StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,348
of 17,821 indexed, latest versions
Container images
2,803
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,348 of 17,821 indexed charts deploy, on 2,803 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,803
OSV records
GHSA-2v4p-qf9q-27wj
Also known as
GO-2026-6443
Trending
Rank 42 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,348 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,803 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
nerzhul/mc-arm64:2020.10.034215df511f31
google.golang.org/grpc@v1.26.0
1.82.2
1
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
google.golang.org/grpc@v1.72.1
1.82.2
1
netapp/controller:26.08.0-console09c6cc6b5f71
google.golang.org/grpc@v1.80.0
1.82.2
1
netapp/controller:26.06.08235a77cfc92
google.golang.org/grpc@v1.80.0
1.82.2
1
netapp/trident-operator:21.10.049cfe552d9c2
google.golang.org/grpc@v1.41.0
1.82.2
1
netapp/trident-operator:26.06.15e8ba78f4ab1
google.golang.org/grpc@v1.83.0
1.83.2
1
netbirdio/management:0.45.10c9994b393ea
google.golang.org/grpc@v1.64.1
1.82.2
1
netbirdio/management:0.60.252682e5f48f9
google.golang.org/grpc@v1.73.0
1.82.2
1
netbirdio/management:0.46.0b0adc4ad4ec6
google.golang.org/grpc@v1.64.1
1.82.2
1
netbirdio/netbird-server:0.78.13086534361a1
google.golang.org/grpc@v1.80.0
1.82.2
1
netbirdio/netbird-server:0.78.2ac6317722f6f
google.golang.org/grpc@v1.80.0
1.82.2
1
netbirdio/relay:0.45.1872e3add0e1e
google.golang.org/grpc@v1.64.1
1.82.2
1
netbirdio/relay:0.60.2a10762533793
google.golang.org/grpc@v1.73.0
1.82.2
1
netbirdio/relay:0.46.0d32f82514a24
google.golang.org/grpc@v1.64.1
1.82.2
1
netbirdio/reverse-proxy:0.72.43104d5ca3a76
google.golang.org/grpc@v1.80.0
1.82.2
1
netbirdio/signal:0.45.146ce5a45538f
google.golang.org/grpc@v1.64.1
1.82.2
1
netbirdio/signal:0.60.267176bcbf6ab
google.golang.org/grpc@v1.73.0
1.82.2
1
netbirdio/signal:0.46.0e8f392611152
google.golang.org/grpc@v1.64.1
1.82.2
1
netdata/netdata:v2.11.121970e176031
google.golang.org/grpc@v1.83.0
1.83.2
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
google.golang.org/grpc@v1.65.1
1.82.2
1
netrisai/controller-grpc:4.6.0.00753178bf173c2
google.golang.org/grpc@v1.56.3
1.82.2
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
google.golang.org/grpc@v1.68.1
1.82.2
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
google.golang.org/grpc@v1.27.1
1.82.2
1
ngosang/restic-exporter:2.1.2a8f9cfa30162
google.golang.org/grpc@v1.81.1
1.82.2
1
nocodb/nocodb:0.258.06779a4ddedf2
google.golang.org/grpc@v1.60.1
1.82.2
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.82.2
1
nocodb/nocodb:0.84.15f9b799933aa8
google.golang.org/grpc@v1.40.1
1.82.2
1
novosga/novosga:latest34b9acbe6e51
google.golang.org/grpc@v1.80.0
1.82.2
1
nutanix/cn-rwx-operator:1.1.00082e0cebd42
google.golang.org/grpc@v1.79.3
1.82.2
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
google.golang.org/grpc@v1.35.0
1.82.2
1
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
google.golang.org/grpc@v1.49.0
1.82.2
1
oamdev/cluster-gateway:v1.4.0dc97164c4c1f
google.golang.org/grpc@v1.42.0
1.82.2
1
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
google.golang.org/grpc@v1.42.0
1.82.2
1
oamdev/terraform-controller:v0.8.070447f4d360a
google.golang.org/grpc@v1.27.1
1.82.2
1
oamdev/vela-core:v1.11.095fa412c934e
google.golang.org/grpc@v1.67.1
1.82.2
1
oamdev/vela-prism:v1.6.06db6a937647d
google.golang.org/grpc@v1.42.0
1.82.2
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
google.golang.org/grpc@v1.75.0
1.82.2
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
google.golang.org/grpc@v1.44.0
1.82.2
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
google.golang.org/grpc@v1.64.1
1.82.2
1
okteto/civo-webhook:0.5.357cd51176538
google.golang.org/grpc@v1.57.0
1.82.2
1
onkar17/grafana:latestaef3ebd6e24e
google.golang.org/grpc@v1.36.0
1.82.2
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
google.golang.org/grpc@v1.81.1
1.82.2
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
google.golang.org/grpc@v1.27.1
1.82.2
1
opencsghq/csghub-server:v2.5.0-ee587046575c2c
google.golang.org/grpc@v1.82.1
1.82.2
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
google.golang.org/grpc@v1.71.0
1.82.2
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
google.golang.org/grpc@v1.67.1
1.82.2
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
google.golang.org/grpc@v1.80.0
1.82.2
1
opencsghq/kube-state-metrics:v2.19.15ea147562ec8
google.golang.org/grpc@v1.79.3
1.82.2
1
opencsghq/lws:v0.6.1de15437db41b
google.golang.org/grpc@v1.65.0
1.82.2
1
opencsghq/prometheus:v3.13.00aac0d04749e
google.golang.org/grpc@v1.81.1
1.82.2
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.