StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,313
of 17,787 indexed, latest versions
Container images
2,803
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,313 of 17,787 indexed charts deploy, on 2,803 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,802
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,313 by stars
ChartLatestAffected imagesRadar Score
flux2fluxcd-community2.19.07 of 7See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
1.82.2
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
1.82.2
ghcr.io/fluxcd/image-automation-controller:v1.2.26b0b16ab2115
google.golang.org/grpc@v1.80.0
1.82.2
ghcr.io/fluxcd/image-reflector-controller:v1.2.227e6bad1dac5
google.golang.org/grpc@v1.80.0
1.82.2
ghcr.io/fluxcd/kustomize-controller:v1.9.23aecec8bafdb
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/fluxcd/notification-controller:v1.9.29ce503e7bcb8
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

2,951
vault-secrets-operatorhashicorpVerified publisher1.5.12 of 2See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
hashicorp/vault-secrets-operator:1.5.1458c842add32
google.golang.org/grpc@v1.83.0
1.83.2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

1,040
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,367
gatekeepergatekeeperVerified publisher3.23.11 of 3See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

495
snapshot-controllerpiraeus-chartsVerified publisher5.2.01 of 1See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

228
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

2,103
k10kastenVerified publisher9.0.51 of 23See more

k10 kasten 9.0.5

1 of the 23 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/kasten-images/prometheus:9.0.5da2bf307c353
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

1,880
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.16 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
google.golang.org/grpc@v1.81.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.16 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
google.golang.org/grpc@v1.81.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

4,061
chaos-meshchaos-meshVerified publisher2.8.44 of 4See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.82.2
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/chaos-mesh/chaos-mesh:v2.8.49e48285bb44c
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

6,342
csi-driver-nfscsi-driver-nfsVerified publisher4.13.46 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

3,324
portainerportainer245.0.01 of 1See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.45.0511f3f06c96f
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

277
atlantisatlantis6.15.11See more

atlantis atlantis 6.15.1

1 container image this version deploys carries CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

—
codercoder-v2OfficialVerified publisher2.37.11 of 1See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.10c6994bb4c5a
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

187
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

3,475
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

2,453
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
google.golang.org/grpc@v1.41.0
1.82.2
milvusdb/milvus:v2.2.13a3a55e1c1497
google.golang.org/grpc@v1.48.0
1.82.2
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

32,259
flaggerflagger1.45.01 of 1See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger:1.45.015b372d35012
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

222
victoria-metrics-operatorvictoriametricsVerified publisher0.67.31 of 1See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.74.17310c4a80b94
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

109
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

2,221
signozsignoz0.141.12 of 5See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
signoz/signoz:v0.141.1c10fa03e103c
google.golang.org/grpc@v1.82.1
1.82.2
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

7,568
tempografana-communityVerified publisher3.0.01 of 1See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/tempo:3.0.30296560ac66f
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

148
keelkeel1.2.21 of 1See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

809
openfgaopenfgaOfficialVerified publisher0.3.141 of 1See more

openfga openfga 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
openfga/openfga:v1.20.0d53ce5c48413
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

8
prometheus-mongodb-exporterprometheus-communityVerified publisher3.22.01 of 1See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
percona/mongodb_exporter:0.53.00214e482b2cd
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

231
node-local-dnsdeliveryheroVerified publisher2.9.21 of 1See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
google.golang.org/grpc@v1.75.1
1.82.2

Open the chart page →

1,685
fission-allfission-chartsOfficialVerified publisher1.27.01 of 3See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

296
rancherrancher-latest2.15.12 of 2See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.82.2
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

1,456
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
google.golang.org/grpc@v1.72.0
1.82.2

Open the chart page →

19,391
dragonflydragonflyVerified publisher1.8.42 of 3See more

dragonfly dragonfly 1.8.4

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
google.golang.org/grpc@v1.81.1
1.82.2
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

3,787
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.4.02 of 3See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshark/hub:v53.46d3f22525a0e
google.golang.org/grpc@v1.82.1
1.82.2
kubeshark/worker:v53.4b226490dfa11
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

825
mattermost-team-editionmattermostVerified publisher6.6.1061 of 4See more

mattermost-team-edition mattermost 6.6.106

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:11.10.18285b96eb412
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

1,475
secrets-store-csi-driversecret-store-csi-driver1.6.12 of 4See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

