StackRadar

CVE-2026-84304

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,262
of 17,787 indexed, latest versions
Container images
2,722
deployed by those charts
Fix available
2 of 3
affected packages

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Carried by container images the latest versions of 2,262 of 17,787 indexed charts deploy, on 2,722 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+114 more1.83.12,718
grpcdeb1.16.1-1ubuntu5, 1.51.1-4.1build5no fix listed3
kubernetes-1.34apk1.34.11-r21.34.11-r61
OSV records
CGA-2w5g-qvhw-4526GHSA-vp52-pcj8-j9qcUBUNTU-CVE-2026-84304
Also known as
CGA-2w99-fmrr-7c59, CGA-37h3-vm4r-h6gp, CGA-4rmw-5272-crfm, CGA-8mvv-qrfc-pwm2, CGA-94hq-vh86-c5h5, CGA-9c5q-7vcp-52g3, CGA-j2mp-r3h6-gw3j, CGA-j357-xxg6-gx2j, CGA-w54h-8g59-4jxp, CGA-wj6g-63h9-g67r, CGA-xmw7-6f5r-33jj
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,262 by stars
ChartLatestAffected imagesRadar Score
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
google.golang.org/grpc@v1.44.0
1.83.1

Open the chart page →

2,084
gkograviteeioVerified publisher4.12.191 of 1See more

gko graviteeio 4.12.19

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
graviteeio/kubernetes-operator:4.12.1951dca8076ecc
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

132
armada-operatorgresearch0.7.01 of 2See more

armada-operator gresearch 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

1,567
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
google.golang.org/grpc@v1.45.0
1.83.1

Open the chart page →

6,799
oscargrycapOfficialVerified publisher4.1.31 of 2See more

oscar grycap 4.1.3

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/grycap/oscar:latest0c58ff972451
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

425
haproxy-unified-gatewayhaproxytechVerified publisher1.2.01 of 1See more

haproxy-unified-gateway haproxytech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.7b9bffe2d0fd1
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

674
terraform-cloud-operatorhashicorpVerified publisher2.5.01 of 2See more

terraform-cloud-operator hashicorp 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
google.golang.org/grpc@v1.64.0
1.83.1

Open the chart page →

1,463
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
google.golang.org/grpc@v1.42.0
1.83.1

Open the chart page →

13,610
cert-manager-webhook-hetznerhcloud0.9.01 of 1See more

cert-manager-webhook-hetzner hcloud 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

206
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

1,476
velerohelmforgeVerified publisher1.4.102 of 2See more

velero helmforge 1.4.10

2 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
google.golang.org/grpc@v1.81.1
1.83.1
velero/velero-plugin-for-aws:v1.14.07e82f717f44e
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

1,420
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
google.golang.org/grpc@v1.60.0
1.83.1

Open the chart page →

4,196
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
google.golang.org/grpc@v1.30.0
1.83.1

Open the chart page →

6,977
spirehelm-spireVerified publisher0.30.27 of 10See more

spire helm-spire 0.30.2

7 of the 10 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
google.golang.org/grpc@v1.83.0
1.83.1
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
google.golang.org/grpc@v1.71.0
1.83.1
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
google.golang.org/grpc@v1.76.0
1.83.1
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
google.golang.org/grpc@v1.83.0
1.83.1
ghcr.io/spiffe/spire-controller-manager:0.7.0d7b9e710f542
google.golang.org/grpc@v1.82.1
1.83.1
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
google.golang.org/grpc@v1.83.0
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

1,640
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
google.golang.org/grpc@v1.58.3
1.83.1

Open the chart page →

16,514
buildbarnhermetiq-buildbarnVerified publisher0.9.22See more

buildbarn hermetiq-buildbarn 0.9.2

2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/buildbarn/bb-scheduler:20260908T142432Z-77f7642f627ab242890
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/buildbarn/bb-storage:20260908T142448Z-db6204132ebc54b769b
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

