StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,288
of 17,790 indexed, latest versions
Container images
2,766
deployed by those charts
Fix available
2 of 3
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,288 of 17,790 indexed charts deploy, on 2,766 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+115 more1.83.12,761
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed4
kubernetes-1.34apk1.34.11-r21.34.11-r61
OSV records
CGA-2w5g-qvhw-4526GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
CGA-2w99-fmrr-7c59, CGA-37h3-vm4r-h6gp, CGA-4rmw-5272-crfm, CGA-8mvv-qrfc-pwm2, CGA-94hq-vh86-c5h5, CGA-9c5q-7vcp-52g3, CGA-j2mp-r3h6-gw3j, CGA-j357-xxg6-gx2j, CGA-w54h-8g59-4jxp, CGA-wj6g-63h9-g67r, CGA-xmw7-6f5r-33jj, GO-2026-6348
Trending
Rank 35 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,288 by stars
ChartLatestAffected imagesRadar Score
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

32,812
kcmkcm1.11.05 of 12See more

kcm kcm 1.11.0

5 of the 12 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-controller:v1.21.0e370f7800a53
google.golang.org/grpc@v1.81.1
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.21.0c33cca307541
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

2,857
kcp-operatorkcp-devVerified publisher0.7.101 of 1See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

134
qdrant-operatorkeiailabVerified publisher0.10.11 of 1See more

qdrant-operator keiailab 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/keiailab/qdrant-operator:v0.10.1360ec1df72b5
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

37
kestra-starterkestraOfficialVerified publisher2.0.21 of 5See more

kestra-starter kestra 2.0.2

1 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
library/docker:dind-rootlessc876e00a0d81
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

5,455
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
google.golang.org/grpc@v1.20.0
1.83.1

Open the chart page →

3,364
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

2,083
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

3,514
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.83.1
grafana/promtail:2.6.1072527b12cdf
google.golang.org/grpc@v1.44.0
1.83.1
istio/pilot:1.15.2db08d6963975
google.golang.org/grpc@v1.47.0
1.83.1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
google.golang.org/grpc@v1.50.1
1.83.1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
google.golang.org/grpc@v1.49.0
1.83.1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

19,257
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
google.golang.org/grpc@v1.69.0
1.83.1

Open the chart page →

12,206
rabbitmq-cluster-operatorklicktippVerified publisher0.4.22 of 3See more

rabbitmq-cluster-operator klicktipp 0.4.2

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
google.golang.org/grpc@v1.80.0
1.83.1
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

810
rabbitmq-topology-operatorklicktippVerified publisher0.4.11 of 2See more

rabbitmq-topology-operator klicktipp 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/messaging-topology-operator:1.19.124c4649ef3ef
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

549
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

1,472
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.83.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

3,777
cloudflare-tunnel-remotekomailo-helm-charts1.3.11 of 1See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

336
external-secretskomailo-helm-charts6.1.01 of 1See more

external-secrets komailo-helm-charts 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

84
k8s-metrics-serverkomailo-helm-charts1.2.01 of 1See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

163
longhornkomailo-helm-charts0.6.02 of 3See more

longhorn komailo-helm-charts 0.6.0

2 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

595
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.83.1
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.83.1
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

2,149
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
google.golang.org/grpc@v1.56.3
1.83.1

Open the chart page →

1,272
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

1,208
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/grpc@v1.33.2
1.83.1

Open the chart page →

3,185
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

3,252
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

2,542
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
google.golang.org/grpc@v1.71.1
1.83.1

Open the chart page →

1,512
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
google.golang.org/grpc@v1.67.1
1.83.1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
google.golang.org/grpc@v1.58.3
1.83.1
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
google.golang.org/grpc@v1.58.3
1.83.1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
google.golang.org/grpc@v1.42.0
1.83.1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.83.1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.83.1

Open the chart page →

70,968
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
google.golang.org/grpc@v1.38.0
1.83.1
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.83.1
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

8,471
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.83.1

Open the chart page →

2,320
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

3,819
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

3,207
dns-operatorkuadrantOfficialVerified publisher0.17.21 of 1See more

dns-operator kuadrant 0.17.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/kuadrant/dns-operator:v0.17.2da9ff8211856
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

71
kubearmor-operatorkubearmor1.7.41 of 1See more

kubearmor-operator kubearmor 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubearmor/kubearmor-operator:v1.7.43faab85da688
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

132
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.83.1

Open the chart page →

2,276
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.83.1
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.83.1

Open the chart page →

8,174
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/grpc@v1.29.1
1.83.1

Open the chart page →

3,995
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.83.1

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/grpc@v1.50.1
1.83.1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/grpc@v1.52.3
1.83.1

Open the chart page →

7,471
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.83.1

Open the chart page →

6,502
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/grpc@v1.51.0
1.83.1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/grpc@v1.51.0
1.83.1

Open the chart page →

2,420
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.83.1
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

