CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,299; of 17,797 indexed, latest versions
Container images: 2,795; deployed by those charts
Fix available: 1 of 1; affected package

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,299 of 17,797 indexed charts deploy, on 2,795 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/grpcgolang	v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	2,795

OSV records: GHSA-2v4p-qf9q-27wj
Also known as: GO-2026-6443
Trending: Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,299 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

2 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.83.1	1.83.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

655

argo-cdargo

10.9.2

2 See more

argo-cd argo 10.9.2

2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.82.2
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

—

prometheusprometheus-community

29.30.1

2 See more

prometheus prometheus-community 29.30.1

2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

—

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

163

vaulthashicorp

0.34.1

1 of 2 See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

549

harborharbor

1.19.2

5 of 8 See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	google.golang.org/grpc@v1.81.1	1.82.2
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	google.golang.org/grpc@v1.81.1	1.82.2
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.82.2
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.82.2
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	google.golang.org/grpc@v1.81.0	1.82.2

Open the chart page →

1,686

external-secretsexternal-secrets-operator

2.10.0

1 of 1 See more

external-secrets external-secrets-operator 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.10.0	814117b0fd6d	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

longhornlonghorn

1.12.1

2 of 3 See more

longhorn longhorn 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	google.golang.org/grpc@v1.83.0	1.83.2
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

604

ciliumcilium

1.20.2

2 of 3 See more

cilium cilium 1.20.2

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.2	2939231d0d3e	google.golang.org/grpc@v1.83.1	1.83.2
quay.io/cilium/operator-generic :v1.20.2	64d8798350e8	google.golang.org/grpc@v1.83.1	1.83.2

Open the chart page →

997

velerovmware-tanzu

12.2.0

1 of 1 See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

1,088

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	google.golang.org/grpc@v1.72.1	1.82.2
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	google.golang.org/grpc@v1.68.1	1.82.2
quay.io/metallb/speaker :v0.16.1	16561e96531e	google.golang.org/grpc@v1.72.1	1.82.2

Open the chart page →

2,151

cloudnative-pgcloudnative-pg

0.29.0

1 of 1 See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

124

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	google.golang.org/grpc@v1.79.3	1.82.2
rancher/shell :v0.8.1	f293af9c635f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,487

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

154

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

892

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	google.golang.org/grpc@v1.78.0	1.82.2
artifacthub/hub :v1.23.0	7d3a91c539dc	google.golang.org/grpc@v1.82.0	1.82.2
artifacthub/scanner :v1.23.0	2d8365601f0e	google.golang.org/grpc@v1.78.0	1.82.2
artifacthub/tracker :v1.23.0	5368d21a6e5c	google.golang.org/grpc@v1.75.1	1.82.2

Open the chart page →

10,861

kube-state-metricsprometheus-community

8.5.0

1 of 1 See more

kube-state-metrics prometheus-community 8.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.19.2	b8ec653c4423	google.golang.org/grpc@v1.83.0	1.83.2

Open the chart page →

1,161

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	google.golang.org/grpc@v1.77.0	1.82.2

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

576

argo-rolloutsargo

2.43.2

1 See more

argo-rollouts argo 2.43.2

1 container image this version deploys carries CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	google.golang.org/grpc@v1.80.0	1.82.2

Open the chart page →

—

argo-cdargo-cd-oci

10.9.2

2 See more

argo-cd argo-cd-oci 10.9.2

2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	google.golang.org/grpc@v1.79.1	1.82.2
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

—

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

302

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	google.golang.org/grpc@v1.58.3	1.82.2

Open the chart page →

8,146

mimir-distributedgrafana

6.2.0

4 of 6 See more

mimir-distributed grafana 6.2.0

4 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	google.golang.org/grpc@v1.82.1	1.82.2
grafana/rollout-operator :v0.38.1	32fe838b79dd	google.golang.org/grpc@v1.82.0	1.82.2
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2

Open the chart page →

4,543

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

725

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

238

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	google.golang.org/grpc@v1.72.1	1.82.2

Open the chart page →

1,773

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	google.golang.org/grpc@v1.79.2	1.82.2