—
hiverhiverVerified publisher0.1.459 of 10See more

hiver hiver 0.1.45

9 of the 10 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
hiversh/antigravity:0.1.45-microvm0e36d98402bc
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/browser:0.1.45-microvmb5048c6342ce
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/claude:0.1.45-microvm2fbf9f264498
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/codex:0.1.45-microvm4f43130f51e5
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/controller:0.1.45b0b85f8942c7
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/copilot:0.1.45-microvm50c07b84f298
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/node:0.1.45-alpine-microvm836a37641941
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
google.golang.org/grpc@v1.80.0
1.83.1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

21,672
cratedb-adapter-v2hmdmph0.2.11 of 1See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
google.golang.org/grpc@v1.37.0
1.83.1

Open the chart page →

2,913
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.45 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

5 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
google.golang.org/grpc@v1.69.0
1.83.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.83.1
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
google.golang.org/grpc@v1.75.1
1.83.1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
google.golang.org/grpc@v1.65.0
1.83.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
google.golang.org/grpc@v1.72.1
1.83.1

Open the chart page →

6,095
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

4,300
demoryhuseyinbabalOfficialVerified publisher0.7.01 of 1See more

demory huseyinbabal 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
huseyinbabal/demory:0.0.0-rc.20ae8eb4053c60
google.golang.org/grpc@v1.41.0
1.83.1

Open the chart page →

1,573
hybrid-csi-pluginhybrid-csi-plugin0.1.111 of 1See more

hybrid-csi-plugin hybrid-csi-plugin 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
google.golang.org/grpc@v1.77.0
1.83.1

Open the chart page →

373
idle-reaperidle-reaperVerified publisher0.1.41 of 1See more

idle-reaper idle-reaper 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/b100to/idle-reaper:0.1.447b4a0e091f0
google.golang.org/grpc@v1.79.3
1.83.1

Open the chart page →

134
webhook-broker-chartimytech0.2.41 of 1See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
google.golang.org/grpc@v1.65.0
1.83.1

Open the chart page →

1,246
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
google.golang.org/grpc@v1.72.2
1.83.1

Open the chart page →

2,416
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
google.golang.org/grpc@v1.36.0
1.83.1

Open the chart page →

10,701
istio-ratelimitistio-ratelimitVerified publisher0.0.51 of 2See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:4d2efd61ede09a75a84c
google.golang.org/grpc@v1.27.0
1.83.1

Open the chart page →

1,812
kubernetes-event-exporteritakurahVerified publisher0.2.31 of 1See more

kubernetes-event-exporter itakurah 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
google.golang.org/grpc@v1.53.0
1.83.1

Open the chart page →

1,135
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
google.golang.org/grpc@v1.46.2
1.83.1

Open the chart page →

9,318
job-manager-dispatcherjob-manager-dispatcher1.27.01 of 1See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

472
job-manager-serverjob-manager-server1.27.01 of 1See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
google.golang.org/grpc@v1.67.0
1.83.1

Open the chart page →

750
hncjouveVerified publisher0.8.31 of 1See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
google.golang.org/grpc@v1.40.0
1.83.1

Open the chart page →

1,071
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
google.golang.org/grpc@v1.63.2
1.83.1

Open the chart page →

1,273
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
google.golang.org/grpc@v1.54.0
1.83.1

Open the chart page →

3,369
junos-exporterjunos-exporter0.16.21 of 1See more

junos-exporter junos-exporter 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
czerwonk/junos_exporter:v0.16.2cb2279ae53d7
google.golang.org/grpc@v1.83.0
1.83.1

Open the chart page →

195
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3210 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

10 of the 17 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
google.golang.org/grpc@v1.78.0
1.83.1
grafana/grafana:12.3.12175aaa91c96
google.golang.org/grpc@v1.76.0
1.83.1
grafana/loki:3.6.73c8fd3570dd9
google.golang.org/grpc@v1.75.1
1.83.1
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.83.1
grafana/tempo:2.9.065a578975943
google.golang.org/grpc@v1.75.0
1.83.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
google.golang.org/grpc@v1.78.0
1.83.1
quay.io/prometheus/prometheus:v3.10.07571a304e67f
google.golang.org/grpc@v1.78.0
1.83.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.83.1

