CVE-2026-97031

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,306; of 18,108 indexed, latest versions
Container images: 6,104; deployed by those charts
Fix available: 1 of 2; affected packages

Reject malformed ECH outer extension references in crypto/tls

Carried by container images the latest versions of 5,306 of 18,108 indexed charts deploy, on 6,104 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,104
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-97031 GO-2026-6607
Trending: Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,306 by stars

Chart

Latest

Affected images

Radar Score

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.26.9

Open the chart page →

2,062

trust-managercert-manager

0.25.0

2 of 2 See more

trust-manager cert-manager 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/jetstack/trust-manager :v0.25.0	0521921c2a46	stdlib@go1.27.1	1.26.9
quay.io/jetstack/trust-pkg-debian-trixie :20250419.2	3093d4f6634f	stdlib@go1.27.1	1.26.9

Open the chart page →

346

gatekeepergatekeeper

3.23.1

2 of 3 See more

gatekeeper gatekeeper 3.23.1

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	stdlib@go1.26.6	1.26.9
openpolicyagent/gatekeeper-crds :v3.23.1	ab3620e6bec9	stdlib@go1.26.6	1.26.9

Open the chart page →

955

snapshot-controllerpiraeus-charts

5.3.0

1 of 1 See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.26.9

Open the chart page →

580

rocketchatrocketchat-server

7.0.2

6 of 12 See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.26.9
library/nats :2.12-alpine	b270f5e24283	stdlib@go1.25.12	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.26.9
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.9
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.26.9

Open the chart page →

16,626

zammadzammad

19.1.4

1 of 5 See more

zammad zammad 19.1.4

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.26.9

Open the chart page →

6,270

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.26.9
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.26.9

Open the chart page →

4,228

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.26.9

Open the chart page →

2,877

k10kasten

9.0.7

22 of 23 See more

k10 kasten 9.0.7

22 of the 23 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/aggregatedapis :9.0.7	9a189cf0aff8	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/auth :9.0.7	16efe4c210e0	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/bloblifecyclemanager :9.0.7	83f7c06dc4d1	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/catalog :9.0.7	0ea3df63f5b6	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/configmap-reload :9.0.7	b9b8a1b65f7a	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/controllermanager :9.0.7	a01f872d8e0c	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/crypto :9.0.7	6c6b6d9af1d4	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/dashboardbff :9.0.7	1a8b1ccfc402	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/events :9.0.7	e7beb79514f9	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/executor :9.0.7	4fe7419cecd9	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/garbagecollector :9.0.7	4dfd4a2dae57	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/gateway :9.0.7	6f14d4acd0c5	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/jobs :9.0.7	a093d080604f	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/kanister :9.0.7	03d05d517803	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/kanister-tools :9.0.7	9778af80396e	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/logging :9.0.7	e41747f4a3c3	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/metering :9.0.7	209e1aaee219	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/prometheus :9.0.7	93bdb766db72	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/repositories :9.0.7	5c5435aea185	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/state :9.0.7	c4bfd7feb74a	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/upgrade :9.0.7	b2447f8bc553	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/vbrintegrationapi :9.0.7	85e432303eff	stdlib@go1.27.1	1.26.9

Open the chart page →

6,674

mariadb-operatormariadb-operator

26.10.1

1 of 1 See more

mariadb-operator mariadb-operator 26.10.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.10.1	37714fb240a5	stdlib@go1.27.1	1.26.9

Open the chart page →

545

podinfopodinfo

6.15.0

1 of 1 See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/stefanprodan/podinfo :6.15.0	ec73780a8425	stdlib@go1.27.0	1.26.9

Open the chart page →

506

ceph-csi-cephfsceph-csi

3.18.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.18.1	a8c0653a9565	stdlib@go1.26.4	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9

Open the chart page →

2,853

ceph-csi-rbdceph-csi

3.18.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.18.1	a8c0653a9565	stdlib@go1.26.4	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9

Open the chart page →

2,853

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.26.9
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	stdlib@go1.25.11	1.26.9
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	stdlib@go1.25.11	1.26.9
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	stdlib@go1.25.11	1.26.9

Open the chart page →

8,811

rabbitmqcloudpirates-rabbitmq

0.21.31

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.31

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	8dd6e3570dda	stdlib@go1.22.2	1.26.9

Open the chart page →

1,332

csi-driver-nfscsi-driver-nfs

4.13.5

6 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.5

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/nfsplugin :v4.13.5	19162ec4fb3f	stdlib@go1.26.5	1.26.9

Open the chart page →

4,439

portainerportainer

245.2.0

1 of 1 See more

portainer portainer 245.2.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.2	03f94a406496	stdlib@go1.26.6	1.26.9

