StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,276
of 17,828 indexed, latest versions
Container images
2,733
deployed by those charts
Fix available
1 of 2
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,276 of 17,828 indexed charts deploy, on 2,733 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,730
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed3
OSV records
GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
GO-2026-6348

Charts affected

2,276 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher91.4.12 of 6See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
google.golang.org/grpc@v1.81.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

682
argo-cdargoOfficialVerified publisher10.9.22 of 3See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.83.1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

3,043
prometheusprometheus-communityOfficialVerified publisher29.31.12 of 6See more

prometheus prometheus-community 29.31.1

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

466
lokigrafana7.3.02 of 6See more

loki grafana 7.3.0

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/loki:3.6.1144148ad243c0
google.golang.org/grpc@v1.80.0
1.83.1
grafana/loki-canary:3.6.121e9bfcff3867
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

3,958
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

171
vaulthashicorpVerified publisher0.34.11 of 2See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

552
gitlabgitlabVerified publisher10.4.09 of 21See more

gitlab gitlab 10.4.0

9 of the 21 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.01c38ad710b0c
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.0704cd68566af
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.0696d798a5c85
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabdc1a8972c640
google.golang.org/grpc@v1.77.0
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.26645e014f75d
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3aca1bb3d5b7e
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.02256b49461fa
google.golang.org/grpc@v1.81.1
1.83.1
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.25448611a3c54
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

16,478
harborharborOfficialVerified publisher1.19.25 of 8See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
google.golang.org/grpc@v1.81.1
1.83.1
goharbor/harbor-jobservice:v2.15.2f71a4452a095
google.golang.org/grpc@v1.81.1
1.83.1
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.83.1
goharbor/registry-photon:v2.15.2c4ebef61ceb5
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.83.1
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
google.golang.org/grpc@v1.81.0
1.83.1

Open the chart page →

1,739
longhornlonghorn1.12.12 of 3See more

longhorn longhorn 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

642
gitlab-runnergitlabVerified publisher0.93.01 of 1See more

gitlab-runner gitlab 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

280
velerovmware-tanzu12.2.01 of 1See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

1,101
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.83.1
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.83.1
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

2,176
cloudnative-pgcloudnative-pgVerified publisher0.29.01 of 1See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.30.0a2701eb97cdd
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

124
rancherrancher-stable2.15.12 of 2See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.83.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

1,534
oauth2-proxyoauth2-proxyOfficialVerified publisher10.7.01 of 1See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.15.310a1165743a1
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

154
kedakedacore2.20.23 of 3See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/kedacore/keda-admission-webhooks:2.20.241f74102aba7
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

1,133
artifact-hubartifact-hubVerified publisher1.23.04 of 7See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
google.golang.org/grpc@v1.78.0
1.83.1
artifacthub/hub:v1.23.07d3a91c539dc
google.golang.org/grpc@v1.82.0
1.83.1
artifacthub/scanner:v1.23.02d8365601f0e
google.golang.org/grpc@v1.78.0
1.83.1
artifacthub/tracker:v1.23.05368d21a6e5c
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

10,881
kube-state-metricsprometheus-communityVerified publisher8.5.01 of 1See more

kube-state-metrics prometheus-community 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

96
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

1,191
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.18.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

600
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

583
argo-rolloutsargoOfficialVerified publisher2.43.21 of 1See more

argo-rollouts argo 2.43.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

122
argo-cdargo-cd-oci10.9.22 of 3See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.83.1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

3,043
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

8,003
mimir-distributedgrafana6.2.04 of 6See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/mimir:3.2.0736f7459913d
google.golang.org/grpc@v1.82.1
1.83.1
grafana/rollout-operator:v0.38.132fe838b79dd
google.golang.org/grpc@v1.82.0
1.83.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

4,699
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

733
headlampheadlampOfficialVerified publisher0.45.01 of 1See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

248
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

1,777
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
google.golang.org/grpc@v1.79.2
1.83.1

Open the chart page →

30,740
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

833
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,515
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

1,474
grafanagrafana-communityVerified publisher13.2.51 of 1See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

449
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

1,093
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.93.03 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.93.0

3 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
google.golang.org/grpc@v1.81.1
1.83.1
victoriametrics/operator:v0.74.17310c4a80b94
google.golang.org/grpc@v1.82.1
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

1,955
openebsopenebsOfficialVerified publisher4.6.115 of 35See more

openebs openebs 4.6.1

15 of the 35 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
google.golang.org/grpc@v1.71.0
1.83.1
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.83.1
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.83.1
openebs/lvm-driver:1.10.141f73aba7f31
google.golang.org/grpc@v1.79.3
1.83.1
openebs/provisioner-localpv:4.6.099f5116f5cb8
google.golang.org/grpc@v1.82.1
1.83.1
openebs/zfs-driver:2.11.116f1a74bb249
google.golang.org/grpc@v1.82.1
1.83.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
google.golang.org/grpc@v1.75.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.83.1

Open the chart page →

24,290
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

945
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

2,892
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
google.golang.org/grpc@v1.82.0
1.83.1

Open the chart page →

362
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,107
netdatanetdataVerified publisher3.7.1741 of 1See more

netdata netdata 3.7.174

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.121970e176031
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

2,414
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

2,017
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

2,614
openfaasopenfaas15.0.132 of 6See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
google.golang.org/grpc@v1.82.1
1.83.1
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

3,581
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
google.golang.org/grpc@v1.82.1
1.83.1
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

2,467
vault-secrets-operatorhashicorpVerified publisher1.5.12 of 2See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hashicorp/vault-secrets-operator:1.5.1458c842add32
google.golang.org/grpc@v1.83.0
1.83.1
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,061
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

1,385
gatekeepergatekeeperVerified publisher3.23.11 of 3See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

511
snapshot-controllerpiraeus-chartsVerified publisher5.3.01 of 1See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

242
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

2,110

Container images carrying it

2,733 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-84304.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.