StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,270
of 17,792 indexed, latest versions
Container images
2,742
deployed by those charts
Fix available
2 of 3
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,270 of 17,792 indexed charts deploy, on 2,742 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,737
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
kubernetes-1.34apk1.34.11-r21.34.11-r61
OSV records
CGA-2w5g-qvhw-4526GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
CGA-2w99-fmrr-7c59, CGA-37h3-vm4r-h6gp, CGA-4rmw-5272-crfm, CGA-8mvv-qrfc-pwm2, CGA-94hq-vh86-c5h5, CGA-9c5q-7vcp-52g3, CGA-j2mp-r3h6-gw3j, CGA-j357-xxg6-gx2j, CGA-w54h-8g59-4jxp, CGA-wj6g-63h9-g67r, CGA-xmw7-6f5r-33jj, GO-2026-6348
Trending
Rank 47 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,270 by stars
ChartLatestAffected imagesRadar Score
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
google.golang.org/grpc@v1.44.0
1.83.1
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.83.1

Open the chart page →

6,484
kube-prometheus-stackkube-prometheus-stack-oci91.4.12 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

655
lakefslakefsVerified publisher1.12.301 of 1See more

lakefs lakefs 1.12.30

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
treeverse/lakefs:1.86.0fb7a0d90f77e
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

403
spegelspegelVerified publisher0.7.41 of 1See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinned26c60b05e08a
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

188
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
google.golang.org/grpc@v1.67.1
1.83.1
supabase/gotrue:v2.163.0ba4ddc594b0b
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

23,400
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

10,981
kube-prometheuschoerodon9.3.12 of 7See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.83.1
squareup/ghostunnel:v1.5.270f4cf270425
google.golang.org/grpc@v1.24.0
1.83.1

Open the chart page →

12,251
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.23 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

3 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
google.golang.org/grpc@v1.72.1
1.83.1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
google.golang.org/grpc@v1.71.0
1.83.1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

2,323
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

4,176
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
google.golang.org/grpc@v1.62.0
1.83.1

Open the chart page →

1,223
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

828
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

3,163
opentelemetry-kube-stackopentelemetry-helmVerified publisher0.21.01 of 2See more

opentelemetry-kube-stack opentelemetry-helm 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.154.0263699ffea0c
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

558
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

355
thanosstevehipwellVerified publisher1.24.11 of 1See more

thanos stevehipwell 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

203
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,212
caddyalekcVerified publisher0.9.01 of 1See more

caddy alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/caddy:2.11.4-alpine5f5c8640aae0
google.golang.org/grpc@v1.81.0
1.83.1

Open the chart page →

846
openstack-cinder-csicloud-provider-openstack2.36.57 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.36.078adaeb154c7
google.golang.org/grpc@v1.80.0
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

3,653
connaisseurconnaisseurVerified publisher2.12.01 of 2See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
securesystemsengineering/connaisseur:v3.12.038918befbdad
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

3,049
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

4,702
devtron-operatordevtron0.23.37 of 11See more

devtron-operator devtron 0.23.3

7 of the 11 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.83.1
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.83.1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.83.1
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
google.golang.org/grpc@v1.79.3
1.83.1
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

33,219
fluent-operatorfluent4.3.01 of 1See more

fluent-operator fluent 4.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

142
hcloud-csihcloud2.23.05 of 6See more

hcloud-csi hcloud 2.23.0

5 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
google.golang.org/grpc@v1.78.0
1.83.1

Open the chart page →

2,666
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
google.golang.org/grpc@v1.71.0
1.83.1
gitea/gitea:1.22.376f516a1a8c2
google.golang.org/grpc@v1.62.1
1.83.1
ilum/api:6.7.3624fd09528c8
google.golang.org/grpc@v1.65.0
1.83.1
minio/mc:RELEASE.2025-04-16T18-13-26Zaead63c77f9d
google.golang.org/grpc@v1.71.0
1.83.1

Open the chart page →

23,406
kube-greenkube-green-officialOfficialVerified publisher0.7.11 of 1See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubegreen/kube-green:0.7.12dc0f0a6034c
google.golang.org/grpc@v1.68.1
1.83.1

Open the chart page →

500
temporallemontechVerified publisher0.37.03 of 13See more

temporal lemontech 0.37.0

3 of the 13 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
google.golang.org/grpc@v1.23.1
1.83.1
temporalio/server:1.22.4c0a44c26397b
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
google.golang.org/grpc@v1.40.0
1.83.1

Open the chart page →

14,916
netris-controllernetrisai2.8.22 of 14See more

netris-controller netrisai 2.8.2

2 of the 14 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
google.golang.org/grpc@v1.14.0
1.83.1
netrisai/controller-grpc:4.6.0.00753178bf173c2
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

30,532
nuclionuclio0.23.81 of 2See more

nuclio nuclio 0.23.8

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/nuclio/dashboard:1.17.8-amd64b5f5bd4efbee
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

972
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
google.golang.org/grpc@v1.59.0
1.83.1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
google.golang.org/grpc@v1.61.1
1.83.1

Open the chart page →

17,394
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
google.golang.org/grpc@v1.76.0
1.83.1

Open the chart page →

1,056
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
google.golang.org/grpc@v1.24.0
1.83.1

Open the chart page →

4,163
gatustwin1.5.01 of 1See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
twinproduction/gatus:v5.34.03fff895e77d3
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

