StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,348
of 17,781 indexed, latest versions
Container images
2,837
deployed by those charts
Fix available
2 of 2
affected packages

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,348 of 17,781 indexed charts deploy, on 2,837 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,836
kubernetes-1.34apk1.34.11-r21.34.11-r81
OSV records
GHSA-2v4p-qf9q-27wjCGA-2675-68qh-x3xm
Also known as
CGA-2rc7-c9wv-rg9j, CGA-2v9r-g7hg-wjpv, CGA-5pg3-vg83-278x, CGA-6jwq-4523-qrxc, CGA-6mqf-6cj9-rr4r, CGA-8vf4-hpwm-ghh8, CGA-96jx-jhxg-fxww, CGA-fg8c-vc3x-88hf, CGA-g3hq-cpjp-v4p5, CGA-hx92-g8xp-6m86, CGA-wgvj-wq84-52gh
Trending
Rank 7 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,348 by stars
ChartLatestAffected imagesRadar Score
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
google.golang.org/grpc@v1.45.0
1.82.2
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
google.golang.org/grpc@v1.59.0
1.82.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.82.2
quay.io/thanos/thanos:v0.36.1e542959e1b36
google.golang.org/grpc@v1.63.2
1.82.2

Open the chart page →

17,693
rclonemglants2.3.41 of 1See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rclone/rclone:1.57.01e6eeabddc01
google.golang.org/grpc@v1.40.0
1.82.2

Open the chart page →

2,743
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.52 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
google.golang.org/grpc@v1.58.3
1.82.2
ghcr.io/mindburn-labs/helm-ai-kernel:v0.8.51de558875379
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

2,160
mocomoco0.27.01 of 1See more

moco moco 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cybozu-go/moco:0.37.032e7cab1bdd8
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

43
mongodb-kubernetesmongodb-helm-charts1.12.01 of 1See more

mongodb-kubernetes mongodb-helm-charts 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes:1.12.014d7c95972c5
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

38
mortalgpumortalgpuOfficialVerified publisher1.3.71 of 1See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

372
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

3,793
ndb-operatorndb-operatorOfficialVerified publisher0.5.101 of 2See more

ndb-operator ndb-operator 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnami/kube-rbac-proxydigest-pinnedb7e25b5c57d9
google.golang.org/grpc@v1.80.0
1.82.2

Open the chart page →

221
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.71 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

2,573
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
google.golang.org/grpc@v1.26.0
1.82.2
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
google.golang.org/grpc@v1.26.0
1.82.2
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
google.golang.org/grpc@v1.49.0
1.82.2
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
google.golang.org/grpc@v1.77.0
1.82.2

Open the chart page →

107,811
pacto-operatorpacto-operatorOfficialVerified publisher5.4.11 of 1See more

pacto-operator pacto-operator 5.4.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/trianalab/pacto/operator:5.4.12af8d2357c86
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

12
ipfs-clusterparadeum-teamVerified publisher0.0.192 of 2See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
google.golang.org/grpc@v1.46.0
1.82.2
ipfs/ipfs-cluster:1.0.21511f6d57994
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

3,757
psmdb-operatorpercona1.23.11 of 1See more

psmdb-operator percona 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.23.0feaff989e253
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

246
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
google.golang.org/grpc@v1.64.0
1.82.2

Open the chart page →

997
persespersesOfficialVerified publisher0.23.21 of 1See more

perses perses 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
persesdev/perses:v0.54.0a0e34ddaf9d7
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

133
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

2,866
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,346
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

1,942
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
google.golang.org/grpc@v1.30.0
1.82.2

Open the chart page →

12,125
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
google.golang.org/grpc@v1.72.0
1.82.2

Open the chart page →

13,521
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

859
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
google.golang.org/grpc@v1.76.0
1.82.2

Open the chart page →

1,311
sabliersablier-helm-chartsOfficialVerified publisher1.8.11 of 1See more

sablier sablier-helm-charts 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
sablierapp/sablier:1.16.1413704376656
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

147
seaweedfs-csi-driverseaweedfs-csi-driver0.2.387 of 7See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
chrislusf/seaweedfs-csi-driver:v1.4.32570605bc413c
google.golang.org/grpc@v1.85.0-dev
1.85.0-dev.0.20260825072537-93e31b48545e
chrislusf/seaweedfs-mount:v1.4.32c97e6f49e90c
google.golang.org/grpc@v1.85.0-dev
1.85.0-dev.0.20260825072537-93e31b48545e
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

5,270
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,046
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
google.golang.org/grpc@v1.52.3
1.82.2

Open the chart page →

1,663
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
google.golang.org/grpc@v1.28.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
google.golang.org/grpc@v1.28.1
1.82.2

Open the chart page →

12,502
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

1,055
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
google.golang.org/grpc@v1.67.1
1.82.2

Open the chart page →

576
sn-platformstreamnative1.11.443 of 9See more

sn-platform streamnative 1.11.44

3 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
google.golang.org/grpc@v1.45.0
1.82.2
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
google.golang.org/grpc@v1.44.0
1.82.2
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

