StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,310
of 17,803 indexed, latest versions
Container images
2,803
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,310 of 17,803 indexed charts deploy, on 2,803 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,803
OSV records
GHSA-2v4p-qf9q-27wj
Also known as
GO-2026-6443
Trending
Rank 10 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,310 by stars
ChartLatestAffected imagesRadar Score
element-callelement-callVerified publisher0.1.441 of 2See more

element-call element-call 0.1.44

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/element-hq/lk-jwt-service:0.6.0822f0c03a3bd
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

163
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

12,058
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

14,561
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

13,890
frp-operatorfrpVerified publisher1.0.41 of 1See more

frp-operator frp 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/frp-operator:v1.0.196b01d7e7025
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

382
frp-operatorfrp-operator1.9.01 of 1See more

frp-operator frp-operator 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/zufardhiyaulhaq/frp-operator:v0.11.0cd25ee354df2
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

542
intel-gpu-plugingeek-cookbookVerified publisher4.4.21 of 1See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
intel/intel-gpu-plugin:0.20.0143f0a45e174
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

1,745
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
google.golang.org/grpc@v1.39.0
1.82.2

Open the chart page →

7,611
multusgeek-cookbookVerified publisher3.5.21 of 3See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
google.golang.org/grpc@v1.23.0
1.82.2

Open the chart page →

4,915
smarter-device-managergeek-cookbookVerified publisher6.5.21 of 1See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
google.golang.org/grpc@v1.37.1
1.82.2

Open the chart page →

2,337
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
google.golang.org/grpc@v1.28.1
1.82.2

Open the chart page →

3,378
gitlab-runnergitlab-jh0.93.01 of 1See more

gitlab-runner gitlab-jh 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

280
etcdgroundhog2k1.1.121 of 2See more

etcd groundhog2k 1.1.12

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.7.13c66a5191d37
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

143
giteagroundhog2k0.16.31 of 1See more

gitea groundhog2k 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gitea/gitea:1.27.387a67ee09d3a
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

543
haproxyhaproxytechVerified publisher1.30.21 of 1See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:3.4.41fe3f201ebb5
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

584
hcloud-cloud-controller-managerhcloud1.37.01 of 1See more

hcloud-cloud-controller-manager hcloud 1.37.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

262
headscaleheadscaleVerified publisher1.0.193 of 3See more

headscale headscale 1.0.19

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
google.golang.org/grpc@v1.77.0
1.82.2
ghcr.io/juanfont/headscale:0.29.30e7f1c6e4ce6
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/juanfont/headscale:0.29.3-debug842cd94b754b
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

3,485
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.78.13086534361a1
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

3,089
hpe-cosi-driverhpe-storageVerified publisher2.0.02 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
google.golang.org/grpc@v1.79.3
1.82.2
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
1.82.2

Open the chart page →

1,696
inference-manager-engineinference-manager-engine1.46.01 of 1See more

inference-manager-engine inference-manager-engine 1.46.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

266
inlets-operatorinlets0.17.201 of 1See more

inlets-operator inlets 0.17.20

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/inlets/inlets-operator:0.17.2208265c006973
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

504
coreinstill-aiOfficialVerified publisher0.1.757 of 15See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
google.golang.org/grpc@v1.71.0
1.82.2
instill/artifact-backend:b28766ac4a393e601ed
google.golang.org/grpc@v1.61.0
1.82.2
instill/mgmt-backend:d0933d4ebe12f77a3f9
google.golang.org/grpc@v1.73.0
1.82.2
instill/model-backend:611f0f2e980125e5ba5
google.golang.org/grpc@v1.73.0
1.82.2
library/influxdb:2.3.0-alpined7f5dd5f70e2
google.golang.org/grpc@v1.44.0
1.82.2
openfga/openfga:v1.9.25e94966c11df
google.golang.org/grpc@v1.73.0
1.82.2
temporalio/admin-tools:1.28cfde8170c92f
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

31,447
intel-gpu-resource-driverintelVerified publisher0.7.01 of 1See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
intel/intel-gpu-resource-driver:v0.7.0e158711e32ce
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

565
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
google.golang.org/grpc@v1.76.0
1.82.2

Open the chart page →

1,188
kiali-operatorkiali2.32.01 of 1See more

kiali-operator kiali 2.32.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.32.096c5264d54ab
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