Open the chart page →

550

atlantisatlantis

6.16.1

1 of 1 See more

atlantis atlantis 6.16.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.48.1	42bde40e38ec	stdlib@go1.26.6	1.26.9

Open the chart page →

859

codercoder-v2

2.38.0

1 of 1 See more

coder coder-v2 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.38.0	38a4cfc548b0	stdlib@go1.26.4	1.26.9

Open the chart page →

372

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.26.9

Open the chart page →

3,344

milvusmilvus

4.0.31

3 of 5 See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	stdlib@go1.18.2	1.26.9
milvusdb/milvus :v2.2.13	a3a55e1c1497	stdlib@go1.18.3	1.26.9
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	stdlib@go1.16.15	1.26.9

Open the chart page →

177,175

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.25.5	1.26.9

Open the chart page →

3,179

victoria-metrics-operatorvictoriametrics

0.68.1

1 of 1 See more

victoria-metrics-operator victoriametrics 0.68.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.75.0	78da26b41a81	stdlib@go1.27.1	1.26.9

Open the chart page →

205

cockroachdbcockroachdb

22.0.4

1 of 3 See more

cockroachdb cockroachdb 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	stdlib@go1.26.2	1.26.9

Open the chart page →

718

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	stdlib@go1.26.7	1.26.9

Open the chart page →

486

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	stdlib@go1.22.11	1.26.9
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.26.9

Open the chart page →

4,815

tempografana-community

3.1.0

1 of 1 See more

tempo grafana-community 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
grafana/tempo :3.1.0	3076b8dcdfb3	stdlib@go1.27.1	1.26.9

Open the chart page →

252

mesherymeshery

1.0.71

1 of 1 See more

meshery meshery 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	b3816d0c691d	stdlib@go1.26.4	1.26.9

Open the chart page →

1,877

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	stdlib@go1.26.5	1.26.9

Open the chart page →

350

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9

Open the chart page →

12,267

tomcatbitnami

13.6.33

1 of 1 See more

tomcat bitnami 13.6.33

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnami/tomcat :latest	a364a0270d35	stdlib@go1.26.8	1.26.9

Open the chart page →

226

local-path-provisionercontaineroo

0.0.38

1 of 1 See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.37	e757967a5ec3	stdlib@go1.26.5	1.26.9

Open the chart page →

320

mailpitjouve

0.37.0

1 of 1 See more

mailpit jouve 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
axllent/mailpit :v1.31.1	98b916bd3c8d	stdlib@go1.27.1	1.26.9

Open the chart page →

218

signozsignoz

0.145.0

5 of 5 See more

signoz signoz 0.145.0

5 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.26.9
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.26.9
signoz/signoz :v0.145.0	1301f2df51f0	stdlib@go1.25.7	1.26.9
signoz/signoz-otel-collector :v0.144.12	deb566a7a3c0	stdlib@go1.25.0	1.26.9
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.9

Open the chart page →

11,004

weblateweblate

0.5.42

2 of 3 See more

weblate weblate 0.5.42

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.26.9
weblate/weblate :2026.10.1.0	57f8cdc6dcb2	stdlib@go1.26.7	1.26.9

Open the chart page →

7,540

postgresgroundhog2k

1.6.8

1 of 1 See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/postgres :18.6	5a5a84b19854	stdlib@go1.24.6	1.26.9

Open the chart page →

1,918

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.26.9

Open the chart page →

5,700

keelkeel

1.2.3

1 of 1 See more

keel keel 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.4	09872633675d	stdlib@go1.26.5	1.26.9

Open the chart page →

1,127

community-operatormongodb-helm-charts

0.13.0

1 of 1 See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.26.9

Open the chart page →

1,680

openfgaopenfga

0.3.16

1 of 1 See more

openfga openfga 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
openfga/openfga :v1.22.0	9cf9a20af32a	stdlib@go1.26.8	1.26.9

Open the chart page →

201

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.26.9

Open the chart page →

1,248

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	stdlib@go1.26.2	1.26.9

Open the chart page →

600

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	stdlib@go1.24.8	1.26.9

Open the chart page →

2,327

dragonflydragonfly

1.8.5

2 of 3 See more

dragonfly dragonfly 1.8.5

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v1.5.5	9fe2a1d6206f	stdlib@go1.26.5	1.26.9
dragonflyoss/scheduler :v2.5.2	d5dea9e662cd	stdlib@go1.25.5	1.26.9

Open the chart page →

5,470

fission-allfission-charts

1.27.0

3 of 3 See more

fission-all fission-charts 1.27.0

3 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	stdlib@go1.26.4	1.26.9
ghcr.io/fission/pre-upgrade-checks :v1.27.0	b053fc3539b4	stdlib@go1.26.4	1.26.9
ghcr.io/fission/reporter :v1.27.0	c77cc925debe	stdlib@go1.26.4	1.26.9

