StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,295
of 17,790 indexed, latest versions
Container images
2,792
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,295 of 17,790 indexed charts deploy, on 2,792 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,791
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,295 by stars
ChartLatestAffected imagesRadar Score
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
library/influxdb:2.8571eb4514977
google.golang.org/grpc@v1.64.1
1.82.2

Open the chart page →

5,519
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

6,363
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

3,622
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
google.golang.org/grpc@v1.60.1
1.82.2

Open the chart page →

1,196
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

3,417
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

1,615
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,663
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,278
testkube-operatorkubeshop2.1.1541 of 3See more

testkube-operator kubeshop 2.1.154

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,003
testkube-runnerkubeshop2.13.21 of 1See more

testkube-runner kubeshop 2.13.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.244166c28422f
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

365
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,554
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
google.golang.org/grpc@v1.69.2
1.82.2

Open the chart page →

902
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
google.golang.org/grpc@v1.26.0
1.82.2

Open the chart page →

2,518
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
google.golang.org/grpc@v1.21.1
1.82.2
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
google.golang.org/grpc@v1.24.0
1.82.2
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
google.golang.org/grpc@v1.24.0
1.82.2

Open the chart page →

38,135
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/grpc@v1.43.0
1.82.2
goharbor/harbor-core:v2.5.386bf3031f4a7
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
google.golang.org/grpc@v1.41.0
1.82.2
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
google.golang.org/grpc@v1.27.1
1.82.2
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
google.golang.org/grpc@v1.27.1
1.82.2
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
google.golang.org/grpc@v1.43.0
1.82.2
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
google.golang.org/grpc@v1.43.0
1.82.2
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

8,555
cni-hostnickubesphere-stable0.1.01 of 1See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

2,437
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
google.golang.org/grpc@v1.40.0
1.82.2
gocrane/craned:v0.5.1a1400909118c
google.golang.org/grpc@v1.43.0
1.82.2

Open the chart page →

8,887
csi-qingcloudkubesphere-stable1.4.06 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-qingcloud:v1.4.00766163dc046
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

12,404
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2

Open the chart page →

2,824
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
google.golang.org/grpc@v1.53.0
1.82.2
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
google.golang.org/grpc@v1.54.0
1.82.2
grafana/grafana:9.5.239c849cebccc
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

18,394
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

1,308
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
google.golang.org/grpc@v1.42.0
1.82.2

Open the chart page →

4,098
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
google.golang.org/grpc@v1.61.0
1.82.2

Open the chart page →

5,759
iomeshkubesphere-stable1.1.017 of 25See more

iomesh kubesphere-stable 1.1.0

17 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-driver:v2.7.25d3f9bf9240b
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
google.golang.org/grpc@v1.40.0
1.82.2
iomesh/csi-provisioner:v3.0.0f9508460b273
google.golang.org/grpc@v1.38.0
1.82.2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
google.golang.org/grpc@v1.50.1
1.82.2
iomesh/deck:v0.1.0a31e26b6ae22
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/livenessprobe:v2.8.0560f01510f99
google.golang.org/grpc@v1.48.0
1.82.2
iomesh/localpv-manager:v0.2.0f13deacac3f4
google.golang.org/grpc@v1.50.0
1.82.2
iomesh/node-disk-manager:1.8.0002c4b92fd34
google.golang.org/grpc@v1.27.1
1.82.2
iomesh/operator:v1.1.060081c9b2f52
google.golang.org/grpc@v1.41.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.017 of 25See more

IOMesh kubesphere-stable 1.2.0

17 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-driver:v2.8.01a151f602451
google.golang.org/grpc@v1.41.0
1.82.2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
google.golang.org/grpc@v1.40.0
1.82.2
iomesh/csi-provisioner:v3.0.0f9508460b273
google.golang.org/grpc@v1.38.0
1.82.2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
google.golang.org/grpc@v1.50.1
1.82.2
iomesh/deck:v0.2.0282d6c419ed3
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
google.golang.org/grpc@v1.60.0
1.82.2
iomesh/livenessprobe:v2.8.0560f01510f99
google.golang.org/grpc@v1.48.0
1.82.2
iomesh/localpv-manager:v0.2.0f13deacac3f4
google.golang.org/grpc@v1.50.0
1.82.2
iomesh/node-disk-manager:1.8.0-2292ad270082e
google.golang.org/grpc@v1.27.1
1.82.2
iomesh/operator:v1.2.0ba4dd6be7e59
google.golang.org/grpc@v1.41.0
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

46,507
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
google.golang.org/grpc@v1.27.1
1.82.2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
google.golang.org/grpc@v1.35.0
1.82.2

Open the chart page →

14,368
aws-fsx-csi-driverkubesphere-testVerified publisher0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
google.golang.org/grpc@v1.23.1
1.82.2

Open the chart page →

1,588
cni-hostnickubesphere-testVerified publisher0.1.01 of 1See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

2,437
csi-neonsankubesphere-testVerified publisher1.3.06 of 6See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-neonsan:v1.2.21fa83d45417f
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

18,482
csi-qingcloudkubesphere-testVerified publisher1.4.06 of 6See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-qingcloud:v1.4.00766163dc046
google.golang.org/grpc@v1.26.0
1.82.2
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/grpc@v1.36.0
1.82.2
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/grpc@v1.34.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

12,404
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2

Open the chart page →

2,824
minio-gatewaykubesphere-testVerified publisher0.1.01 of 1See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