15,477
feedbacksystemthm-mni-iiVerified publisher0.47.13 of 10See more

feedbacksystem thm-mni-ii 0.47.1

3 of the 10 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
google.golang.org/grpc@v1.60.1
1.82.2
library/docker:20.10.21-dind3153fa63f546
google.golang.org/grpc@v1.47.0
1.82.2
thmmniii/fbs-runner:v1.27.186105349c1a3
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

28,534
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

1,494
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

4,136
traefik-meshtraefikOfficialVerified publisher4.1.12 of 7See more

traefik-mesh traefik 4.1.1

2 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
google.golang.org/grpc@v1.27.1
1.82.2
library/traefik:v2.57d5a6ae66572
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

9,257
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
google.golang.org/grpc@v1.56.1
1.82.2
quay.io/argoproj/argocd:v2.8.6acaf37352569
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

1,619
valkey-operatorvalkeyVerified publisher0.6.01 of 1See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

134
vaultvaultVerified publisher1.22.03 of 4See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
google.golang.org/grpc@v1.80.0
1.82.2
hashicorp/vault:2.0.1755355002715
google.golang.org/grpc@v1.81.0
1.82.2
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

4,243
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

1,344
argo-cdwenerme10.9.02 of 3See more

argo-cd wenerme 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.82.2
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

3,218
daprwenerme1.18.45 of 5See more

dapr wenerme 1.18.4

5 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dapr/injector:1.18.45ac0db7ca106
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/operator:1.18.4af58fae3e7c9
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/placement:1.18.490d2293f42a3
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/scheduler:1.18.4239eac864320
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/sentry:1.18.405286fc952e7
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

175
wharf-helmwharf-helmOfficialVerified publisher3.2.62 of 5See more

wharf-helm wharf-helm 3.2.6

2 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
google.golang.org/grpc@v1.44.0
1.82.2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
google.golang.org/grpc@v1.44.0
1.82.2

Open the chart page →

10,032
buildkitdwiremindVerified publisher0.33.01 of 1See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

1,152
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

4,039
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

1,819
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

19,691
agentareaagentareaVerified publisher0.0.185 of 16See more

agentarea agentarea 0.0.18

5 of the 16 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-manager:latestefe23cef3727
google.golang.org/grpc@v1.82.1
1.82.2
openfga/openfga:v1.18.036097b960f66
google.golang.org/grpc@v1.81.1
1.82.2
oryd/kratos:v1.3.1fe2428f103a6
google.golang.org/grpc@v1.65.0
1.82.2
temporalio/auto-setup:1.29.15b3502a3b685
google.golang.org/grpc@v1.72.2
1.82.2
temporalio/ui:2.39.0b768f87f18b5
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

14,914
ais-operatoraistoreVerified publisher4.0.01 of 1See more

ais-operator aistore 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
aistorage/ais-operator:v4.0.01749d6b69b43
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

12
cloudflaredalekcVerified publisher1.8.11 of 1See more

cloudflared alekc 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

313

Container images carrying it

2,837 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
google.golang.org/grpc@v1.82.1
1.82.2
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.2
16
grafana/grafana:latestf772d434e8fa
google.golang.org/grpc@v1.81.1
1.82.2
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.2
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.2
12
ethpandaops/xatu:latest74d4cf2c436c
google.golang.org/grpc@v1.80.0
1.82.2
10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.2
10
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.2
8
quay.io/prometheus/alertmanager:latest:v0.34.0690c7b525f43
google.golang.org/grpc@v1.82.1
1.82.2
8
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.2
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.82.2
7
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/grpc@v1.44.0
1.82.2
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
google.golang.org/grpc@v1.69.2
1.82.2
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.2
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
google.golang.org/grpc@v1.63.2
1.82.2
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.2
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
google.golang.org/grpc@v1.72.1
1.82.2
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.2
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.2
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.82.2
7
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.82.2
6
ghcr.io/quenchworks/images/grafana3ccc56791c8a
google.golang.org/grpc@v1.82.1
1.82.2
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.82.2
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.82.2
6
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.82.2
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.82.2
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.2
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
google.golang.org/grpc@v1.72.1
1.82.2
6
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.2
6
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.82.2
5
keelhq/keel:latest73714afb4443
google.golang.org/grpc@v1.68.0
1.82.2
5
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.82.2
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
google.golang.org/grpc@v1.65.0
1.82.2
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.2
5
quay.io/prometheus/blackbox-exporter:latest:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.82.2
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.2
5
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.2
5
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.2
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.2
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.2
5
cloudflare/cloudflared:2026.8.3:latest51c9cefcb456
google.golang.org/grpc@v1.83.0
1.83.2
4
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.82.2
4
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.2
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.2
4
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.82.2
4
grafana/grafana:6.7.11ff3999e0fc0
google.golang.org/grpc@v1.23.1
1.82.2
4

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.