CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.7; base score, highest
EPSS: 0.004; 35th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,252; of 17,803 indexed, latest versions
Container images: 2,727; deployed by those charts
Fix available: 1 of 2; affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,252 of 17,803 indexed charts deploy, on 2,727 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more	1.83.1	2,723
grpcdeb	1.16.1-1ubuntu5, 1.51.1-4.1build5	no fix listed	4

OSV records: GHSA-vp52-pcj8-j9qc UBUNTU-CVE-2026-84304
Also known as: GO-2026-6348

Charts affected

2,252 by stars

Chart

Latest

Affected images

Radar Score

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	google.golang.org/grpc@v1.40.0	1.83.1
gocrane/craned :v0.5.1	a1400909118c	google.golang.org/grpc@v1.43.0	1.83.1

Open the chart page →

8,904

csi-qingcloudkubesphere-stable

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	google.golang.org/grpc@v1.26.0	1.83.1
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.83.1

Open the chart page →

12,448

curvefs-csikubesphere-stable

0.1.0

1 of 3 See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	google.golang.org/grpc@v1.10.0	1.83.1

Open the chart page →

2,831

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	google.golang.org/grpc@v1.53.0	1.83.1
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	google.golang.org/grpc@v1.54.0	1.83.1
grafana/grafana :9.5.2	39c849cebccc	google.golang.org/grpc@v1.45.0	1.83.1

Open the chart page →

18,476

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	google.golang.org/grpc@v1.71.1	1.83.1

Open the chart page →

1,328

edgemeshkubesphere-stable

0.1.0

1 of 2 See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	google.golang.org/grpc@v1.42.0	1.83.1

Open the chart page →

4,135

fpga-operatorkubesphere-stable

2.7.4

1 of 7 See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	google.golang.org/grpc@v1.61.0	1.83.1

Open the chart page →

5,759

iomeshkubesphere-stable

1.1.0

17 of 25 See more

iomesh kubesphere-stable 1.1.0

17 of the 25 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/grpc@v1.40.0	1.83.1
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/grpc@v1.38.0	1.83.1
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/grpc@v1.50.1	1.83.1
iomesh/deck :v0.1.0	a31e26b6ae22	google.golang.org/grpc@v1.60.0	1.83.1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	google.golang.org/grpc@v1.60.0	1.83.1
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/grpc@v1.48.0	1.83.1
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/grpc@v1.50.0	1.83.1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	google.golang.org/grpc@v1.27.1	1.83.1
iomesh/operator :v1.1.0	60081c9b2f52	google.golang.org/grpc@v1.41.0	1.83.1
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/grpc@v1.51.0	1.83.1
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/grpc@v1.51.0	1.83.1

Open the chart page →

49,027

IOMeshkubesphere-stable

1.2.0

17 of 25 See more

IOMesh kubesphere-stable 1.2.0

17 of the 25 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/csi-driver :v2.8.0	1a151f602451	google.golang.org/grpc@v1.41.0	1.83.1
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/grpc@v1.40.0	1.83.1
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/grpc@v1.38.0	1.83.1
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/grpc@v1.50.1	1.83.1
iomesh/deck :v0.2.0	282d6c419ed3	google.golang.org/grpc@v1.60.0	1.83.1
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	google.golang.org/grpc@v1.60.0	1.83.1
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/grpc@v1.48.0	1.83.1
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/grpc@v1.50.0	1.83.1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	google.golang.org/grpc@v1.27.1	1.83.1
iomesh/operator :v1.2.0	ba4dd6be7e59	google.golang.org/grpc@v1.41.0	1.83.1
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/grpc@v1.54.0	1.83.1
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/grpc@v1.51.0	1.83.1
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/grpc@v1.51.0	1.83.1

Open the chart page →

46,717

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	google.golang.org/grpc@v1.27.1	1.83.1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	google.golang.org/grpc@v1.35.0	1.83.1

Open the chart page →

86,937

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	google.golang.org/grpc@v1.23.1	1.83.1

Open the chart page →

1,595

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/grpc@v1.27.1	1.83.1

Open the chart page →

2,444

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	google.golang.org/grpc@v1.26.0	1.83.1
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.83.1

Open the chart page →

18,542

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	google.golang.org/grpc@v1.26.0	1.83.1
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/grpc@v1.36.0	1.83.1
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/grpc@v1.34.0	1.83.1
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/grpc@v1.36.0	1.83.1