Open the chart page →

30,529

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	google.golang.org/grpc@v1.79.3	1.82.2
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	google.golang.org/grpc@v1.79.3	1.82.2
falcosecurity/falcoctl :0.13.0	0eeb79adc580	google.golang.org/grpc@v1.80.0	1.82.2

Open the chart page →

5,428

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :3.5	979f12864a13	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

1,199

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	google.golang.org/grpc@v1.65.0	1.82.2

Open the chart page →

1,369

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/ceph-csi-operator :v1.0.4	c62933fd4083	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,454

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	google.golang.org/grpc@v1.72.2	1.82.2

Open the chart page →

976

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	google.golang.org/grpc@v1.83.1	1.83.2

Open the chart page →

432

victoria-metrics-k8s-stackvictoriametrics

0.92.1

3 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

3 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	google.golang.org/grpc@v1.81.1	1.82.2
victoriametrics/operator :v0.74.1	7310c4a80b94	google.golang.org/grpc@v1.82.1	1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

1,915

openebsopenebs

4.6.1

15 of 35 See more

openebs openebs 4.6.1

15 of the 35 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	google.golang.org/grpc@v1.71.0	1.82.2
grafana/loki :3.4.2	58a6c186ce78	google.golang.org/grpc@v1.70.0	1.82.2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	google.golang.org/grpc@v1.71.1	1.82.2
openebs/lvm-driver :1.10.1	41f73aba7f31	google.golang.org/grpc@v1.79.3	1.82.2
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	google.golang.org/grpc@v1.82.1	1.82.2
openebs/zfs-driver :2.11.1	16f1a74bb249	google.golang.org/grpc@v1.82.1	1.82.2
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	google.golang.org/grpc@v1.69.4	1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	google.golang.org/grpc@v1.69.0	1.82.2
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	google.golang.org/grpc@v1.69.2	1.82.2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	google.golang.org/grpc@v1.75.1	1.82.2
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	google.golang.org/grpc@v1.72.1	1.82.2
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	google.golang.org/grpc@v1.69.2	1.82.2
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	google.golang.org/grpc@v1.68.0	1.82.2

Open the chart page →

24,143

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	google.golang.org/grpc@v1.60.1	1.82.2

Open the chart page →

937

actions-runner-controlleractions-runner-controller

0.23.7

1 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	google.golang.org/grpc@v1.47.0	1.82.2

Open the chart page →

2,890

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	google.golang.org/grpc@v1.82.0	1.82.2

Open the chart page →

336

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	google.golang.org/grpc@v1.71.1	1.82.2

Open the chart page →

3,136

netdatanetdata

3.7.174

1 of 1 See more

netdata netdata 3.7.174

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.1	21970e176031	google.golang.org/grpc@v1.83.0	1.83.2

Open the chart page →

2,352

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	google.golang.org/grpc@v1.77.0	1.82.2

Open the chart page →

1,991

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	google.golang.org/grpc@v1.67.1	1.82.2
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	google.golang.org/grpc@v1.69.0	1.82.2

Open the chart page →

2,497

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	google.golang.org/grpc@v1.79.3	1.82.2

Open the chart page →

273

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	google.golang.org/grpc@v1.82.1	1.82.2
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

3,558

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	google.golang.org/grpc@v1.80.0	1.82.2
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	google.golang.org/grpc@v1.81.1	1.82.2
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	google.golang.org/grpc@v1.81.1	1.82.2

Open the chart page →

2,999

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	google.golang.org/grpc@v1.83.0	1.83.2
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	google.golang.org/grpc@v1.65.0	1.82.2

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	google.golang.org/grpc@v1.58.3	1.82.2

Open the chart page →

1,374

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	google.golang.org/grpc@v1.82.1	1.82.2

