StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,319
of 17,790 indexed, latest versions
Container images
2,821
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,319 of 17,790 indexed charts deploy, on 2,821 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,820
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh, GO-2026-6443
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,319 by stars
ChartLatestAffected imagesRadar Score
etcdcloudpirates-etcdVerified publisher0.8.81 of 1See more

etcd cloudpirates-etcd 0.8.8

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.1a9983dd6d928
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

128
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.161 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.16

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/messaging-topology-operator:1.20.3f377d3c3e221
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

8
codefreshcodefresh-onpremOfficialVerified publisher2.12.143See more

codefresh codefresh-onprem 2.12.14

3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
google.golang.org/grpc@v1.65.0
1.82.2
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
google.golang.org/grpc@v1.82.1
1.82.2
quay.io/codefresh/dind:3.0.250885ab519dac
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

—
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
google.golang.org/grpc@v1.51.0
1.82.2
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
google.golang.org/grpc@v1.51.0
1.82.2
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
google.golang.org/grpc@v1.51.0
1.82.2
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
google.golang.org/grpc@v1.51.0
1.82.2
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
google.golang.org/grpc@v1.49.0
1.82.2
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

6,485
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

82
gitlab-operatorgitlabVerified publisher3.3.21 of 1See more

gitlab-operator gitlab 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:3.3.242dd426130a9
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

145
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
google.golang.org/grpc@v1.44.0
1.82.2
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.82.2

Open the chart page →

6,470
kube-prometheus-stackkube-prometheus-stack-oci91.4.11See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

1 container image this version deploys carries CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

—
lakefslakefsVerified publisher1.12.301See more

lakefs lakefs 1.12.30

1 container image this version deploys carries CVE-2026-84445.

Container imageDigestPackageFixed in
treeverse/lakefs:1.86.0fb7a0d90f77e
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

—
spegelspegelVerified publisher0.7.41 of 1See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinned26c60b05e08a
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

176
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
google.golang.org/grpc@v1.67.1
1.82.2
supabase/gotrue:v2.163.0ba4ddc594b0b
google.golang.org/grpc@v1.63.2
1.82.2

Open the chart page →

23,263
woodpeckerwoodpecker-ci3.7.32 of 2See more

woodpecker woodpecker-ci 3.7.3

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
woodpeckerci/woodpecker-agent:v3.18.0b10103626eb8
google.golang.org/grpc@v1.83.1
1.83.2
woodpeckerci/woodpecker-server:v3.18.05192aee400df
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

32
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

10,810
kube-prometheuschoerodon9.3.12 of 7See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.82.2
squareup/ghostunnel:v1.5.270f4cf270425
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

12,237
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.24 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

4 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.2f21fca343428
google.golang.org/grpc@v1.83.1
1.83.2
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
google.golang.org/grpc@v1.72.1
1.82.2
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
google.golang.org/grpc@v1.71.0
1.82.2
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

2,235
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

4,167
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
google.golang.org/grpc@v1.62.0
1.82.2

Open the chart page →

1,216
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

806
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

3,128
opentelemetry-kube-stackopentelemetry-helmVerified publisher0.21.01 of 2See more

opentelemetry-kube-stack opentelemetry-helm 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.154.0263699ffea0c
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

551
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

348
thanosstevehipwellVerified publisher1.24.11 of 1See more

thanos stevehipwell 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

196
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

1,205
caddyalekcVerified publisher0.9.01 of 1See more

caddy alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/caddy:2.11.4-alpine5f5c8640aae0
google.golang.org/grpc@v1.81.0
1.82.2

Open the chart page →

846
openstack-cinder-csicloud-provider-openstack2.36.57 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.36.078adaeb154c7
google.golang.org/grpc@v1.80.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
google.golang.org/grpc@v1.72.1
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
google.golang.org/grpc@v1.72.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
google.golang.org/grpc@v1.72.1
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
google.golang.org/grpc@v1.72.1
1.82.2

Open the chart page →

3,604
connaisseurconnaisseurVerified publisher2.12.01 of 2See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
securesystemsengineering/connaisseur:v3.12.038918befbdad
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

3,024
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

4,604
devtron-operatordevtron0.23.37 of 11See more

devtron-operator devtron 0.23.3

7 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.82.2
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.82.2
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.82.2
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