728
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

5,686
astarte-operatorastarteOfficialVerified publisher26.5.21 of 1See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

702
awx-operatorawx-operator-helm3.2.12 of 2See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
google.golang.org/grpc@v1.60.1
1.83.1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

9,882
cerboscerbosVerified publisher0.55.01 of 1See more

cerbos cerbos 0.55.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.55.04b9d3b58c4f1
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

115
cert-manager-istio-csrcert-managerOfficialVerified publisher0.17.01 of 1See more

cert-manager-istio-csr cert-manager 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-istio-csr:v0.17.0c38a38fcd2dd
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

149
cadvisorckotzbauerVerified publisher2.4.31 of 1See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

968
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
google.golang.org/grpc@v1.52.3
1.83.1

Open the chart page →

7,183
dronecommunity-chartsVerified publisher0.1.51 of 2See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,736
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
getconvoy/convoy:v26.7.6f4934cc05e31
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,969
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
google.golang.org/grpc@v1.71.2
1.83.1

Open the chart page →

3,967
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

4,524
emqx-operatoremqx-operator2.3.22 of 2See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
google.golang.org/grpc@v1.49.0
1.83.1
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

4,550
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

2,351
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ethereum/client-go:stableb8ab3451a117
google.golang.org/grpc@v1.79.1
1.83.1

Open the chart page →

623
keptnlifecycle-toolkitOfficialVerified publisher0.11.02 of 3See more

keptn lifecycle-toolkit 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
google.golang.org/grpc@v1.68.0
1.83.1
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
google.golang.org/grpc@v1.68.0
1.83.1

Open the chart page →

1,941
meshery-operatormesheryOfficialVerified publisher1.0.702 of 2See more

meshery-operator meshery 1.0.70

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
google.golang.org/grpc@v1.81.0
1.83.1
meshery/meshery-operator:1.0.50d245bc8b5c6
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

2,427
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

2,418
olmolmVerified publisher0.45.01 of 1See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.45.0f228c7a6b8c5
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

441

Container images carrying it

2,742 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/quenchworks/images/cadencee45a5fcdf1a4
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/chartmuseum3af8698e0524
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/coroot6aceb380776c
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/dex8b41a7c5f1bf
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/envoy-gateway1543e1b67da2
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/quenchworks/images/etcd05765ee83074
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/external-dnsaeab520e775b
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/kubectlb98289383cc7
kubernetes-1.34@1.34.11-r2
1.34.11-r6
1
ghcr.io/quenchworks/images/kube-state-metrics9cf36d15744d
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/kyverno90c78c240157
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/nginx-gateway-fabricd6c053f9eb81
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/oauth2-proxy6c479b032dcd
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/quenchworks/images/zot1f801961241a
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
google.golang.org/grpc@v1.45.0
1.83.1
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
google.golang.org/grpc@v1.68.1
1.83.1
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
google.golang.org/grpc@v1.51.0
1.83.1
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
google.golang.org/grpc@v1.77.0
1.83.1
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
google.golang.org/grpc@v1.31.0
1.83.1
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
google.golang.org/grpc@v1.64.0
1.83.1
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
google.golang.org/grpc@v1.64.1
1.83.1
1
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.15.0fbc553921145
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.20.095ef74cce03e
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergelogvinov/proxmox-csi-node:v0.20.0e0151137a1c5
google.golang.org/grpc@v1.83.0
1.83.1
1
ghcr.io/sergeyslonimsky/elara:0.4.050fb24449dc3
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
google.golang.org/grpc@v1.63.2
1.83.1
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
google.golang.org/grpc@v1.71.1
1.83.1
1
ghcr.io/sigstore/rekor-tiles/gcp:v2.2.1e401cfe033c9
google.golang.org/grpc@v1.81.1
1.83.1
1
ghcr.io/sigstore/scaffolding/serverae8eb69c7b70
google.golang.org/grpc@v1.76.0
1.83.1
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/sigstore/timestamp-server:v2.1.08637f0482ed1
google.golang.org/grpc@v1.81.0
1.83.1
1
ghcr.io/simonepri/prometheus-api-bridge:0.2.09e017eccfb47
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
google.golang.org/grpc@v1.64.1
1.83.1
1
ghcr.io/slinkyproject/slurm-bridge-scheduler:1.2.2d0eec33ab53e
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/slinkyproject/slurm-operator:1.2.20ce1930f20de
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/slinkyproject/slurm-operator-webhook:1.2.2da98125cd06f
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
grpc@1.16.1-1ubuntu5
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
grpc@1.16.1-1ubuntu5
no fix listed
1
ghcr.io/spegel-org/spegel26c60b05e08a
google.golang.org/grpc@v1.79.3
1.83.1
1
ghcr.io/spiffe/spiffe-csi-driver:0.2.34144101005b2
google.golang.org/grpc@v1.53.0
1.83.1
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
google.golang.org/grpc@v1.53.0
1.83.1
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
google.golang.org/grpc@v1.53.0
1.83.1
1
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/spiffe/spire-identity-exchange-server:v0.5.0239bc70c1988
google.golang.org/grpc@v1.82.1
1.83.1
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
google.golang.org/grpc@v1.53.0
1.83.1
1
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
google.golang.org/grpc@v1.80.0
1.83.1
1
ghcr.io/squat/generic-device-plugin:latestdc192e164c69
google.golang.org/grpc@v1.81.0
1.83.1
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
google.golang.org/grpc@v1.67.1
1.83.1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.