StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,305
of 17,813 indexed, latest versions
Container images
2,756
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,305 of 17,813 indexed charts deploy, on 2,756 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,752
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
OSV records
GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
GO-2026-6348

Charts affected

2,305 by stars
ChartLatestAffected imagesRadar Score
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,511
apica-ascentlogiqai2.0.47 of 19See more

apica-ascent logiqai 2.0.4

7 of the 19 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
google.golang.org/grpc@v1.62.1
1.83.1
logiqai/flash-discovery:v2.0.3f5b551bca98e
google.golang.org/grpc@v1.29.1
1.83.1
logiqai/logiqctl:2.0.4798306811f2d
google.golang.org/grpc@v1.32.0
1.83.1
logiqai/tracing:v1.35.2-lq1-c3e149f6781b8
google.golang.org/grpc@v1.46.2
1.83.1
logiqai/tracing:v1.35.2-lq1-q4a746ff04d6a
google.golang.org/grpc@v1.46.2
1.83.1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
google.golang.org/grpc@v1.22.0
1.83.1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
google.golang.org/grpc@v1.26.0
1.83.1

Open the chart page →

23,806
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

788
cloudflare-tunnel-remotelovemew67Verified publisher0.1.21 of 1See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

356
corednslovemew67Verified publisher1.36.01 of 1See more

coredns lovemew67 1.36.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
coredns/coredns:1.11.39caabbf6238b
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

1,183
loxilbloxilbVerified publisher0.1.01 of 2See more

loxilb loxilb 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

4,563
lsdisklsdiskVerified publisher2.0.73 of 4See more

lsdisk lsdisk 2.0.7

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.00d23a6fd60c4
google.golang.org/grpc@v1.65.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.0.27b9cdb5830d0
google.golang.org/grpc@v1.64.0
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

5,084
chronograflsst-sqre1.3.51 of 1See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

2,350
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
google.golang.org/grpc@v1.36.0
1.83.1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

9,351
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
google.golang.org/grpc@v1.28.1
1.83.1

Open the chart page →

6,675
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
google.golang.org/grpc@v1.38.0
1.83.1

Open the chart page →

3,774
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,165
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

764
whoamim11sVerified publisher0.3.01 of 1See more

whoami m11s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
traefik/whoami:v1.12.0c4717a8d1f01
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

93
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

9,858
magistralamagistrala-devopsVerified publisher0.16.26 of 42See more

magistrala magistrala-devops 0.16.2

6 of the 42 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
authzed/spicedb:latestdb0d1a16e6a4
google.golang.org/grpc@v1.83.0
1.83.1
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/grpc@v1.60.0
1.83.1
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/grpc@v1.60.0
1.83.1
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
google.golang.org/grpc@v1.83.0
1.83.1
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

24,771
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

3,739
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
google.golang.org/grpc@v1.63.0
1.83.1

Open the chart page →

1,928
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

1,607
mattermostmattermostVerified publisher2.8.11 of 1See more

mattermost mattermost 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:11.7ca5e5553a767
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

455
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
google.golang.org/grpc@v1.60.0
1.83.1

Open the chart page →

1,423
mattermost-chaos-enginemattermostVerified publisher0.2.01 of 1See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mattermost/mattermost-app-chaosengine:c153e436268954edd67
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

4,076
mattermost-push-proxymattermostVerified publisher0.14.31 of 1See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mattermost/mattermost-push-proxy:6.3.045c53061c74e
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

897
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
google.golang.org/grpc@v1.72.0
1.83.1

Open the chart page →

4,131
mayastormayastorVerified publisher2.12.111 of 31See more

mayastor mayastor 2.12.1

11 of the 31 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
google.golang.org/grpc@v1.71.0
1.83.1
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.83.1
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.83.1
openebs/provisioner-localpv:4.6.099f5116f5cb8
google.golang.org/grpc@v1.82.1
1.83.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.83.1

Open the chart page →

21,494
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,712
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

431
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

418
mdai-hubmdai-hubVerified publisher0.10.15 of 14See more

mdai-hub mdai-hub 0.10.1

5 of the 14 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
google.golang.org/grpc@v1.79.3
1.83.1
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.83.1
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

4,930
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,339
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

3,737
msmmedia-streaming-meshVerified publisher0.1.173 of 6See more

msm media-streaming-mesh 0.1.17

3 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
google.golang.org/grpc@v1.66.2
1.83.1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
google.golang.org/grpc@v1.66.2
1.83.1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
google.golang.org/grpc@v1.56.1
1.83.1