13,834
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/grpc@v1.47.0
1.83.1

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,885
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
google.golang.org/grpc@v1.61.1
1.83.1
calico/kube-controllers:v3.28.08f04e4772a2b
google.golang.org/grpc@v1.61.1
1.83.1
calico/node:v3.28.0385bf6391fea
google.golang.org/grpc@v1.61.1
1.83.1

Open the chart page →

3,308
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

2,306
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/grpc@v1.29.1
1.83.1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/grpc@v1.58.3
1.83.1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

13,572
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.83.1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.83.1

Open the chart page →

5,130

Container images carrying it

2,766 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
istio/install-cni:1.24.2-distrolessaef4825e110f
google.golang.org/grpc@v1.67.1
1.83.1
2
istio/pilot:1.24.2-distroless137e44e3d1d2
google.golang.org/grpc@v1.67.1
1.83.1
2
istio/proxyv2:1.18.0757d28c24100
google.golang.org/grpc@v1.54.0
1.83.1
2
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/grpc@v1.36.0
1.83.1
2
jaegertracing/all-in-one:1.3104d224a9999b
google.golang.org/grpc@v1.44.0
1.83.1
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
google.golang.org/grpc@v1.51.0
1.83.1
2
kong/kubernetes-ingress-controller:3.5979f12864a13
google.golang.org/grpc@v1.82.1
1.83.1
2
kurento/kurento-media-server:latest03c0d34d0828
grpc@1.51.1-4.1build5
no fix listed
2
library/caddy:2.11.4-alpine:2-alpine5f5c8640aae0
google.golang.org/grpc@v1.81.0
1.83.1
2
library/caddy:latestdf7f1c2fb114
google.golang.org/grpc@v1.81.0
1.83.1
2
library/docker:dind5efed980cba3
google.golang.org/grpc@v1.80.0
1.83.1
2
library/influxdb:2.6.1-alpine44a366dd7724
google.golang.org/grpc@v1.47.0
1.83.1
2
library/influxdb:2.7b8d940ca9376
google.golang.org/grpc@v1.64.1
1.83.1
2
library/traefik:v3.7.16b9cbca6fac4
google.golang.org/grpc@v1.80.0
1.83.1
2
library/traefik:v2.57d5a6ae66572
google.golang.org/grpc@v1.38.0
1.83.1
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.83.1
2
longhornio/longhorn-manager:v1.12.183b79f57043f
google.golang.org/grpc@v1.83.0
1.83.1
2
longhornio/longhorn-share-manager:v1.12.1efaf47aeb4e8
google.golang.org/grpc@v1.82.1
1.83.1
2
louislam/uptime-kuma:2.3.29aeb4e51d038
google.golang.org/grpc@v1.72.2
1.83.1
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
google.golang.org/grpc@v1.79.2
1.83.1
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
google.golang.org/grpc@v1.72.0
1.83.1
2
meshery/meshery:stable-latest44b64ee128fb
google.golang.org/grpc@v1.82.1
1.83.1
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
google.golang.org/grpc@v1.26.0
1.83.1
2
moby/buildkit:v0.32.2-rootless504731e577c2
google.golang.org/grpc@v1.82.1
1.83.1
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
google.golang.org/grpc@v1.68.1
1.83.1
2
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.83.1
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
google.golang.org/grpc@v1.71.1
1.83.1
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.83.1
2
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/grpc@v1.47.0
1.83.1
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
google.golang.org/grpc@v1.82.1
1.83.1
2
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/grpc@v1.55.0
1.83.1
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.83.1
2
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.83.1
2
oryd/kratos:v1.3.1fe2428f103a6
google.golang.org/grpc@v1.65.0
1.83.1
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.83.1
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
1.83.1
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
google.golang.org/grpc@v1.62.0
1.83.1
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.83.1
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
google.golang.org/grpc@v1.30.0
1.83.1
2
polyaxon/polyaxon-operator:2.16.42716f552b301
google.golang.org/grpc@v1.68.1
1.83.1
2
prom/prometheus:v2.17.242d2395cd719
google.golang.org/grpc@v1.27.1
1.83.1
2
prom/prometheus:v2.52.05c435642ca4d
google.golang.org/grpc@v1.63.2
1.83.1
2
prom/prometheus:v2.37.98176adea328e
google.golang.org/grpc@v1.47.0
1.83.1
2
prom/prometheus:v2.48.1a67e5e402ff5
google.golang.org/grpc@v1.58.3
1.83.1
2
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/grpc@v1.29.1
1.83.1
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
1.83.1
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/grpc@v1.50.1
1.83.1
2
rancher/kine:v0.11.412889bbcd1e8
google.golang.org/grpc@v1.56.3
1.83.1
2
rclone/rclone:1.6874c51b8817e5
google.golang.org/grpc@v1.64.1
1.83.1
2
rookout/controller:latest4451a6f6b8ec
google.golang.org/grpc@v1.57.0
1.83.1
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.