CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,337; of 17,790 indexed, latest versions
Container images: 2,838; deployed by those charts
Fix available: 2 of 2; affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,337 of 17,790 indexed charts deploy, on 2,838 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	2,837
kubernetes-1.34apk	1.34.11-r2	1.34.11-r8	1

OSV records: GHSA-2v4p-qf9q-27wj CGA-2675-68qh-x3xm
Also known as: CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh, GO-2026-6443
Trending: Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,337 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

2 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.83.1	1.83.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

655

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.82.2
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

3,003

prometheusprometheus-community

29.30.0

3 of 6 See more

prometheus prometheus-community 29.30.0

3 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.82.2
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

478

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

163

vaulthashicorp

0.34.1

1 of 2 See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

549

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	google.golang.org/grpc@v1.81.1	1.82.2
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	google.golang.org/grpc@v1.81.1	1.82.2
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.82.2
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.82.2
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	google.golang.org/grpc@v1.81.0	1.82.2

Open the chart page →

1,686

external-secretsexternal-secrets-operator

2.10.0

1 of 1 See more

external-secrets external-secrets-operator 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.10.0	814117b0fd6d	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

longhornlonghorn

1.12.1

2 of 3 See more

longhorn longhorn 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	google.golang.org/grpc@v1.83.0	1.83.2
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

595

gitlab-runnergitlab

0.92.2

1 of 1 See more

gitlab-runner gitlab 0.92.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.2	5448611a3c54	google.golang.org/grpc@v1.83.0	1.83.2

Open the chart page →

290

ciliumcilium

1.20.2

2 of 3 See more

cilium cilium 1.20.2

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.2	2939231d0d3e	google.golang.org/grpc@v1.83.1	1.83.2
quay.io/cilium/operator-generic :v1.20.2	64d8798350e8	google.golang.org/grpc@v1.83.1	1.83.2

Open the chart page →

1,005

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	google.golang.org/grpc@v1.80.0	1.82.2

Open the chart page →

1,347

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	google.golang.org/grpc@v1.72.1	1.82.2
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	google.golang.org/grpc@v1.68.1	1.82.2
quay.io/metallb/speaker :v0.16.1	16561e96531e	google.golang.org/grpc@v1.72.1	1.82.2

Open the chart page →

2,149

cloudnative-pgcloudnative-pg

0.29.0

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

124

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	google.golang.org/grpc@v1.79.3	1.82.2
rancher/shell :v0.8.1	f293af9c635f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,487

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

154

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

892

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	google.golang.org/grpc@v1.78.0	1.82.2
artifacthub/hub :v1.23.0	7d3a91c539dc	google.golang.org/grpc@v1.82.0	1.82.2
artifacthub/scanner :v1.23.0	2d8365601f0e	google.golang.org/grpc@v1.78.0	1.82.2
artifacthub/tracker :v1.23.0	5368d21a6e5c	google.golang.org/grpc@v1.75.1	1.82.2

Open the chart page →

10,840

kube-state-metricsprometheus-community

8.5.0

1 of 1 See more

kube-state-metrics prometheus-community 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.19.2	b8ec653c4423	google.golang.org/grpc@v1.83.0	1.83.2

Open the chart page →

1,151

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.82.2

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

576

argo-rolloutsargo

2.43.1

1 of 1 See more

argo-rollouts argo 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	google.golang.org/grpc@v1.80.0	1.82.2

Open the chart page →

122

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.82.2
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

3,003

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

302

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	google.golang.org/grpc@v1.58.3	1.82.2

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

4 of 6 See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	google.golang.org/grpc@v1.82.1	1.82.2
grafana/rollout-operator :v0.38.1	32fe838b79dd	google.golang.org/grpc@v1.82.0	1.82.2
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2

Open the chart page →

4,548

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

725

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

238

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	google.golang.org/grpc@v1.72.1	1.82.2

Open the chart page →

1,773

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	google.golang.org/grpc@v1.79.2	1.82.2

Open the chart page →

30,217

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	google.golang.org/grpc@v1.79.3	1.82.2
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	google.golang.org/grpc@v1.79.3	1.82.2
falcosecurity/falcoctl :0.13.0	0eeb79adc580	google.golang.org/grpc@v1.80.0	1.82.2

Open the chart page →

5,398

alertmanagerprometheus-community

1.43.1

1 of 1 See more

alertmanager prometheus-community 1.43.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :3.5	979f12864a13	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

1,186

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	google.golang.org/grpc@v1.65.0	1.82.2

Open the chart page →

1,369

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/ceph-csi-operator :v1.0.4	c62933fd4083	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,454

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	google.golang.org/grpc@v1.72.2	1.82.2

