StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,348
of 17,781 indexed, latest versions
Container images
2,837
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,348 of 17,781 indexed charts deploy, on 2,837 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,836
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,348 by stars
ChartLatestAffected imagesRadar Score
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
google.golang.org/grpc@v1.63.2
1.82.2

Open the chart page →

4,300
demoryhuseyinbabalOfficialVerified publisher0.7.01 of 1See more

demory huseyinbabal 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
huseyinbabal/demory:0.0.0-rc.20ae8eb4053c60
google.golang.org/grpc@v1.41.0
1.82.2

Open the chart page →

1,573
hybrid-csi-pluginhybrid-csi-plugin0.1.111 of 1See more

hybrid-csi-plugin hybrid-csi-plugin 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
google.golang.org/grpc@v1.77.0
1.82.2

Open the chart page →

373
idle-reaperidle-reaperVerified publisher0.1.41 of 1See more

idle-reaper idle-reaper 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/b100to/idle-reaper:0.1.447b4a0e091f0
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

134
webhook-broker-chartimytech0.2.41 of 1See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

1,246
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
google.golang.org/grpc@v1.72.2
1.82.2

Open the chart page →

2,416
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
google.golang.org/grpc@v1.36.0
1.82.2

Open the chart page →

10,701
istio-ratelimitistio-ratelimitVerified publisher0.0.51 of 2See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:4d2efd61ede09a75a84c
google.golang.org/grpc@v1.27.0
1.82.2

Open the chart page →

1,812
kubernetes-event-exporteritakurahVerified publisher0.2.31 of 1See more

kubernetes-event-exporter itakurah 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

1,135
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
google.golang.org/grpc@v1.46.2
1.82.2

Open the chart page →

9,318
job-manager-dispatcherjob-manager-dispatcher1.27.01 of 1See more

job-manager-dispatcher job-manager-dispatcher 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
google.golang.org/grpc@v1.67.0
1.82.2

Open the chart page →

472
job-manager-serverjob-manager-server1.27.01 of 1See more

job-manager-server job-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
google.golang.org/grpc@v1.67.0
1.82.2

Open the chart page →

750
hncjouveVerified publisher0.8.31 of 1See more

hnc jouve 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

1,071
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
google.golang.org/grpc@v1.63.2
1.82.2

Open the chart page →

1,273
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

3,369
junos-exporterjunos-exporter0.16.21 of 1See more

junos-exporter junos-exporter 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
czerwonk/junos_exporter:v0.16.2cb2279ae53d7
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

195
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3210 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

10 of the 17 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
google.golang.org/grpc@v1.78.0
1.82.2
grafana/grafana:12.3.12175aaa91c96
google.golang.org/grpc@v1.76.0
1.82.2
grafana/loki:3.6.73c8fd3570dd9
google.golang.org/grpc@v1.75.1
1.82.2
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.82.2
grafana/tempo:2.9.065a578975943
google.golang.org/grpc@v1.75.0
1.82.2
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.2
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
google.golang.org/grpc@v1.78.0
1.82.2
quay.io/prometheus/prometheus:v3.10.07571a304e67f
google.golang.org/grpc@v1.78.0
1.82.2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.2

Open the chart page →

15,418
kafka-canarykafka-canaryVerified publisher0.9.01 of 1See more

kafka-canary kafka-canary 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

12
karpenterkarpenter-provider-gcpVerified publisher0.6.01 of 1See more

karpenter karpenter-provider-gcp 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.6.0aab80cfd2c4e
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

113
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

5,789
keda-add-ons-httpkedacore0.15.03 of 3See more

keda-add-ons-http kedacore 0.15.0

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kedacore/http-add-on-interceptor:0.15.04e88e7808652
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/kedacore/http-add-on-operator:0.15.0d579b952ff0a
google.golang.org/grpc@v1.81.1
1.82.2
ghcr.io/kedacore/http-add-on-scaler:0.15.0f748178bc4af
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

410
mongodb-operatorkeiailabVerified publisher1.16.81 of 1See more

mongodb-operator keiailab 1.16.8

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/keiailab/mongodb-operator:v1.16.6f9b15f9ccef5
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

167
valkey-operatorkeiailabVerified publisher1.5.21 of 1See more

valkey-operator keiailab 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.249b5aef82877
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

113
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

507
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.77.1e71f39cefcd9
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

1,291
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.82.2
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
google.golang.org/grpc@v1.69.2
1.82.2

Open the chart page →

12,019
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

205
cert-managerkubeblocksVerified publisher1.17.22 of 4See more

cert-manager kubeblocks 1.17.2

2 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
google.golang.org/grpc@v1.69.2
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
google.golang.org/grpc@v1.69.2
1.82.2