31,447
fluent-operatorfluent4.3.01 of 1See more

fluent-operator fluent 4.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

135
hcloud-csihcloud2.23.05 of 6See more

hcloud-csi hcloud 2.23.0

5 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

2,631
envoy-gatewayhelmforgeVerified publisher2.1.01 of 3See more

envoy-gateway helmforge 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.9.10049bcb384c5
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

2,391
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
google.golang.org/grpc@v1.71.0
1.82.2
gitea/gitea:1.22.376f516a1a8c2
google.golang.org/grpc@v1.62.1
1.82.2
ilum/api:6.7.3624fd09528c8
google.golang.org/grpc@v1.65.0
1.82.2
minio/mc:RELEASE.2025-04-16T18-13-26Zaead63c77f9d
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

23,289
kube-greenkube-green-officialOfficialVerified publisher0.7.11 of 1See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubegreen/kube-green:0.7.12dc0f0a6034c
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

493
temporallemontechVerified publisher0.37.03 of 13See more

temporal lemontech 0.37.0

3 of the 13 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
google.golang.org/grpc@v1.23.1
1.82.2
temporalio/server:1.22.4c0a44c26397b
google.golang.org/grpc@v1.59.0
1.82.2
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

14,893
netris-controllernetrisai2.8.22 of 14See more

netris-controller netrisai 2.8.2

2 of the 14 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
google.golang.org/grpc@v1.14.0
1.82.2
netrisai/controller-grpc:4.6.0.00753178bf173c2
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

30,481
nuclionuclio0.23.81 of 2See more

nuclio nuclio 0.23.8

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/nuclio/dashboard:1.17.8-amd64b5f5bd4efbee
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

963
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
google.golang.org/grpc@v1.59.0
1.82.2
openmined/syft-seaweedfs:0.9.53a4144c0bb82
google.golang.org/grpc@v1.61.1
1.82.2

Open the chart page →

17,306
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
google.golang.org/grpc@v1.76.0
1.82.2

Open the chart page →

1,039
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

4,154
gatustwin1.5.01 of 1See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
twinproduction/gatus:v5.34.03fff895e77d3
google.golang.org/grpc@v1.77.0
1.82.2

Open the chart page →

721
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

5,669
astarte-operatorastarteOfficialVerified publisher26.5.21 of 1See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

695
awx-operatorawx-operator-helm3.2.12 of 2See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
google.golang.org/grpc@v1.60.1
1.82.2
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

9,868
cerboscerbosVerified publisher0.55.01 of 1See more

cerbos cerbos 0.55.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.55.04b9d3b58c4f1
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

109
cert-manager-istio-csrcert-managerOfficialVerified publisher0.17.01 of 1See more

cert-manager-istio-csr cert-manager 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-istio-csr:v0.17.0c38a38fcd2dd
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

142
cadvisorckotzbauerVerified publisher2.4.31 of 1See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
google.golang.org/grpc@v1.67.0
1.82.2

Open the chart page →

961
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
google.golang.org/grpc@v1.52.3
1.82.2

Open the chart page →

6,847
dronecommunity-chartsVerified publisher0.1.51 of 2See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

2,728
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
getconvoy/convoy:v26.7.6f4934cc05e31
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

5,915
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
google.golang.org/grpc@v1.71.2
1.82.2