Open the chart page →

15,418
karpenterkarpenter-provider-gcpVerified publisher0.6.01 of 1See more

karpenter karpenter-provider-gcp 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.6.0aab80cfd2c4e
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

113
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
google.golang.org/grpc@v1.73.0
1.83.1

Open the chart page →

5,789
keda-add-ons-httpkedacore0.15.03 of 3See more

keda-add-ons-http kedacore 0.15.0

3 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/kedacore/http-add-on-interceptor:0.15.04e88e7808652
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/kedacore/http-add-on-operator:0.15.0d579b952ff0a
google.golang.org/grpc@v1.81.1
1.83.1
ghcr.io/kedacore/http-add-on-scaler:0.15.0f748178bc4af
google.golang.org/grpc@v1.81.1
1.83.1

Open the chart page →

410
valkey-operatorkeiailabVerified publisher1.5.21 of 1See more

valkey-operator keiailab 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.249b5aef82877
google.golang.org/grpc@v1.82.1
1.83.1

Open the chart page →

113
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
google.golang.org/grpc@v1.68.1
1.83.1

Open the chart page →

507
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.77.1e71f39cefcd9
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

1,291
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.83.1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
google.golang.org/grpc@v1.69.2
1.83.1

Open the chart page →

12,019
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
google.golang.org/grpc@v1.80.0
1.83.1

Open the chart page →

205
cert-managerkubeblocksVerified publisher1.17.22 of 4See more

cert-manager kubeblocks 1.17.2

2 of the 4 container images this version deploys carry CVE-2026-84304.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
google.golang.org/grpc@v1.69.2
1.83.1
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
google.golang.org/grpc@v1.69.2
1.83.1

Open the chart page →

2,900

Container images carrying it

2,722 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.83.1
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.83.1
16
grafana/grafana:latestf772d434e8fa
google.golang.org/grpc@v1.81.1
1.83.1
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.83.1
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.83.1
12
ethpandaops/xatu:latest74d4cf2c436c
google.golang.org/grpc@v1.80.0
1.83.1
10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.83.1
10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.83.1
9
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.83.1
8
quay.io/prometheus/alertmanager:latest:v0.34.0690c7b525f43
google.golang.org/grpc@v1.82.1
1.83.1
8
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.83.1
7
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.83.1
7
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.83.1
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
google.golang.org/grpc@v1.69.2
1.83.1
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.83.1
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
google.golang.org/grpc@v1.63.2
1.83.1
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.83.1
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.83.1
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.83.1
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.83.1
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.83.1
7
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.83.1
6
ghcr.io/quenchworks/images/grafana3ccc56791c8a
google.golang.org/grpc@v1.82.1
1.83.1
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.83.1
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.83.1
6
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.83.1
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.83.1
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.83.1
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
google.golang.org/grpc@v1.54.0
1.83.1
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
google.golang.org/grpc@v1.72.1
1.83.1
6
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.83.1
6
keelhq/keel:latest73714afb4443
google.golang.org/grpc@v1.68.0
1.83.1
5
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.83.1
5
traefik/whoami:latest:v1.12.0c4717a8d1f01
google.golang.org/grpc@v1.82.1
1.83.1
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
google.golang.org/grpc@v1.65.0
1.83.1
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.83.1
5
quay.io/prometheus/blackbox-exporter:latest:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.83.1
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.83.1
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.83.1
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.83.1
5
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.83.1
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.83.1
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.83.1
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.83.1
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.83.1
5
cloudflare/cloudflared:2026.8.3:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.1
4
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.83.1
4
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.83.1
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.83.1
4
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.83.1
4

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.