v1.38.0
1.83.1
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.83.1
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

8,472
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

2,320
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

3,819
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

3,207
dns-operatorkuadrantOfficialVerified publisher0.17.21 of 1See more

dns-operator kuadrant 0.17.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/kuadrant/dns-operator:v0.17.2da9ff8211856
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

71
kubearmor-operatorkubearmor1.7.41 of 1See more

kubearmor-operator kubearmor 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubearmor/kubearmor-operator:v1.7.43faab85da688
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

132
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

2,276
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.83.1
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.83.1

Open the chart page →

8,174
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

3,995
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.83.1

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/grpc@v1.50.1
1.83.1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/grpc@v1.52.3
1.83.1

Open the chart page →

7,472
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

6,515
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/grpc@v1.51.0
1.83.1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

2,432
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.83.1
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

13,835
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,885
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
google.golang.org/grpc@v1.61.1
1.83.1
calico/kube-controllers:v3.28.08f04e4772a2b
google.golang.org/grpc@v1.61.1
1.83.1
calico/node:v3.28.0385bf6391fea
google.golang.org/grpc@v1.61.1
1.83.1

Open the chart page →

3,309
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,306
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/grpc@v1.29.1
1.83.1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

13,601
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

5,137
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

1,419
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

3,568
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

2,090
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
google.golang.org/grpc@v1.45.0
1.83.1
grafana/loki:2.9.26074e01dbe03
google.golang.org/grpc@v1.56.3
1.83.1
grafana/loki-canary:2.9.24249db29b992
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

5,862
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,138
openebskubeblocksVerified publisher3.10.02 of 3See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/grpc@v1.47.0
1.83.1
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

10,602
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

10,309

Container images carrying it

2,742 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
fortio/fortio:latest_releasefc8221136fe2
google.golang.org/grpc@v1.72.1
1.83.1
1
fosrl/newt:1.10.4ccd2b0e9a049
google.golang.org/grpc@v1.79.1
1.83.1
1
foxcpp/maddy:0.7.16ab538e2f28b
google.golang.org/grpc@v1.60.1
1.83.1
1
foxcpp/maddy:0.9.2a4b839985b9b
google.golang.org/grpc@v1.70.0
1.83.1
1
foxcpp/maddy:0.8.2eeb5813fc4d1
google.golang.org/grpc@v1.70.0
1.83.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
google.golang.org/grpc@v1.43.0
1.83.1
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
google.golang.org/grpc@v1.67.0
1.83.1
1
garethgeorge/backrest:v1.14.1b85297975428
google.golang.org/grpc@v1.81.1
1.83.1
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
google.golang.org/grpc@v1.44.0
1.83.1
1
gdxbsv/traktor:0.0.17675693335054
google.golang.org/grpc@v1.68.1
1.83.1
1
getconvoy/convoy:v26.7.6f4934cc05e31
google.golang.org/grpc@v1.80.0
1.83.1
1
gidoichi/secrets-store-csi-driver-provider-infisical:v1.1.42dd5322a0610
google.golang.org/grpc@v1.83.0
1.83.1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
google.golang.org/grpc@v1.62.0
1.83.1
1
gitea/gitea:1.27.3-rootless1c17ecaead42
google.golang.org/grpc@v1.81.1
1.83.1
1
gitea/gitea:1.27.134e3f6b75f5c
google.golang.org/grpc@v1.81.1
1.83.1
1
gitea/gitea:1.22.376f516a1a8c2
google.golang.org/grpc@v1.62.1
1.83.1
1
gitea/gitea:1.26.27d13848af126
google.golang.org/grpc@v1.79.3
1.83.1
1
gitea/gitea:1.27.387a67ee09d3a
google.golang.org/grpc@v1.81.1
1.83.1
1
gitea/gitea:1.21.6ac73e0da341f
google.golang.org/grpc@v1.58.3
1.83.1
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
google.golang.org/grpc@v1.34.0
1.83.1
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
google.golang.org/grpc@v1.21.1
1.83.1
1
goalert/goalert:v0.32.008d57388b0cb
google.golang.org/grpc@v1.61.0
1.83.1
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
google.golang.org/grpc@v1.69.4
1.83.1
1
goccx/go-file-server:latestf4b3ebea0303
google.golang.org/grpc@v1.65.0
1.83.1
1
gocrane/craned:v0.5.1a1400909118c
google.golang.org/grpc@v1.43.0
1.83.1
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
google.golang.org/grpc@v1.40.0
1.83.1
1
gogost/gost:3.3.0f7a958c45192
google.golang.org/grpc@v1.82.1
1.83.1
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/grpc@v1.43.0
1.83.1
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
google.golang.org/grpc@v1.59.0
1.83.1
1
goharbor/harbor-core:v2.9.06412d679fdc3
google.golang.org/grpc@v1.53.0
1.83.1
1
goharbor/harbor-core:v2.5.386bf3031f4a7
google.golang.org/grpc@v1.41.0
1.83.1
1
goharbor/harbor-core:v2.14.3a30e5a8be3d9
google.golang.org/grpc@v1.69.4
1.83.1
1
goharbor/harbor-core:v2.11.1c017dd84ee96
google.golang.org/grpc@v1.63.2
1.83.1
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
google.golang.org/grpc@v1.53.0
1.83.1
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
google.golang.org/grpc@v1.41.0
1.83.1
1
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
google.golang.org/grpc@v1.69.4
1.83.1
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
google.golang.org/grpc@v1.41.0
1.83.1
1
goharbor/harbor-registryctl:v2.9.0cce272836449
google.golang.org/grpc@v1.53.0
1.83.1
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
google.golang.org/grpc@v1.69.4
1.83.1
1
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
google.golang.org/grpc@v1.27.1
1.83.1
1
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
google.golang.org/grpc@v1.27.1
1.83.1
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
google.golang.org/grpc@v1.78.0
1.83.1
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
google.golang.org/grpc@v1.47.0
1.83.1
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
google.golang.org/grpc@v1.55.0
1.83.1
1
gomods/athens:v0.17.10f61d1e62359
google.golang.org/grpc@v1.80.0
1.83.1
1
gomods/athens:v0.18.197cc113b34b0
google.golang.org/grpc@v1.81.1
1.83.1
1
gomods/athens:v0.8.1d714c7ff0231
google.golang.org/grpc@v1.20.1
1.83.1
1
gomods/athens:v0.11.0efb811df7844
google.golang.org/grpc@v1.26.0
1.83.1
1
gotenberg/gotenberg:8.30206a6c708fc6
google.golang.org/grpc@v1.79.3
1.83.1
1
gotenberg/gotenberg:8.3467097317623a
google.golang.org/grpc@v1.81.1
1.83.1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.