Open the chart page →

12,448

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	google.golang.org/grpc@v1.10.0	1.83.1

Open the chart page →

2,831

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	google.golang.org/grpc@v1.71.0	1.83.1

Open the chart page →

1,201

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/grpc@v1.34.0	1.83.1
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/grpc@v1.22.0	1.83.1
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/grpc@v1.34.0	1.83.1
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	google.golang.org/grpc@v1.22.0	1.83.1
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/grpc@v1.34.0	1.83.1
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/grpc@v1.22.0	1.83.1
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/grpc@v1.34.0	1.83.1
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/grpc@v1.22.0	1.83.1

Open the chart page →

26,080

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	google.golang.org/grpc@v1.26.0	1.83.1

Open the chart page →

4,337

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	google.golang.org/grpc@v1.26.0	1.83.1

Open the chart page →

2,792

kubestellar-consolekubestellar-console

0.3.41

2 of 2 See more

kubestellar-console kubestellar-console 0.3.41

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/grpc@v1.68.0	1.83.1
ghcr.io/kubestellar/console :v0.3.41	457cfc94b4da	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

4,614

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	google.golang.org/grpc@v1.53.0	1.83.1

Open the chart page →

5,068

forkliftkubevirt-forklift

0.3.0

1 of 2 See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/kubev2v/forklift-operator :release-2.12	68657c36c086	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

1,461

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	google.golang.org/grpc@v1.67.1	1.83.1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	google.golang.org/grpc@v1.65.0	1.83.1
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/grpc@v1.73.0	1.83.1

Open the chart page →

20,515

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	google.golang.org/grpc@v1.49.0	1.83.1

Open the chart page →

3,481

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	google.golang.org/grpc@v1.69.0	1.83.1

Open the chart page →

59,153

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	google.golang.org/grpc@v1.65.0	1.83.1

Open the chart page →

1,320

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	google.golang.org/grpc@v1.66.0	1.83.1

Open the chart page →

1,518

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	google.golang.org/grpc@v1.23.0	1.83.1

Open the chart page →

16,686

metadockvalitetsit

0.0.7

1 of 2 See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-web :main	f57e7553f5bd	google.golang.org/grpc@v1.37.0	1.83.1

Open the chart page →

4,033

myra-cert-manager-webhookkvalitetsit

1.2.1

1 of 1 See more

myra-cert-manager-webhook kvalitetsit 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kvalitetsit/myra-cert-manager-webhook :1.2.1	84ab59a1434e	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

178

openidkvalitetsit

1.7.2

1 of 2 See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	google.golang.org/grpc@v1.78.0	1.83.1

Open the chart page →

592

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	google.golang.org/grpc@v1.27.0	1.83.1

Open the chart page →

8,545

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	google.golang.org/grpc@v1.27.0	1.83.1

Open the chart page →

26,513

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	google.golang.org/grpc@v1.69.4	1.83.1

Open the chart page →

2,279

everest-lakefs-csi-driverlakefs

1.3.0

3 of 3 See more

everest-lakefs-csi-driver lakefs 1.3.0

3 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
treeverse/everest-lakefs-csi-driver :1.3.0	bda61b3fe5d8	google.golang.org/grpc@v1.82.1	1.83.1
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.16.0-eksbuild.3	592d7034d6c7	google.golang.org/grpc@v1.79.3	1.83.1
public.ecr.aws/csi-components/livenessprobe :v2.18.0-eksbuild.3	8e307f4e5820	google.golang.org/grpc@v1.79.3	1.83.1

Open the chart page →

864

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	google.golang.org/grpc@v1.69.2	1.83.1

Open the chart page →

1,347

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	google.golang.org/grpc@v1.62.1	1.83.1

Open the chart page →

1,385

pinglbenicio-community

0.1.1

1 of 1 See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.83.1

Open the chart page →

600

speedtestlbenicio-community

0.1.0

1 of 1 See more

speedtest lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
ghcr.io/d0ugal/internet-perf-exporter :v0.2.91	f5c9a96fe52a	google.golang.org/grpc@v1.81.1	1.83.1

Open the chart page →

307

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	google.golang.org/grpc@v1.72.2	1.83.1

