StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,318
of 17,790 indexed, latest versions
Container images
2,820
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,318 of 17,790 indexed charts deploy, on 2,820 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,819
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,318 by stars
ChartLatestAffected imagesRadar Score
chartmuseumkubegems3.8.01 of 1See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

3,518
gatewaykubegems0.3.21 of 2See more

gateway kubegems 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubegems/kube-rbac-proxy:v0.8.0941f557ed1ee
google.golang.org/grpc@v1.27.0
1.82.2

Open the chart page →

3,498
juicefs-csi-driverkubegems0.19.22 of 6See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.23.03e4daf9626d5
google.golang.org/grpc@v1.56.3
1.82.2
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
google.golang.org/grpc@v1.48.0
1.82.2

Open the chart page →

4,825
knative-servingkubegems1.0.17 of 8See more

knative-serving kubegems 1.0.1

7 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned197fbb71d1f1
google.golang.org/grpc@v1.42.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned08315309da4b
google.golang.org/grpc@v1.44.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned105bdd14ecaa
google.golang.org/grpc@v1.44.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedbac158dfb0c7
google.golang.org/grpc@v1.44.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mappingdigest-pinnede384a295069b
google.golang.org/grpc@v1.44.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhookdigest-pinned15f1ce7f35b4
google.golang.org/grpc@v1.44.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned1282a399cbb9
google.golang.org/grpc@v1.44.0
1.82.2

Open the chart page →

10,420
kubegems-edgekubegems1.24.101 of 1See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
google.golang.org/grpc@v1.58.0
1.82.2

Open the chart page →

3,381
kubegems-multus-cnikubegems2.4.11 of 2See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,373
prometheus-adapterkubegems4.14.11 of 1See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

930
prometheus-blackbox-exporterkubegems7.1.31 of 1See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.22.0608acee5704a
google.golang.org/grpc@v1.48.0
1.82.2

Open the chart page →

1,628
volcanokubegems1.12.12 of 3See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
google.golang.org/grpc@v1.57.0
1.82.2
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
google.golang.org/grpc@v1.57.0
1.82.2

Open the chart page →

5,021
xpai-schedulerkubegems1.12.11 of 2See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
projecthami/volcano-vgpu-device-plugin:v1.9.40c94118d1d98
google.golang.org/grpc@v1.32.0
1.82.2

Open the chart page →

2,317
kube-oidc-proxykube-oidc-proxyVerified publisher1.8.11 of 1See more

kube-oidc-proxy kube-oidc-proxy 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/rafpe/kube-oidc-proxy:1.8.1300f51feb1a7
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

24
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
google.golang.org/grpc@v1.48.0
1.82.2

Open the chart page →

7,196
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
google.golang.org/grpc@v1.29.1
1.82.2

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
google.golang.org/grpc@v1.29.1
1.82.2

Open the chart page →

4,149
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

4,991
kuberay-apiserverkuberay-operator1.7.02 of 2See more

kuberay-apiserver kuberay-operator 1.7.0

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kuberay/apiserver:v1.7.05bb3ad7621c8
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/kuberay/security-proxy:nightly4525b5acd23c
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

245
kuberecordkuberecordVerified publisher0.4.01 of 1See more

kuberecord kuberecord 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kuberecord/kuberecord:v0.4.02a19792ad2ec
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

176
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

1,442
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

1,513
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/influxdb:2.8571eb4514977
google.golang.org/grpc@v1.64.1
1.82.2

Open the chart page →

5,519
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

6,363
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

3,622
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

1,196
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

3,417
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

1,615
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,663
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,278
testkube-operatorkubeshop2.1.1541 of 3See more

testkube-operator kubeshop 2.1.154

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,003
testkube-runnerkubeshop2.13.21 of 1See more

testkube-runner kubeshop 2.13.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.244166c28422f
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

365
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,554
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
google.golang.org/grpc@v1.69.2
1.82.2

Open the chart page →

902
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
google.golang.org/grpc@v1.26.0
1.82.2

Open the chart page →

2,518
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
google.golang.org/grpc@v1.21.1
1.82.2
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

38,135
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/grpc@v1.43.0
1.82.2
goharbor/harbor-core:v2.5.386bf3031f4a7
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
google.golang.org/grpc@v1.27.1
1.82.2
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
google.golang.org/grpc@v1.27.1
1.82.2
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
google.golang.org/grpc@v1.43.0
1.82.2
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
google.golang.org/grpc@v1.43.0
1.82.2
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

8,555
cni-hostnickubesphere-stable0.1.01 of 1See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

2,437
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
google.golang.org/grpc@v1.40.0
1.82.2
gocrane/craned:v0.5.1a1400909118c
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

8,887
csi-qingcloudkubesphere-stable1.4.06 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-qingcloud:v1.4.00766163dc046
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

12,404
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2

Open the chart page →

2,824
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
google.golang.org/grpc@v1.53.0
1.82.2
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
google.golang.org/grpc@v1.54.0
1.82.2
grafana/grafana:9.5.239c849cebccc
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

18,394
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

1,308
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
google.golang.org/grpc@v1.42.0
1.82.2

Open the chart page →

4,098
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
google.golang.org/grpc@v1.61.0
1.82.2

