StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,310
of 17,803 indexed, latest versions
Container images
2,803
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,310 of 17,803 indexed charts deploy, on 2,803 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,803
OSV records
GHSA-2v4p-qf9q-27wj
Also known as
GO-2026-6443
Trending
Rank 10 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,310 by stars
ChartLatestAffected imagesRadar Score
exa-csiexa-csi-driver0.2.0-rev26 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
google.golang.org/grpc@v1.27.1
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.5.19dcd469f02bb
google.golang.org/grpc@v1.60.1
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
google.golang.org/grpc@v1.60.1
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

7,092
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
google.golang.org/grpc@v1.75.1
1.82.2

Open the chart page →

218
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
google.golang.org/grpc@v1.56.3
1.82.2
grafana/loki-canary:2.9.6549a40203e97
google.golang.org/grpc@v1.56.3
1.82.2
grafana/promtail:3.5.165bfae480b57
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

5,831
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

7,730
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
factly/mande-server:0.34.1384d384310ef
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

4,786
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
google.golang.org/grpc@v1.76.0
1.82.2

Open the chart page →

2,882
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
google.golang.org/grpc@v1.55.0
1.82.2

Open the chart page →

1,743
stackdriver-metrics-adapterfairwinds-incubator0.3.01 of 1See more

stackdriver-metrics-adapter fairwinds-incubator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

1,765
fairwinds-insightsfairwinds-stableVerified publisher10.1.103 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

3 of the 13 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
google.golang.org/grpc@v1.79.3
1.82.2
temporalio/server:1.31.2b5ecdb8282be
google.golang.org/grpc@v1.79.3
1.82.2
temporalio/ui:2.52.0fc47cd8202c9
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

3,829
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
google.golang.org/grpc@v1.67.1
1.82.2

Open the chart page →

502
aspmrelayfalcon-helmVerified publisher1.1.01 of 1See more

aspmrelay falcon-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/bionicstork/bionicstork/relay:latest13290b9a64af
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

142
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.29 of 18See more

farm-observability farm-observability 0.27.2

9 of the 18 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
google.golang.org/grpc@v1.80.0
1.82.2
grafana/alloy:v1.12.2f94b1c82957a
google.golang.org/grpc@v1.76.0
1.82.2
grafana/grafana:13.0.1-security-012d1f9ae67c17
google.golang.org/grpc@v1.79.3
1.82.2
grafana/loki:3.6.73c8fd3570dd9
google.golang.org/grpc@v1.75.1
1.82.2
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.82.2
grafana/pyroscope:2.0.3cfd00e7f73c2
google.golang.org/grpc@v1.80.0
1.82.2
grafana/tempo:2.9.065a578975943
google.golang.org/grpc@v1.75.0
1.82.2
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

13,583
featureformfeatureformVerified publisher0.15.101 of 12See more

featureform featureform 0.15.10

1 of the 12 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

112
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

13,529
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

14,719
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
google.golang.org/grpc@v1.75.0
1.82.2

Open the chart page →

764
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
google.golang.org/grpc@v1.39.0
1.82.2

Open the chart page →

3,320
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
google.golang.org/grpc@v1.30.0
1.82.2

Open the chart page →

3,373
podinfoflagger6.1.41 of 1See more

podinfo flagger 6.1.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

2,815
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
google.golang.org/grpc@v1.55.0
1.82.2

Open the chart page →

6,198
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

5,534
mission-controlflanksourceVerified publisher0.1.3381 of 8See more

mission-control flanksource 0.1.338

1 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
google.golang.org/grpc@v1.74.2
1.82.2

Open the chart page →

9,006
mission-control-tenantflanksourceVerified publisher1.0.923 of 3See more

mission-control-tenant flanksource 1.0.92

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
google.golang.org/grpc@v1.40.0
1.82.2
rancher/k3s:v1.28.2-k3s18c2599ecfca8
google.golang.org/grpc@v1.57.0
1.82.2
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
google.golang.org/grpc@v1.55.0
1.82.2

Open the chart page →

5,724
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

3,526
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
google.golang.org/grpc@v1.72.1
1.82.2

Open the chart page →

2,448
flyte-devboxflyte0.1.07 of 13See more

flyte-devbox flyte 0.1.0

7 of the 13 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
google.golang.org/grpc@v1.71.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

4,671
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

4,672
free5gc-chffree5gc-chfVerified publisher0.1.31 of 1See more

free5gc-chf free5gc-chf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
free5gc/chf:v3.4.3e2a4dd98a4ed
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

1,004
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

1,256
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
google.golang.org/grpc@v1.68.0
1.82.2

Open the chart page →

1,381
generic-device-plugingabe565Verified publisher0.1.31 of 1See more

generic-device-plugin gabe565 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:latestdc192e164c69
google.golang.org/grpc@v1.81.0
1.82.2

Open the chart page →

260
smarter-device-managergabe565Verified publisher0.5.21 of 1See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/grpc@v1.49.0
1.82.2

Open the chart page →

1,226
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

801
galoygaloymoney0.34.73 of 24See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.82.2
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.82.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.82.2