Open the chart page →

2,900
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
google.golang.org/grpc@v1.58.3
1.82.2
kubesphere/kubectl:v1.27.1649b445b1b732
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

4,721
kubeboltkubeboltVerified publisher2.1.01 of 3See more

kubebolt kubebolt 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/clm-cloud-solutions/kubebolt/api:2.1.0546d074f0dfb
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

100
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

4,141
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

2,419
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

496
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

9,858
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
google.golang.org/grpc@v1.49.0
1.82.2

Open the chart page →

3,274
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
google.golang.org/grpc@v1.72.1
1.82.2

Open the chart page →

714
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
google.golang.org/grpc@v1.69.2
1.82.2

Open the chart page →

902
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
google.golang.org/grpc@v1.48.0
1.82.2

Open the chart page →

2,489
mesherykubesphere-stable0.5.011 of 13See more

meshery kubesphere-stable 0.5.0

11 of the 13 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
google.golang.org/grpc@v1.72.0
1.82.2
layer5/meshery-app-mesh:stable-latest77d59943b3d6
google.golang.org/grpc@v1.47.0
1.82.2
layer5/meshery-consul:stable-latest25a4cc38abcd
google.golang.org/grpc@v1.58.3
1.82.2
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
google.golang.org/grpc@v1.29.1
1.82.2
layer5/meshery-istio:stable-latestfde47c141ec6
google.golang.org/grpc@v1.60.1
1.82.2
layer5/meshery-kuma:stable-latest9d25f029a8a2
google.golang.org/grpc@v1.56.3
1.82.2
layer5/meshery-linkerd:stable-latestb99c73bac1f5
google.golang.org/grpc@v1.60.1
1.82.2
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
google.golang.org/grpc@v1.54.0
1.82.2
layer5/meshery-nsm:stable-latestebd6a8faf21f
google.golang.org/grpc@v1.34.0
1.82.2
layer5/meshery-osm:stable-latestec898e5786c6
google.golang.org/grpc@v1.52.0
1.82.2
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

24,690
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
google.golang.org/grpc@v1.23.0
1.82.2

Open the chart page →

2,603
kubetailkubetailVerified publisher0.26.03 of 3See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
google.golang.org/grpc@v1.72.0
1.82.2
ghcr.io/kubetail-org/kubetail-cluster-api:0.8.28e6acd0da9ac
google.golang.org/grpc@v1.79.3
1.82.2
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

1,850
kube-vip-cloud-providerkube-vip0.2.101 of 1See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
google.golang.org/grpc@v1.65.0
1.82.2

Open the chart page →

791
admission-controllerkubewardenVerified publisher6.0.21 of 2See more

admission-controller kubewarden 6.0.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/kubewarden/adm-controller/controller:v1.37.2028fa9150ae2
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

51
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.14 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

4 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
google.golang.org/grpc@v1.56.0
1.82.2
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
google.golang.org/grpc@v1.57.0
1.82.2
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
google.golang.org/grpc@v1.57.0
1.82.2
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
google.golang.org/grpc@v1.57.0
1.82.2

Open the chart page →

7,087
kubeservice-cpupools-controllerkubservice-chartsVerified publisher0.1.11 of 2See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

3,118

Container images carrying it

2,837 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.82.2
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2
16
grafana/grafana:latestf772d434e8fa
google.golang.org/grpc@v1.81.1
1.82.2
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.2
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.2
12
ethpandaops/xatu:latest74d4cf2c436c
google.golang.org/grpc@v1.80.0
1.82.2
10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.2
10
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.2
8
quay.io/prometheus/alertmanager:latest:v0.34.0690c7b525f43
google.golang.org/grpc@v1.82.1
1.82.2
8
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.2
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.82.2
7
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.82.2
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
google.golang.org/grpc@v1.69.2
1.82.2
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.2
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
google.golang.org/grpc@v1.63.2
1.82.2
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.2
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.82.2
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.82.2
7
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.82.2
6
ghcr.io/quenchworks/images/grafana3ccc56791c8a
google.golang.org/grpc@v1.82.1
1.82.2
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.82.2
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.82.2
6
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.82.2
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.82.2
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.2
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
google.golang.org/grpc@v1.72.1
1.82.2
6
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.2
6
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.82.2
5
keelhq/keel:latest73714afb4443
google.golang.org/grpc@v1.68.0
1.82.2
5
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.82.2
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
google.golang.org/grpc@v1.65.0
1.82.2
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2
5
quay.io/prometheus/blackbox-exporter:latest:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.82.2
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.2
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.2
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.2
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.2
5
cloudflare/cloudflared:2026.8.3:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.2
4
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.82.2
4
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
4
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.82.2
4
grafana/grafana:6.7.11ff3999e0fc0
google.golang.org/grpc@v1.23.1
1.82.2
4

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.