StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,337
of 17,790 indexed, latest versions
Container images
2,838
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,337 of 17,790 indexed charts deploy, on 2,838 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,837
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh, GO-2026-6443
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,337 by stars
ChartLatestAffected imagesRadar Score
dronecommunity-chartsVerified publisher0.1.51 of 2See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

2,736
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
getconvoy/convoy:v26.7.6f4934cc05e31
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

5,943
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
google.golang.org/grpc@v1.71.2
1.82.2

Open the chart page →

3,948
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

4,522
emqx-operatoremqx-operator2.3.22 of 2See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
google.golang.org/grpc@v1.49.0
1.82.2
ghcr.io/emqx/emqx-operator:2.3.23333ed546165
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

4,548
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

2,351
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ethereum/client-go:stableb8ab3451a117
google.golang.org/grpc@v1.79.1
1.82.2

Open the chart page →

623
keptnlifecycle-toolkitOfficialVerified publisher0.11.02 of 3See more

keptn lifecycle-toolkit 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
google.golang.org/grpc@v1.68.0
1.82.2
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
google.golang.org/grpc@v1.68.0
1.82.2

Open the chart page →

1,941
mercuremercureOfficialVerified publisher0.24.01 of 1See more

mercure mercure 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.080fcb704a741
google.golang.org/grpc@v1.81.0
1.82.2

Open the chart page →

1,416
meshery-operatormesheryOfficialVerified publisher1.0.702 of 2See more

meshery-operator meshery 1.0.70

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
google.golang.org/grpc@v1.81.0
1.82.2
meshery/meshery-operator:1.0.50d245bc8b5c6
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

2,432
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

2,418
olmolmVerified publisher0.45.01 of 1See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.45.0f228c7a6b8c5
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

441
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

273
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

824
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

776
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

797
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

921
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

1,364
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
google.golang.org/grpc@v1.84.0-dev.0.20260723093437-b6eac429d7b6
1.85.0-dev.0.20260825072537-93e31b48545e
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
google.golang.org/grpc@v1.84.0-dev.0.20260723093437-b6eac429d7b6
1.85.0-dev.0.20260825072537-93e31b48545e

Open the chart page →

7,174
rekorsigstoreVerified publisher1.8.64 of 9See more

rekor sigstore 1.8.6

4 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/sigstore/scaffolding/createtreedigest-pinnede5232e8c9122
google.golang.org/grpc@v1.76.0
1.82.2
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
google.golang.org/grpc@v1.82.0
1.82.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
google.golang.org/grpc@v1.82.0
1.82.2

Open the chart page →

5,373
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

584
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
google.golang.org/grpc@v1.80.0
1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

2,377
sops-operatorsops-operatorVerified publisher0.10.11 of 2See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
google.golang.org/grpc@v1.82.0
1.82.2

Open the chart page →

1,257
thehivestrangebee-helmOfficialVerified publisher1.0.72 of 7See more

thehive strangebee-helm 1.0.7

2 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.82.2
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

16,220
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
google.golang.org/grpc@v1.79.3
1.82.2
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
google.golang.org/grpc@v1.79.3
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

5,918
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
google.golang.org/grpc@v1.60.1
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

14,327
vsphere-csivsphere-tmm3.8.17 of 7See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
google.golang.org/grpc@v1.68.1
1.82.2
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
google.golang.org/grpc@v1.68.1
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.2

Open the chart page →

3,957
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
google.golang.org/grpc@v1.29.1
1.82.2

Open the chart page →

6,177
kubedbappscodeVerified publisher2026.7.107 of 8See more

kubedb appscode 2026.7.10

7 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
google.golang.org/grpc@v1.72.1
1.82.2
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
google.golang.org/grpc@v1.72.1
1.82.2
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

4,145
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

3,008
alb-controllerazure-application-gateway-for-containers1.12.12 of 3See more

alb-controller azure-application-gateway-for-containers 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
mcr.microsoft.com/application-lb/images/alb-controller:1.12.172f33b24bc67
google.golang.org/grpc@v1.82.1
1.82.2
mcr.microsoft.com/application-lb/images/alb-controller-bootstrap:1.12.1cc129fd1c904
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

221
baserowbaserow-chartVerified publisher1.0.562 of 6See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
google.golang.org/grpc@v1.65.0
1.82.2
caddy/ingress:v0.2.118d1366fc0e9
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

17,413
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

1,705
celestia-appcelestia-labsVerified publisher0.5.01 of 3See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
google.golang.org/grpc@v1.68.0
1.82.2

Open the chart page →

1,073
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

3,087
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
google.golang.org/grpc@v1.33.1
1.82.2
library/traefik:2.5.47d0228d19042
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

53,052
openstack-cloud-controller-managercloud-provider-openstack2.36.51 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

505
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

551
cluster-api-operatorcluster-api-operator0.29.01 of 1See more

cluster-api-operator cluster-api-operator 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

47
immudbcodenotaryVerified publisher1.9.71 of 1See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
codenotary/immudb:1.9.77c85d7cc4f22
google.golang.org/grpc@v1.57.1
1.82.2

Open the chart page →

1,254
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

1,686
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
wait4x/wait4x:3.3.14dcd86307de1
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

9,208
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2

Open the chart page →

2,831
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
google.golang.org/grpc@v1.58.3
1.82.2
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

14,151
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

27,426
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
google.golang.org/grpc@v1.29.1
1.82.2
library/docker:20-dindaf96c680a7e1
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

5,690
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

1,987
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
google.golang.org/grpc@v1.67.1
1.82.2

Open the chart page →

1,767
flannelflannel0.28.91 of 2See more

flannel flannel 0.28.9

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

616
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
google.golang.org/grpc@v1.41.0
1.82.2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.82.2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.82.2

Open the chart page →

8,854

Container images carrying it

2,838 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
google.golang.org/grpc@v1.72.1
1.82.2
1
ghcr.io/cloudtty/cloudshell-operator:v0.8.9e43ad91f0684
google.golang.org/grpc@v1.54.1
1.82.2
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
google.golang.org/grpc@v1.65.0
1.82.2
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
google.golang.org/grpc@v1.65.0
1.82.2
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
google.golang.org/grpc@v1.65.0
1.82.2
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
google.golang.org/grpc@v1.72.0
1.82.2
1
ghcr.io/cohdi/composable-resource-operator:v0.2.23f45bf0a1bc0
google.golang.org/grpc@v1.80.0
1.82.2
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.64272d92a59e8a
google.golang.org/grpc@v1.78.0
1.82.2
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
google.golang.org/grpc@v1.27.0
1.82.2
1
ghcr.io/containeroo/agent-forge-operator:v1.1.48f6d8acd134a
google.golang.org/grpc@v1.82.1
1.82.2
1
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
google.golang.org/grpc@v1.79.3
1.82.2
1
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
google.golang.org/grpc@v1.82.1
1.82.2
1
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
google.golang.org/grpc@v1.79.3
1.82.2
1
ghcr.io/containers/kubernetes-mcp-server:v0.0.666d650f4bd6ac
google.golang.org/grpc@v1.81.1
1.82.2
1
ghcr.io/containers/nri-plugins/nri-memory-policy:v0.14.0531d21ec4ba2
google.golang.org/grpc@v1.81.1
1.82.2
1
ghcr.io/containers/nri-plugins/nri-memory-qos:v0.14.0c7c5c24ed894
google.golang.org/grpc@v1.81.1
1.82.2
1
ghcr.io/containers/nri-plugins/nri-memtierd:v0.14.09138314e12ba
google.golang.org/grpc@v1.81.1
1.82.2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.