Open the chart page →

976

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.83.1	1.83.2

Open the chart page →

432

victoria-metrics-k8s-stackvictoriametrics

0.92.1

3 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

3 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	google.golang.org/grpc@v1.81.1	1.82.2
victoriametrics/operator :v0.74.1	7310c4a80b94	google.golang.org/grpc@v1.82.1	1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,910

openebsopenebs

4.6.1

15 of 35 See more

openebs openebs 4.6.1

15 of the 35 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	google.golang.org/grpc@v1.71.0	1.82.2
grafana/loki :3.4.2	58a6c186ce78	google.golang.org/grpc@v1.70.0	1.82.2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	google.golang.org/grpc@v1.71.1	1.82.2
openebs/lvm-driver :1.10.1	41f73aba7f31	google.golang.org/grpc@v1.79.3	1.82.2
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	google.golang.org/grpc@v1.82.1	1.82.2
openebs/zfs-driver :2.11.1	16f1a74bb249	google.golang.org/grpc@v1.82.1	1.82.2
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	google.golang.org/grpc@v1.69.0	1.82.2
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	google.golang.org/grpc@v1.69.2	1.82.2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	google.golang.org/grpc@v1.75.1	1.82.2
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	google.golang.org/grpc@v1.72.1	1.82.2
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.82.2
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	google.golang.org/grpc@v1.68.0	1.82.2

Open the chart page →

24,128

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	google.golang.org/grpc@v1.60.1	1.82.2

Open the chart page →

937

actions-runner-controlleractions-runner-controller

0.23.7

1 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	google.golang.org/grpc@v1.47.0	1.82.2

Open the chart page →

2,890

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	google.golang.org/grpc@v1.82.0	1.82.2

Open the chart page →

336

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	google.golang.org/grpc@v1.71.1	1.82.2

Open the chart page →

3,118

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	google.golang.org/grpc@v1.83.0	1.83.2

Open the chart page →

3,131

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	google.golang.org/grpc@v1.77.0	1.82.2

Open the chart page →

1,984

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2

Open the chart page →

2,497

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

273

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.82.2
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

3,558

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

3,006

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	google.golang.org/grpc@v1.83.0	1.83.2
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	google.golang.org/grpc@v1.65.0	1.82.2

Open the chart page →

1,054

Container images carrying it

2,838 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/grpc@v1.34.0	1.82.2	1
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	google.golang.org/grpc@v1.22.0	1.82.2	1
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/grpc@v1.34.0	1.82.2	1
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/grpc@v1.22.0	1.82.2	1
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/grpc@v1.34.0	1.82.2	1
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/grpc@v1.22.0	1.82.2	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	google.golang.org/grpc@v1.39.0	1.82.2	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	google.golang.org/grpc@v1.39.0	1.82.2	1
gcr.io/istio-testing/install-cni :latest	ec6f9ea5757b	google.golang.org/grpc@v1.82.1	1.82.2	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	google.golang.org/grpc@v1.65.0	1.82.2	1
gcr.io/k8s-staging-multitenancy/hnc-manager :v1.1.0	8ab8229f6a89	google.golang.org/grpc@v1.40.0	1.82.2	1
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	google.golang.org/grpc@v1.72.1	1.82.2	1
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	google.golang.org/grpc@v1.82.1	1.82.2	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	google.golang.org/grpc@v1.76.0	1.82.2	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter	d675f211a40f	google.golang.org/grpc@v1.67.1	1.82.2	1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress	ec4b544499ba	google.golang.org/grpc@v1.67.1	1.82.2	1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker	395f4ff1bd34	google.golang.org/grpc@v1.67.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	google.golang.org/grpc@v1.28.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	google.golang.org/grpc@v1.60.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller	e70bc675f977	google.golang.org/grpc@v1.67.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	google.golang.org/grpc@v1.42.0	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook	7d76a6d42d13	google.golang.org/grpc@v1.67.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	google.golang.org/grpc@v1.42.0	1.82.2	1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	google.golang.org/grpc@v1.60.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	15a601147ef4	google.golang.org/grpc@v1.71.1	1.82.2	1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier	197fbb71d1f1	google.golang.org/grpc@v1.42.0	1.82.2	1
gcr.io/knative-releases/knative.dev/operator/cmd/operator :v1.22.1	ea30f1ce8dc4	google.golang.org/grpc@v1.80.0	1.82.2	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook	6c5c90cdf707	google.golang.org/grpc@v1.47.0	1.82.2	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook :v1.22.1	95d1a4fc8cd0	google.golang.org/grpc@v1.80.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	08315309da4b	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	google.golang.org/grpc@v1.33.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	google.golang.org/grpc@v1.60.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	google.golang.org/grpc@v1.28.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	google.golang.org/grpc@v1.48.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	105bdd14ecaa	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	google.golang.org/grpc@v1.28.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	google.golang.org/grpc@v1.60.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	google.golang.org/grpc@v1.48.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	google.golang.org/grpc@v1.33.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	google.golang.org/grpc@v1.48.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	google.golang.org/grpc@v1.28.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	google.golang.org/grpc@v1.60.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	google.golang.org/grpc@v1.48.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	google.golang.org/grpc@v1.33.1	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	google.golang.org/grpc@v1.44.0	1.82.2	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	google.golang.org/grpc@v1.44.0	1.82.2	1