1,069
online-boutiquekubesphere-testVerified publisher0.1.08 of 11See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
google.golang.org/grpc@v1.34.0
1.82.2
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
google.golang.org/grpc@v1.22.0
1.82.2
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
google.golang.org/grpc@v1.34.0
1.82.2
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
google.golang.org/grpc@v1.22.0
1.82.2
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
google.golang.org/grpc@v1.34.0
1.82.2
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
google.golang.org/grpc@v1.22.0
1.82.2
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
google.golang.org/grpc@v1.34.0
1.82.2
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
google.golang.org/grpc@v1.22.0
1.82.2

Open the chart page →

26,019
openelbkubesphere-testVerified publisher0.2.41 of 2See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
google.golang.org/grpc@v1.26.0
1.82.2

Open the chart page →

4,329
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
google.golang.org/grpc@v1.26.0
1.82.2

Open the chart page →

2,784
kubestellar-consolekubestellar-consoleVerified publisher0.3.412 of 2See more

kubestellar-console kubestellar-console 0.3.41

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
google.golang.org/grpc@v1.68.0
1.82.2
ghcr.io/kubestellar/console:v0.3.41457cfc94b4da
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

4,440
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

4,763
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

1,435
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
google.golang.org/grpc@v1.67.1
1.82.2
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
google.golang.org/grpc@v1.65.0
1.82.2
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

20,299
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
google.golang.org/grpc@v1.49.0
1.82.2

Open the chart page →

3,460
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
google.golang.org/grpc@v1.69.0
1.82.2

Open the chart page →

6,879
dynatrace-operatorkvalitetsitVerified publisher1.3.01 of 1See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

1,313
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

1,242
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
google.golang.org/grpc@v1.23.0
1.82.2

Open the chart page →

16,537
metadockvalitetsitVerified publisher0.0.71 of 2See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kvalitetsit/metadoc-web:mainf57e7553f5bd
google.golang.org/grpc@v1.37.0
1.82.2

Open the chart page →

4,026
myra-cert-manager-webhookkvalitetsitVerified publisher1.2.11 of 1See more

myra-cert-manager-webhook kvalitetsit 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kvalitetsit/myra-cert-manager-webhook:1.2.184ab59a1434e
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

163
openidkvalitetsitVerified publisher1.7.21 of 2See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.14.368336da945bd
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

586
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
google.golang.org/grpc@v1.27.0
1.82.2

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
google.golang.org/grpc@v1.27.0
1.82.2

Open the chart page →

26,371

Container images carrying it

2,792 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/gravitational/tbot-distroless:18.11.04ba5ace31fea
google.golang.org/grpc@v1.82.1
1.82.2
2
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.82.2
2
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.82.2
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
google.golang.org/grpc@v1.65.0
1.82.2
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
google.golang.org/grpc@v1.72.2
1.82.2
2
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
google.golang.org/grpc@v1.80.0
1.82.2
2
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
google.golang.org/grpc@v1.72.1
1.82.2
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
google.golang.org/grpc@v1.47.0
1.82.2
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
google.golang.org/grpc@v1.47.0
1.82.2
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
google.golang.org/grpc@v1.65.0
1.82.2
2
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
google.golang.org/grpc@v1.80.0
1.82.2
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
google.golang.org/grpc@v1.81.0
1.82.2
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
google.golang.org/grpc@v1.48.0
1.82.2
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.2
2
quay.io/coreos/etcd:v3.7.13c66a5191d37
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.2
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
google.golang.org/grpc@v1.26.0
1.82.2
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
google.golang.org/grpc@v1.45.0
1.82.2
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
google.golang.org/grpc@v1.44.0
1.82.2
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
google.golang.org/grpc@v1.45.0
1.82.2
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
google.golang.org/grpc@v1.44.0
1.82.2
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
google.golang.org/grpc@v1.69.2
1.82.2
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/grpc@v1.60.1
1.82.2
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
google.golang.org/grpc@v1.58.3
1.82.2
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.2
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
google.golang.org/grpc@v1.64.1
1.82.2
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.2
2
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
google.golang.org/grpc@v1.58.3
1.82.2
2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
google.golang.org/grpc@v1.69.2
1.82.2
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.2
2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/grpc@v1.60.1
1.82.2
2
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
google.golang.org/grpc@v1.64.1
1.82.2
2
quay.io/kuadrant/dns-operator:v0.17.2da9ff8211856
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/kuadrant/limitador-operator:v0.18.49a9c533e58bb
google.golang.org/grpc@v1.83.1
1.83.2
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
google.golang.org/grpc@v1.78.0
1.82.2
2
quay.io/kubevirt/kubevirt-csi-driver:latest7b31b21b3f1e
google.golang.org/grpc@v1.80.0
1.82.2
2
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.82.2
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.82.2
2
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.82.2
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
google.golang.org/grpc@v1.58.0
1.82.2
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
google.golang.org/grpc@v1.50.1
1.82.2
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
google.golang.org/grpc@v1.58.0
1.82.2
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
google.golang.org/grpc@v1.54.0
1.82.2
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
google.golang.org/grpc@v1.52.3
1.82.2
2
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
google.golang.org/grpc@v1.27.0
1.82.2
2
quay.io/open-cluster-management/argocd-pull-integration:0.29.006b4b9b3c3ed
google.golang.org/grpc@v1.82.1
1.82.2
2
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
google.golang.org/grpc@v1.81.0
1.82.2
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.