Open the chart page →

1,159

rancherrancher-latest

2.15.2

2 of 2 See more

rancher rancher-latest 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.2	0c3d8e570255	stdlib@go1.26.4	1.26.9
rancher/shell :v0.8.2	1eeed72d4eda	stdlib@go1.26.8	1.26.9

Open the chart page →

2,583

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.26.9
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.26.9

Open the chart page →

7,190

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	stdlib@go1.24.6	1.26.9

Open the chart page →

1,132

mariadbcloudpirates-mariadb

0.16.16

1 of 1 See more

mariadb cloudpirates-mariadb 0.16.16

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/mariadb :13.0.2	f1bba652ba57	stdlib@go1.26.7	1.26.9

Open the chart page →

1,834

difydouban

0.10.0

4 of 6 See more

dify douban 0.10.0

4 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.26.9
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	stdlib@go1.25.5	1.26.9
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.26.9
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.26.9

Open the chart page →

84,048

Container images carrying it

6,104 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	stdlib@go1.22.5	1.26.9	1
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	stdlib@go1.26.3	1.26.9	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	stdlib@go1.22.12	1.26.9	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	stdlib@go1.20.12	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-datadog :18.11.3	d2905716bdd7	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-email :18.11.3	e6185243ca24	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-event-handler :18.11.3	2b9db0cb9e09	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-jira :18.11.3	6381a220c3dd	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-mattermost :18.11.3	0d3763dbe801	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-msteams :18.11.3	24494d3db4be	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-pagerduty :18.11.3	11cda3155e0f	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/gravitational/teleport-plugin-slack :18.11.3	4de4e9d63c71	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.55-grafana11.3.7	7d261462727d	stdlib@go1.26.1	1.26.9	1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller :3.5.3-20260205	bf9db911deed	stdlib@go1.25.7	1.26.9	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	stdlib@go1.17.13	1.26.9	1
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	stdlib@go1.25.7	1.26.9	1
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260929-1	f21c0eb520a9	stdlib@go1.26.8	1.26.9	1
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	stdlib@go1.26.3	1.26.9	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	stdlib@go1.15.15	1.26.9	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	stdlib@go1.14.9	1.26.9	1
public.ecr.aws/jtekt-corporation/api-key-manager-api :v0.1.1	75a48d987e0f	stdlib@go1.20.7	1.26.9	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent :v3.0.1	d75b6da94913	stdlib@go1.26.2	1.26.9	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	stdlib@go1.25.9	1.26.9	1
public.ecr.aws/k4y9r6y5/kratos :v25.4.0	e8014c6c58b6	stdlib@go1.25.2	1.26.9	1
public.ecr.aws/karpenter/controller :1.9.0	30a506c64fbb	stdlib@go1.25.7	1.26.9	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	stdlib@go1.19.3	1.26.9	1
public.ecr.aws/karpenter/controller :1.1.1	fe383abf1dbc	stdlib@go1.23.2	1.26.9	1
public.ecr.aws/kyos/evicted-pod-reaper :1.0.0	b9d047442ce2	stdlib@go1.24.6	1.26.9	1
public.ecr.aws/lumigo/lumigo-kubernetes-operator :69	491c39346b19	stdlib@go1.23.12	1.26.9	1
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy :69	1d548e59c2c8	stdlib@go1.24.5	1.26.9	1
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog :69	6458fcd61e0c	stdlib@go1.23.12	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.11	5ca2d500d374	stdlib@go1.23.4	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.34	adc2f5d5996b	stdlib@go1.27.1	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.17	a94d2d4aae85	stdlib@go1.23.4	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.44	f30f0dc32205	stdlib@go1.27.1	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.71	0f5aeaf1a77e	stdlib@go1.27.1	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	stdlib@go1.23.4	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.15	14f3dfbc0225	stdlib@go1.23.4	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.38	bbba62c5a110	stdlib@go1.27.1	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.50	4e25d84332fc	stdlib@go1.27.1	1.26.9	1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.25	b9a7d6bc2a0c	stdlib@go1.23.4	1.26.9	1
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	stdlib@go1.20.4	1.26.9	1
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	stdlib@go1.20.4	1.26.9	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	stdlib@go1.22.6	1.26.9	1
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	stdlib@go1.23.0	1.26.9	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	stdlib@go1.20.2	1.26.9	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	stdlib@go1.20.12	1.26.9	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	stdlib@go1.22.7	1.26.9	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.26.9	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	stdlib@go1.24.13	1.26.9	1