2 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

1,766
kube-image-keeperenixVerified publisher2.3.11 of 1See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/enix/kube-image-keeper:2.3.1d3ccf28495c3
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

63
opensearch-operatoropensearch-operatorVerified publisher3.0.21 of 1See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
opensearchproject/opensearch-operator:3.0.0-alphaf78bbdd1a386
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

603
pxc-operatorpercona1.20.11 of 1See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

392
pulsarapache4.7.03 of 10See more

pulsar apache 4.7.0

3 of the 10 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
google.golang.org/grpc@v1.75.0
1.82.2
grafana/grafana:12.4.1e932bd6ed0e0
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.2

Open the chart page →

9,864
tetragonciliumOfficialVerified publisher1.7.12 of 3See more

tetragon cilium 1.7.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
google.golang.org/grpc@v1.82.1
1.82.2
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

218
miniocloudpirates-minioVerified publisher0.13.41 of 1See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
google.golang.org/grpc@v1.74.2
1.82.2

Open the chart page →

961
difydify-helmVerified publisher0.38.03 of 11See more

dify dify-helm 0.38.0

3 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
google.golang.org/grpc@v1.82.1
1.82.2
langgenius/dify-api:1.16.1dcefa5f7c47c
google.golang.org/grpc@v1.81.1
1.82.2
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

22,002
eclipse-cheeclipse-cheVerified publisher7.122.01 of 1See more

eclipse-che eclipse-che 7.122.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

925
pyroscopegrafana2.3.12 of 3See more

pyroscope grafana 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
google.golang.org/grpc@v1.76.0
1.82.2
grafana/pyroscope:2.3.186a9ee744848
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

3,157
telegrafinfluxdata1.8.761 of 1See more

telegraf influxdata 1.8.76

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/telegraf:1.40-alpinee2f55b0afaa3
google.golang.org/grpc@v1.85.0-dev
1.85.0-dev.0.20260825072537-93e31b48545e

Open the chart page →

262
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

1,097
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
google.golang.org/grpc@v1.34.0
1.82.2

Open the chart page →

4,086
k6-operatorgrafana4.6.01 of 1See more

k6-operator grafana 4.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/grafana/k6-operator:controller-v1.6.0ba7f0fc1e22e
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

87
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

1,135
oktetooktetoOfficialVerified publisher0.0.0-2026-08-171See more

okteto okteto 0.0.0-2026-08-17

1 container image this version deploys carries CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/okteto/buildkit:0.0.0-2026-08-1714527ca5d2a9
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

—
hydraory0.64.01 of 2See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

1,156
proxmox-csi-pluginproxmox-csi0.5.127 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.12

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.20.095ef74cce03e
google.golang.org/grpc@v1.83.0
1.83.2
ghcr.io/sergelogvinov/proxmox-csi-node:v0.20.0e0151137a1c5
google.golang.org/grpc@v1.83.0
1.83.2
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