Open the chart page →

503

Container images carrying it

2,795 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/zncdatadev/listener-csi-driver :0.4.0	b69bed123b02	google.golang.org/grpc@v1.81.0	1.82.2	1
quay.io/zncdatadev/listener-operator :0.4.0	68b92dae8d75	google.golang.org/grpc@v1.81.0	1.82.2	1
quay.io/zncdatadev/nifi-operator :0.4.0	bb4e26ff5e2f	google.golang.org/grpc@v1.79.3	1.82.2	1
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	google.golang.org/grpc@v1.78.0	1.82.2	1
quay.io/zncdatadev/spark-k8s-operator :0.4.0	d3f2b10c4a6d	google.golang.org/grpc@v1.72.2	1.82.2	1
quay.io/zncdatadev/superset-operator :0.4.0	102e66e32218	google.golang.org/grpc@v1.79.3	1.82.2	1
quay.io/zncdatadev/trino-operator :0.4.0	4f516757aee3	google.golang.org/grpc@v1.79.3	1.82.2	1
quay.io/zncdatadev/zookeeper-operator :0.4.0	b4f33d89ac45	google.golang.org/grpc@v1.79.3	1.82.2	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	google.golang.org/grpc@v1.49.0	1.82.2	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	google.golang.org/grpc@v1.37.1	1.82.2	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	google.golang.org/grpc@v1.54.0	1.82.2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	google.golang.org/grpc@v1.79.1	1.82.2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	google.golang.org/grpc@v1.79.1	1.82.2	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.5.5-gitlab2	5b7636dfba3f	google.golang.org/grpc@v1.80.0	1.82.2	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	google.golang.org/grpc@v1.41.0	1.82.2	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :3.3.2	42dd426130a9	google.golang.org/grpc@v1.82.1	1.82.2	1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client :v0.6.1	9065cdd80035	google.golang.org/grpc@v1.68.1	1.82.2	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	google.golang.org/grpc@v1.56.2	1.82.2	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	google.golang.org/grpc@v1.78.0	1.82.2	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	google.golang.org/grpc@v1.78.0	1.82.2	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	google.golang.org/grpc@v1.82.1	1.82.2	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	google.golang.org/grpc@v1.73.0	1.82.2	1
registry.gitlab.com/xrow-public/velero-client/velero-client :1.4.2	03015f863a3e	google.golang.org/grpc@v1.81.1	1.82.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.4	be477ba317d8	google.golang.org/grpc@v1.82.1	1.82.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v0.5.6	dc23fb0d5624	google.golang.org/grpc@v1.83.0	1.83.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.2	dc700a37ecf4	google.golang.org/grpc@v1.83.1	1.83.2	1
registry.k8s.io/agent-sandbox/agent-sandbox-controller :v1.0.1	e1787f95cda4	google.golang.org/grpc@v1.83.1	1.83.2	1
registry.k8s.io/agent-sandbox/sandbox-router-go :v1.0.1	25b1a0939630	google.golang.org/grpc@v1.83.1	1.83.2	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	google.golang.org/grpc@v1.68.1	1.82.2	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	google.golang.org/grpc@v1.72.1	1.82.2	1
registry.k8s.io/capi-operator/cluster-api-operator :v0.29.0	465e72f8b06a	google.golang.org/grpc@v1.82.1	1.82.2	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	google.golang.org/grpc@v1.54.0	1.82.2	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	google.golang.org/grpc@v1.65.0	1.82.2	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	google.golang.org/grpc@v1.77.0	1.82.2	1
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	google.golang.org/grpc@v1.68.1	1.82.2	1
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	google.golang.org/grpc@v1.67.1	1.82.2	1
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	google.golang.org/grpc@v1.67.1	1.82.2	1
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	google.golang.org/grpc@v1.68.1	1.82.2	1
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	google.golang.org/grpc@v1.81.1	1.82.2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	google.golang.org/grpc@v1.56.3	1.82.2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	google.golang.org/grpc@v1.75.1	1.82.2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	google.golang.org/grpc@v1.56.3	1.82.2	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	google.golang.org/grpc@v1.47.0	1.82.2	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	google.golang.org/grpc@v1.71.1	1.82.2	1
registry.k8s.io/external-dns/external-dns :v0.22.0	5fdcaf7deb5c	google.golang.org/grpc@v1.83.1	1.83.2	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	google.golang.org/grpc@v1.40.0	1.82.2	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	google.golang.org/grpc@v1.47.0	1.82.2	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	google.golang.org/grpc@v1.58.3	1.82.2	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	google.golang.org/grpc@v1.47.0	1.82.2	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	google.golang.org/grpc@v1.56.3	1.82.2	1