Open the chart page →

11,651
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

7,521
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,042
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

3,854
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,152
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
google.golang.org/grpc@v1.26.0
1.83.1

Open the chart page →

3,152
kube-prometheus-stackmesosphere87.16.03 of 7See more

kube-prometheus-stack mesosphere 87.16.0

3 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

7,524
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
google.golang.org/grpc@v1.35.0
1.83.1

Open the chart page →

10,532
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

11,740
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
google.golang.org/grpc@v1.27.1
1.83.1

Open the chart page →

3,351
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
google.golang.org/grpc@v1.27.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
google.golang.org/grpc@v1.26.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
google.golang.org/grpc@v1.27.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
google.golang.org/grpc@v1.26.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
google.golang.org/grpc@v1.34.0
1.83.1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
google.golang.org/grpc@v1.34.0
1.83.1

Open the chart page →

14,113
cert-manager-setupmesosphere-stable0.2.103 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.83.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.83.1

Open the chart page →

7,217
dexmesosphere-stable2.14.12 of 5See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
google.golang.org/grpc@v1.56.1
1.83.1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
google.golang.org/grpc@v1.61.0
1.83.1

Open the chart page →

19,326
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

3,042
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.83.1

Open the chart page →

3,614
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

3,359
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

4,682
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
google.golang.org/grpc@v1.48.0
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

7,529

Container images carrying it

2,756 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/glauth/glauth:v2.5.209c782ca5984
google.golang.org/grpc@v1.59.0
1.83.1
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
google.golang.org/grpc@v1.69.2
1.83.1
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
google.golang.org/grpc@v1.72.2
1.83.1
1
ghcr.io/googlecloudplatform/k8s-aibom05e86c39c535
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
google.golang.org/grpc@v1.73.0
1.83.1
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
google.golang.org/grpc@v1.75.1
1.83.1
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/grafana/k6-operator:controller-v1.6.0ba7f0fc1e22e
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/grafana/k8s-injection-controller:0.2.0c5bad40655a3
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/grycap/oscar:latest0c58ff972451
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
google.golang.org/grpc@v1.73.0
1.83.1
1
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
google.golang.org/grpc@v1.72.1
1.83.1
1
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.83.1
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
google.golang.org/grpc@v1.43.0
1.83.1
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
google.golang.org/grpc@v1.47.0
1.83.1
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/helmfile/helmfile:v1.8.01808ffb76f37
google.golang.org/grpc@v1.71.1
1.83.1
1
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
google.golang.org/grpc@v1.36.0
1.83.1
1
ghcr.io/hsn723/cert-estuary:0.2.00c4b6132b0ad
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
google.golang.org/grpc@v1.72.2
1.83.1
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
google.golang.org/grpc@v1.67.1
1.83.1
1
ghcr.io/igrikus/garm-operator:4.2.09e24d8a6a3b2
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
google.golang.org/grpc@v1.75.1
1.83.1
1
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
google.golang.org/grpc@v1.71.0
1.83.1
1
ghcr.io/inlets/inlets-operator:0.17.2208265c006973
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/interhyp/git-hubby:0.8.157361cd99d5ca
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
google.golang.org/grpc@v1.72.2
1.83.1
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
google.golang.org/grpc@v1.75.0
1.83.1
1
ghcr.io/ioxie/velkir/manager:v0.1.202c657d62d1d
google.golang.org/grpc@v1.82.0
1.83.1
1
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
google.golang.org/grpc@v1.53.0
1.83.1
1
ghcr.io/itzg/minecraft-server:latest46919d151d39
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
google.golang.org/grpc@v1.55.0
1.83.1
1
ghcr.io/jarodr47/portager:0.5.06a7a61b37568
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
google.golang.org/grpc@v1.65.0
1.83.1
1
ghcr.io/juanfont/headscale:0.29.3-debug842cd94b754b
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
google.golang.org/grpc@v1.69.0
1.83.1
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
google.golang.org/grpc@v1.67.1
1.83.1
1
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
google.golang.org/grpc@v1.68.1
1.83.1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
google.golang.org/grpc@v1.73.0
1.83.1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
google.golang.org/grpc@v1.58.3
1.83.1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.39751856cacc8
google.golang.org/grpc@v1.58.3
1.83.1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
google.golang.org/grpc@v1.82.1
1.83.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.