1,766

Container images carrying it

2,803 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dragonflyoss/scheduler:v2.1.49523785c77787
google.golang.org/grpc@v1.64.0
1.82.2
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
google.golang.org/grpc@v1.79.3
1.82.2
1
drone/drone:2.28.255897c8fb22d
google.golang.org/grpc@v1.59.0
1.82.2
1
drone/drone-runner-docker:1.8.1137e79c5e23c
google.golang.org/grpc@v1.29.1
1.82.2
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
google.golang.org/grpc@v1.28.1
1.82.2
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
google.golang.org/grpc@v1.49.0
1.82.2
1
dunglas/mercure:v0.24.080fcb704a741
google.golang.org/grpc@v1.81.0
1.82.2
1
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
google.golang.org/grpc@v1.56.3
1.82.2
1
dysnix/gke-upgrade-notification-handler:latestc166f958f86a
google.golang.org/grpc@v1.40.0
1.82.2
1
ebrianne/cert-manager-webhook-duckdns:v1.2.39cd17700c9ec
google.golang.org/grpc@v1.27.0
1.82.2
1
eginnovations/agent:7.5.4e4dfe242fe9f
google.golang.org/grpc@v1.80.0
1.82.2
1
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
google.golang.org/grpc@v1.68.1
1.82.2
1
elastic/apm-server:7.17.6c7a1c63257d0
google.golang.org/grpc@v1.48.0
1.82.2
1
elastiflow/flow-collector:7.26.0fee67842e16b
google.golang.org/grpc@v1.81.0
1.82.2
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
google.golang.org/grpc@v1.82.1
1.82.2
1
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
google.golang.org/grpc@v1.68.1
1.82.2
1
emqx/ecp-main:2.5.1fa876f71e5d6
google.golang.org/grpc@v1.67.1
1.82.2
1
emqxecp/otelcol:2.5.04c31d9bec846
google.golang.org/grpc@v1.66.0
1.82.2
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
google.golang.org/grpc@v1.31.0
1.82.2
1
envoyproxy/ai-gateway-controller:003ab39f36923b5d40609a601e2951b73f6318fbec1f06ee29a7
google.golang.org/grpc@v1.74.2
1.82.2
1
envoyproxy/gateway:v1.9.10049bcb384c5
google.golang.org/grpc@v1.83.1
1.83.2
1
envoyproxy/gateway:v0.5.02a9f99d28567
google.golang.org/grpc@v1.56.2
1.82.2
1
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
google.golang.org/grpc@v1.65.0
1.82.2
1
envoyproxy/ratelimit:v1.4.071081616da3e
google.golang.org/grpc@v1.19.0
1.82.2
1
envoyproxy/ratelimit:6f5de117b6cb6e16f8c9
google.golang.org/grpc@v1.27.0
1.82.2
1
envoyproxy/ratelimit:4d2efd61ede09a75a84c
google.golang.org/grpc@v1.27.0
1.82.2
1
epamedp/edp-headlamp:0.25.093417e18bb1a
google.golang.org/grpc@v1.60.1
1.82.2
1
epamedp/edp-tekton:0.2.4924939850655
google.golang.org/grpc@v1.50.1
1.82.2
1
epamedp/keycloak-operator:1.35.0a5398eaa7b80
google.golang.org/grpc@v1.79.3
1.82.2
1
epamedp/nexus-operator:3.6.09fede333ef27
google.golang.org/grpc@v1.82.1
1.82.2
1
epamedp/sonar-operator:3.4.0661d1648a49a
google.golang.org/grpc@v1.82.1
1.82.2
1
epamedp/tekton-custom-task:0.2.067d896676f45
google.golang.org/grpc@v1.70.0
1.82.2
1
erigontech/erigon:latest2252efdf9abe
google.golang.org/grpc@v1.83.0
1.83.2
1
erigontech/erigon:v2.61.288706754b627
google.golang.org/grpc@v1.63.2
1.82.2
1
ethereum/client-go:latest37575ec10fbc
google.golang.org/grpc@v1.79.1
1.82.2
1
ethereum/client-go:stableb8ab3451a117
google.golang.org/grpc@v1.79.1
1.82.2
1
ethpandaops/cbt-api:latest9dc0b50e6c27
google.golang.org/grpc@v1.80.0
1.82.2
1
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
google.golang.org/grpc@v1.81.1
1.82.2
1
ethpandaops/contributoor:latest1edd4074fd79
google.golang.org/grpc@v1.80.0
1.82.2
1
ethpandaops/forky:debian-latestc937f4ba737c
google.golang.org/grpc@v1.72.1
1.82.2
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
google.golang.org/grpc@v1.74.2
1.82.2
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
google.golang.org/grpc@v1.76.0
1.82.2
1
evcc/evcc:0.300.8ddf2a25afce5
google.golang.org/grpc@v1.78.0
1.82.2
1
factly/mande-server:0.34.1384d384310ef
google.golang.org/grpc@v1.50.1
1.82.2
1
falcosecurity/falco:0.44.1d0cfe422d6ac
google.golang.org/grpc@v1.79.3
1.82.2
1
falcosecurity/falcoctl:0.13.00eeb79adc580
google.golang.org/grpc@v1.80.0
1.82.2
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
google.golang.org/grpc@v1.79.3
1.82.2
1
falcosecurity/falco-operator:0.4.18a99fcc57a57
google.golang.org/grpc@v1.79.3
1.82.2
1
falcosecurity/falcosidekick:2.32.01976da721518
google.golang.org/grpc@v1.75.0
1.82.2
1
falcosecurity/falcosidekick:2.27.0828ee36cb13a
google.golang.org/grpc@v1.49.0
1.82.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.