Open the chart page →

3,921

Container images carrying it

2,821 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sikalabs/slu:v0.72.07bd267f30247
google.golang.org/grpc@v1.59.0
1.82.2
1
silkeh/alertmanager_matrix:0.6.1900010497f8c
google.golang.org/grpc@v1.78.0
1.82.2
1
simpleidserver/faasprometheus:0.0.425e378d57d78
google.golang.org/grpc@v1.40.0
1.82.2
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
google.golang.org/grpc@v1.58.3
1.82.2
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
google.golang.org/grpc@v1.62.1
1.82.2
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
google.golang.org/grpc@v1.39.0
1.82.2
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
google.golang.org/grpc@v1.80.0
1.82.2
1
softonic/homing-pigeon:0.9.6f26d467b7b82
google.golang.org/grpc@v1.73.0
1.82.2
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
google.golang.org/grpc@v1.81.1
1.82.2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
google.golang.org/grpc@v1.43.0
1.82.2
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
google.golang.org/grpc@v1.23.1
1.82.2
1
sstarcher/helm-exporter:0.5.011769d01ba35
google.golang.org/grpc@v1.24.0
1.82.2
1
stakater/workshop-operator:v0.0.3897bf456cc97c
google.golang.org/grpc@v1.29.1
1.82.2
1
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
google.golang.org/grpc@v1.46.2
1.82.2
1
stakkato95/twitter-service-users:0.1.1456049efee9a
google.golang.org/grpc@v1.46.2
1.82.2
1
stashapp/stash-box:latesta534c8afdf39
google.golang.org/grpc@v1.68.1
1.82.2
1
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
google.golang.org/grpc@v1.79.3
1.82.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
google.golang.org/grpc@v1.35.0
1.82.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
google.golang.org/grpc@v1.23.1
1.82.2
1
streamnative/function-mesh:v0.28.077939c8aa269
google.golang.org/grpc@v1.79.3
1.82.2
1
streamnative/pulsar-resources-operator:v0.21.11886043c24d0
google.golang.org/grpc@v1.82.1
1.82.2
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
google.golang.org/grpc@v1.44.0
1.82.2
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
google.golang.org/grpc@v1.51.0
1.82.2
1
supabase/gotrue:v2.189.0385184459f57
google.golang.org/grpc@v1.78.0
1.82.2
1
supabase/gotrue:v2.91.07174d551d720
google.golang.org/grpc@v1.53.0
1.82.2
1
supabase/gotrue:v2.163.0ba4ddc594b0b
google.golang.org/grpc@v1.63.2
1.82.2
1
superseriousbusiness/gotosocial:0.22.10078ca451dda
google.golang.org/grpc@v1.81.1
1.82.2
1
surajwarbhe/grafana:v185248611e9f1
google.golang.org/grpc@v1.27.1
1.82.2
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
google.golang.org/grpc@v1.45.0
1.82.2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
google.golang.org/grpc@v1.53.0
1.82.2
1
sysadminsmedia/homebox:0.26.056e880b62309
google.golang.org/grpc@v1.81.1
1.82.2
1
tailwarden/komiser:3.1.103f68c8ae7993
google.golang.org/grpc@v1.56.3
1.82.2
1
temporalio/admin-tools:1.22.4258958fe2ff2
google.golang.org/grpc@v1.58.2
1.82.2
1
temporalio/admin-tools:1.15.135034611d981
google.golang.org/grpc@v1.44.0
1.82.2
1
temporalio/admin-tools:1.26.237e2e33dbd7b
google.golang.org/grpc@v1.67.1
1.82.2
1
temporalio/admin-tools:1.22.0836af062af30
google.golang.org/grpc@v1.53.0
1.82.2
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
google.golang.org/grpc@v1.56.3
1.82.2
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
google.golang.org/grpc@v1.65.0
1.82.2
1
temporalio/admin-tools:1.28cfde8170c92f
google.golang.org/grpc@v1.79.3
1.82.2
1
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
google.golang.org/grpc@v1.79.3
1.82.2
1
temporalio/auto-setup:1.29.15b3502a3b685
google.golang.org/grpc@v1.72.2
1.82.2
1
temporalio/auto-setup:1.27.2b44cbfeb43db
google.golang.org/grpc@v1.71.0
1.82.2
1
temporalio/auto-setup:1.29.7f14912b699cf
google.golang.org/grpc@v1.79.3
1.82.2
1
temporalio/server:1.26.21e2626efcbc1
google.golang.org/grpc@v1.56.3
1.82.2
1
temporalio/server:1.25.08a5798191dea
google.golang.org/grpc@v1.56.3
1.82.2
1
temporalio/server:1.31.2b5ecdb8282be
google.golang.org/grpc@v1.79.3
1.82.2
1
temporalio/server:1.29.1c1e3326b2ce1
google.golang.org/grpc@v1.72.2
1.82.2
1
temporalio/server:1.22.0ddeebf8bad8f
google.golang.org/grpc@v1.57.0
1.82.2
1
temporalio/server:1.15.1e26758f5a1bf
google.golang.org/grpc@v1.44.0
1.82.2
1
temporalio/ui:2.44.00b36e00aad30
google.golang.org/grpc@v1.66.1
1.82.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.