Open the chart page →

33,731

whoamilbenicio-community

0.1.2

1 of 1 See more

whoami lbenicio-community 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
traefik/whoami :latest	c4717a8d1f01	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

ld-relayld-relay

3.11.1

1 of 1 See more

ld-relay ld-relay 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
launchdarkly/ld-relay :8.21.0	8fc1437962a9	google.golang.org/grpc@v1.82.1	1.83.1

Open the chart page →

209

prometheuslectures-k8sinfra

15.8.5

1 of 6 See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	google.golang.org/grpc@v1.47.0	1.83.1

Open the chart page →

9,111

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	google.golang.org/grpc@v1.27.1	1.83.1

Open the chart page →

3,199

prometheusleechistest

11.6.0

1 of 6 See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/grpc@v1.29.1	1.83.1

Open the chart page →

8,492

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	google.golang.org/grpc@v1.49.0	1.83.1

Open the chart page →

4,281

kltlifecycle-toolkit

0.2.6

3 of 4 See more

klt lifecycle-toolkit 0.2.6

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	google.golang.org/grpc@v1.57.0	1.83.1
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	google.golang.org/grpc@v1.52.3	1.83.1
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	google.golang.org/grpc@v1.57.0	1.83.1

Open the chart page →

4,696

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	google.golang.org/grpc@v1.61.0	1.83.1

Open the chart page →

1,135

linkerd-preview-multiclusterlinkerd-buoyant

26.8.4

1 of 3 See more

linkerd-preview-multicluster linkerd-buoyant 26.8.4

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/controller :preview-26.8.4	31a2f3922a61	google.golang.org/grpc@v1.83.0	1.83.1

Open the chart page →

linkerd-preview-vizlinkerd-buoyant

25.4.3

4 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-84304.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	google.golang.org/grpc@v1.71.1	1.83.1
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	google.golang.org/grpc@v1.66.0	1.83.1
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	google.golang.org/grpc@v1.71.1	1.83.1
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	google.golang.org/grpc@v1.71.1	1.83.1

Open the chart page →

3,464

Container images carrying it

2,727 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/grpc@v1.34.0	1.83.1	1
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/grpc@v1.22.0	1.83.1	1
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/grpc@v1.34.0	1.83.1	1
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	google.golang.org/grpc@v1.22.0	1.83.1	1
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/grpc@v1.34.0	1.83.1	1
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/grpc@v1.22.0	1.83.1	1
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/grpc@v1.34.0	1.83.1	1
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/grpc@v1.22.0	1.83.1	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	google.golang.org/grpc@v1.39.0	1.83.1	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	google.golang.org/grpc@v1.39.0	1.83.1	1
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	google.golang.org/grpc@v1.82.1	1.83.1	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	google.golang.org/grpc@v1.65.0	1.83.1	1
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	google.golang.org/grpc@v1.40.0	1.83.1	1
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	google.golang.org/grpc@v1.72.1	1.83.1	1
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	google.golang.org/grpc@v1.82.1	1.83.1	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	google.golang.org/grpc@v1.76.0	1.83.1	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter	d675f211a40f	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress	ec4b544499ba	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker	395f4ff1bd34	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller	e70bc675f977	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	google.golang.org/grpc@v1.42.0	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook	7d76a6d42d13	google.golang.org/grpc@v1.67.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	google.golang.org/grpc@v1.42.0	1.83.1	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	15a601147ef4	google.golang.org/grpc@v1.71.1	1.83.1	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	197fbb71d1f1	google.golang.org/grpc@v1.42.0	1.83.1	1
gcr.io/knative-releases/knative.dev/operator/cmd/operator :v1.22.3	733f21dc06f9	google.golang.org/grpc@v1.80.0	1.83.1	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook :v1.22.3	66ae76179a80	google.golang.org/grpc@v1.80.0	1.83.1	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook	6c5c90cdf707	google.golang.org/grpc@v1.47.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	08315309da4b	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	google.golang.org/grpc@v1.28.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	105bdd14ecaa	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	google.golang.org/grpc@v1.28.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	google.golang.org/grpc@v1.60.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	google.golang.org/grpc@v1.44.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	google.golang.org/grpc@v1.48.0	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	google.golang.org/grpc@v1.33.1	1.83.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	google.golang.org/grpc@v1.44.0	1.83.1	1