Open the chart page →

8,730
galoy-depsgaloymoney0.10.203 of 9See more

galoy-deps galoymoney 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.82.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

12,010
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

2,162
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.82.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

5,336
galoygaloymoney20.34.73 of 24See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/grpc@v1.59.0
1.82.2
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
1.82.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
1.82.2

Open the chart page →

8,730
galoy-depsgaloymoney20.10.203 of 9See more

galoy-deps galoymoney2 0.10.20

3 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
1.82.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

12,010
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

2,162
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
google.golang.org/grpc@v1.66.0
1.82.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

5,336
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

383
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

3,243
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

7,478
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
google.golang.org/grpc@v1.56.3
1.82.2

Open the chart page →

1,369
clickhouse-movoorgeneral-helm-chartsVerified publisher0.0.11 of 1See more

clickhouse-movoor general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ethpandaops/clickhouse-movoor:latestc0e6cc6542c1
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

143
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

570
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.82.2

Open the chart page →

4,559
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
google.golang.org/grpc@v1.39.0
1.82.2
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
google.golang.org/grpc@v1.39.0
1.82.2

Open the chart page →

16,880
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.2
litestream/litestream:0.3c5a1e1b01916
google.golang.org/grpc@v1.57.0
1.82.2

Open the chart page →

9,136

Container images carrying it

2,803 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/thanos/thanos:v0.36.1e542959e1b36
google.golang.org/grpc@v1.63.2
1.82.2
1
quay.io/uswitch/kiam:v4.0be3a5846922d
google.golang.org/grpc@v1.34.0
1.82.2
1
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
google.golang.org/grpc@v1.72.2
1.82.2
1
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
google.golang.org/grpc@v1.72.2
1.82.2
1
quay.io/zncdatadev/hive-operator:0.4.0d66ba9149c22
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/listener-csi-driver:0.4.0b69bed123b02
google.golang.org/grpc@v1.81.0
1.82.2
1
quay.io/zncdatadev/listener-operator:0.4.068b92dae8d75
google.golang.org/grpc@v1.81.0
1.82.2
1
quay.io/zncdatadev/nifi-operator:0.4.0bb4e26ff5e2f
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
google.golang.org/grpc@v1.78.0
1.82.2
1
quay.io/zncdatadev/spark-k8s-operator:0.4.0d3f2b10c4a6d
google.golang.org/grpc@v1.72.2
1.82.2
1
quay.io/zncdatadev/superset-operator:0.4.0102e66e32218
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/trino-operator:0.4.04f516757aee3
google.golang.org/grpc@v1.79.3
1.82.2
1
quay.io/zncdatadev/zookeeper-operator:0.4.0b4f33d89ac45
google.golang.org/grpc@v1.79.3
1.82.2
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/grpc@v1.49.0
1.82.2
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
google.golang.org/grpc@v1.37.1
1.82.2
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
google.golang.org/grpc@v1.54.0
1.82.2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
google.golang.org/grpc@v1.79.1
1.82.2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
google.golang.org/grpc@v1.79.1
1.82.2
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
google.golang.org/grpc@v1.80.0
1.82.2
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
google.golang.org/grpc@v1.41.0
1.82.2
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
google.golang.org/grpc@v1.68.1
1.82.2
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
google.golang.org/grpc@v1.56.2
1.82.2
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
google.golang.org/grpc@v1.78.0
1.82.2
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
google.golang.org/grpc@v1.78.0
1.82.2
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
google.golang.org/grpc@v1.82.1
1.82.2
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
google.golang.org/grpc@v1.73.0
1.82.2
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
google.golang.org/grpc@v1.81.1
1.82.2
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
google.golang.org/grpc@v1.82.1
1.82.2
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.6dc23fb0d5624
google.golang.org/grpc@v1.83.0
1.83.2
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v1.0.2dc700a37ecf4
google.golang.org/grpc@v1.83.1
1.83.2
1
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v1.0.1e1787f95cda4
google.golang.org/grpc@v1.83.1
1.83.2
1
registry.k8s.io/agent-sandbox/sandbox-router-go:v1.0.125b1a0939630
google.golang.org/grpc@v1.83.1
1.83.2
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
1.82.2
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
google.golang.org/grpc@v1.72.1
1.82.2
1
registry.k8s.io/capi-operator/cluster-api-operator:v0.29.0465e72f8b06a
google.golang.org/grpc@v1.82.1
1.82.2
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/grpc@v1.54.0
1.82.2
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
1.82.2
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
google.golang.org/grpc@v1.77.0
1.82.2
1
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
google.golang.org/grpc@v1.68.1
1.82.2
1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
1.82.2
1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
1.82.2
1
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
google.golang.org/grpc@v1.68.1
1.82.2
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
google.golang.org/grpc@v1.81.1
1.82.2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
google.golang.org/grpc@v1.56.3
1.82.2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
google.golang.org/grpc@v1.75.1
1.82.2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
google.golang.org/grpc@v1.56.3
1.82.2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.