1,109
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

7,355
kuadrant-operatorkuadrantOfficialVerified publisher1.5.33 of 4See more

kuadrant-operator kuadrant 1.5.3

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kuadrant/dns-operator:v0.17.2da9ff8211856
google.golang.org/grpc@v1.82.1
1.82.2
quay.io/kuadrant/kuadrant-operator:v1.5.318ad777aeb7a
google.golang.org/grpc@v1.83.1
1.83.2
quay.io/kuadrant/limitador-operator:v0.18.49a9c533e58bb
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

303
kubearmorkubearmor1.7.43 of 4See more

kubearmor kubearmor 1.7.4

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubearmor/kubearmor:stablea08141311045
google.golang.org/grpc@v1.81.1
1.82.2
kubearmor/kubearmor-controller:latestf40f745222b9
google.golang.org/grpc@v1.82.1
1.82.2
kubearmor/kubearmor-relay-server:latest2dd4809d7c11
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

1,385
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
google.golang.org/grpc@v1.24.0
1.82.2
apache/skywalking-ui:8.1.067d50e4deff4
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

18,050
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
google.golang.org/grpc@v1.46.0
1.82.2

Open the chart page →

14,233
kubevpnkubevpn-charts2.11.91 of 1See more

kubevpn kubevpn-charts 2.11.9

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

1,683
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.03 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

3 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
google.golang.org/grpc@v1.57.0
1.82.2
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
google.golang.org/grpc@v1.57.0
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
google.golang.org/grpc@v1.57.0
1.82.2

Open the chart page →

54,520
prometheus-pingmesh-exporterkubservice-chartsVerified publisher1.1.11 of 1See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dongjiang1989/pingmesh-agent:latest355fa4be8e97
google.golang.org/grpc@v1.67.0
1.82.2

Open the chart page →

855
karporkusionstackVerified publisher0.7.62 of 3See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
google.golang.org/grpc@v1.51.0
1.82.2
quay.io/coreos/etcd:v3.5.11842975891182
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

3,326
kwokkwokOfficialVerified publisher0.3.01 of 1See more

kwok kwok 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

716
litellm-operatorlitellm-operatorVerified publisher1.1.21 of 1See more

litellm-operator litellm-operator 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/bbdsoftware/litellm-operator:1.1.2167a51113d90
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

284
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
google.golang.org/grpc@v1.50.1
1.82.2

Open the chart page →

3,693
vcluster-k8sloftVerified publisher0.0.0-ci.33 of 4See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
google.golang.org/grpc@v1.41.0
1.82.2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
google.golang.org/grpc@v1.49.0
1.82.2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
google.golang.org/grpc@v1.49.0
1.82.2

Open the chart page →

5,610
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

794
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.71 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
google.golang.org/grpc@v1.72.0
1.82.2

Open the chart page →

2,103
marmotmarmotOfficialVerified publisher1.5.11 of 2See more

marmot marmot 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/marmotdata/marmot:0.10.0bd2a49f86486
google.golang.org/grpc@v1.82.0
1.82.2

Open the chart page →

333
mattermost-rtcdmattermostVerified publisher1.4.11 of 1See more

mattermost-rtcd mattermost 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
mattermost/rtcd:latesta27058aaa53a
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

595
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
google.golang.org/grpc@v1.45.0
1.82.2
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
google.golang.org/grpc@v1.59.0
1.82.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.82.2
quay.io/thanos/thanos:v0.36.1e542959e1b36
google.golang.org/grpc@v1.63.2
1.82.2

Open the chart page →

17,879
rclonemglants2.3.41 of 1See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rclone/rclone:1.57.01e6eeabddc01
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

2,750
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.52 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
google.golang.org/grpc@v1.58.3
1.82.2
ghcr.io/mindburn-labs/helm-ai-kernel:v0.8.51de558875379
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

2,183
mocomoco0.27.01 of 1See more

moco moco 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cybozu-go/moco:0.37.032e7cab1bdd8
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

50
mongodb-kubernetesmongodb-helm-charts1.12.01 of 1See more

mongodb-kubernetes mongodb-helm-charts 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes:1.12.014d7c95972c5
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

79
mortalgpumortalgpuOfficialVerified publisher1.3.71 of 1See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

379
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

3,828
ndb-operatorndb-operatorOfficialVerified publisher0.5.111 of 1See more

ndb-operator ndb-operator 0.5.11

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/nutanix-cloud-native/ndb-operator/controller:v0.5.8b3927d7b72b9
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

32

Container images carrying it

2,803 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
1.82.2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
google.golang.org/grpc@v1.71.0
1.82.2
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
1.82.2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.