Open the chart page →

5,759
iomeshkubesphere-stable1.1.017 of 25See more

iomesh kubesphere-stable 1.1.0

17 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-driver:v2.7.25d3f9bf9240b
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
google.golang.org/grpc@v1.40.0
1.82.2
iomesh/csi-provisioner:v3.0.0f9508460b273
google.golang.org/grpc@v1.38.0
1.82.2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
google.golang.org/grpc@v1.50.1
1.82.2
iomesh/deck:v0.1.0a31e26b6ae22
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/livenessprobe:v2.8.0560f01510f99
google.golang.org/grpc@v1.48.0
1.82.2
iomesh/localpv-manager:v0.2.0f13deacac3f4
google.golang.org/grpc@v1.50.0
1.82.2
iomesh/node-disk-manager:1.8.0002c4b92fd34
google.golang.org/grpc@v1.27.1
1.82.2
iomesh/operator:v1.1.060081c9b2f52
google.golang.org/grpc@v1.41.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.017 of 25See more

IOMesh kubesphere-stable 1.2.0

17 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-driver:v2.8.01a151f602451
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
google.golang.org/grpc@v1.40.0
1.82.2
iomesh/csi-provisioner:v3.0.0f9508460b273
google.golang.org/grpc@v1.38.0
1.82.2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
google.golang.org/grpc@v1.50.1
1.82.2
iomesh/deck:v0.2.0282d6c419ed3
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/livenessprobe:v2.8.0560f01510f99
google.golang.org/grpc@v1.48.0
1.82.2
iomesh/localpv-manager:v0.2.0f13deacac3f4
google.golang.org/grpc@v1.50.0
1.82.2
iomesh/node-disk-manager:1.8.0-2292ad270082e
google.golang.org/grpc@v1.27.1
1.82.2
iomesh/operator:v1.2.0ba4dd6be7e59
google.golang.org/grpc@v1.41.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

46,507
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
google.golang.org/grpc@v1.27.1
1.82.2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
google.golang.org/grpc@v1.35.0
1.82.2

Open the chart page →

14,368
aws-fsx-csi-driverkubesphere-testVerified publisher0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
google.golang.org/grpc@v1.23.1
1.82.2

Open the chart page →

1,588
cni-hostnickubesphere-testVerified publisher0.1.01 of 1See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

2,437
csi-neonsankubesphere-testVerified publisher1.3.06 of 6See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-neonsan:v1.2.21fa83d45417f
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

18,482
csi-qingcloudkubesphere-testVerified publisher1.4.06 of 6See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-qingcloud:v1.4.00766163dc046
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

12,404

Container images carrying it

2,820 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.82.2
2
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.82.2
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
google.golang.org/grpc@v1.58.0
1.82.2
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
google.golang.org/grpc@v1.50.1
1.82.2
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
google.golang.org/grpc@v1.58.0
1.82.2
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
google.golang.org/grpc@v1.54.0
1.82.2
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
google.golang.org/grpc@v1.52.3
1.82.2
2
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
google.golang.org/grpc@v1.27.0
1.82.2
2
quay.io/open-cluster-management/argocd-pull-integration:0.29.006b4b9b3c3ed
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
google.golang.org/grpc@v1.81.0
1.82.2
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
google.golang.org/grpc@v1.27.1
1.82.2
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
google.golang.org/grpc@v1.35.0
1.82.2
2
quay.io/openshift/origin-csi-livenessprobe:lateste9236513d24a
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
google.golang.org/grpc@v1.55.0
1.82.2
2
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.82.2
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
google.golang.org/grpc@v1.64.0
1.82.2
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
google.golang.org/grpc@v1.69.0
1.82.2
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
google.golang.org/grpc@v1.32.0
1.82.2
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
google.golang.org/grpc@v1.56.2
1.82.2
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
google.golang.org/grpc@v1.46.2
1.82.2
2
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
google.golang.org/grpc@v1.65.0
1.82.2
2
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
google.golang.org/grpc@v1.63.2
1.82.2
2
quay.io/zncdatadev/sig-storage/csi-provisioner:v5.1.0672e45d6a556
google.golang.org/grpc@v1.65.0
1.82.2
2
quay.io/zncdatadev/sig-storage/livenessprobe:v2.14.033692aed26aa
google.golang.org/grpc@v1.65.0
1.82.2
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
google.golang.org/grpc@v1.72.1
1.82.2
2
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
google.golang.org/grpc@v1.82.1
1.82.2
2
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
google.golang.org/grpc@v1.41.0
1.82.2
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
google.golang.org/grpc@v1.49.0
1.82.2
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
google.golang.org/grpc@v1.49.0
1.82.2
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
google.golang.org/grpc@v1.58.3
1.82.2
2
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
google.golang.org/grpc@v1.72.0
1.82.2
2
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
google.golang.org/grpc@v1.82.0
1.82.2
2
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
google.golang.org/grpc@v1.72.1
1.82.2
2
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
google.golang.org/grpc@v1.47.0
1.82.2
2
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
google.golang.org/grpc@v1.69.0
1.82.2
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
google.golang.org/grpc@v1.50.1
1.82.2
2
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
google.golang.org/grpc@v1.75.1
1.82.2
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
google.golang.org/grpc@v1.75.1
1.82.2
2
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
google.golang.org/grpc@v1.54.0
1.82.2
2
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
google.golang.org/grpc@v1.40.0
1.82.2
2
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
google.golang.org/grpc@v1.69.0
1.82.2
2
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.82.2
2
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.2
2
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
google.golang.org/grpc@v1.72.1
1.82.2
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.