StackRadar

CVE-2026-97031

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,221
of 18,137 indexed, latest versions
Container images
6,033
deployed by those charts
Fix available
1 of 2
affected packages

Reject malformed ECH outer extension references in crypto/tls

Carried by container images the latest versions of 5,221 of 18,137 indexed charts deploy, on 6,033 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.96,033
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2026-97031GO-2026-6607
Trending
Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,221 by stars
ChartLatestAffected imagesRadar Score
pyroscope-monitoringgrafana0.1.15 of 6See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
stdlib@go1.24.6
1.26.9
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
stdlib@go1.24.5
1.26.9
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
stdlib@go1.23.6
1.26.9
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.9

Open the chart page →

11,690
rollout-operatorgrafana0.52.01 of 1See more

rollout-operator grafana 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/rollout-operator:v0.40.0c49161c368a5
stdlib@go1.27.1
1.26.9

Open the chart page →

209
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
stdlib@go1.21.0
1.26.9

Open the chart page →

1,234
synthetic-monitoring-agentgrafana-communityVerified publisher1.20.11 of 1See more

synthetic-monitoring-agent grafana-community 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grafana/synthetic-monitoring-agent:v0.66.1d5f33ade9d66
stdlib@go1.26.6
1.26.9

Open the chart page →

325
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
stdlib@go1.23.3
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
stdlib@go1.23.3
1.26.9
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.9
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.9
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
stdlib@go1.23.1
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.9

Open the chart page →

8,776
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
stdlib@go1.13.10
1.26.9

Open the chart page →

9,500
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
stdlib@go1.18.10
1.26.9

Open the chart page →

90,307
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mongo:8d731d77bfd7a
stdlib@go1.26.8
1.26.9

Open the chart page →

5,977
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
stdlib@go1.21.10
1.26.9

Open the chart page →

2,011
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
stdlib@go1.15.2
1.26.9

Open the chart page →

16,374
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
stdlib@go1.22.7
1.26.9

Open the chart page →

3,244
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
stdlib@go1.17.13
1.26.9

Open the chart page →

3,089
routergroundcover1.13.994See more

router groundcover 1.13.99

4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.55-grafana11.3.77d261462727d
stdlib@go1.26.1
1.26.9
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
stdlib@go1.25.7
1.26.9
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
stdlib@go1.25.7
1.26.9
quay.io/groundcover/tools:20260929e8a79ea4cf39
stdlib@go1.24.4
1.26.9

Open the chart page →

—
temporalgroundcover1.13.992See more

temporal groundcover 1.13.99

2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
stdlib@go1.26.8
1.26.9
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
stdlib@go1.26.3
1.26.9

Open the chart page →

—
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mysql:9.7.2e2bde46db656
stdlib@go1.24.6
1.26.9

Open the chart page →

887
tailscale-subnet-routergtaylor1.2.11 of 1See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
stdlib@go1.19.2-ts3fd24dee31
1.26.9

Open the chart page →

2,719
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
stdlib@go1.24.2
1.26.9

Open the chart page →

1,886
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
stdlib@go1.25.5
1.26.9

Open the chart page →

763
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.26.9

Open the chart page →

3,620
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
stdlib@go1.16.3
1.26.9

Open the chart page →

5,750
mautrix-signalhalkeye0.3.01 of 2See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
signald/signald:0.23.2edbff058278c
stdlib@go1.18.10
1.26.9

Open the chart page →

2,402
thunderdome-planning-pokerhalkeye0.1.11 of 1See more

thunderdome-planning-poker halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
stdlib@go1.26.4
1.26.9

Open the chart page →

774
whoamihalkeye1.0.11 of 1See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
containous/whoami:v1.5.07d6a3c8f9147
stdlib@go1.14
1.26.9

Open the chart page →

2,369
hcp-terraform-operatorhashicorpVerified publisher2.12.12 of 2See more

hcp-terraform-operator hashicorp 2.12.1

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
hashicorp/hcp-terraform-operator:2.12.15a15932f6838
stdlib@go1.26.5
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
stdlib@go1.25.4
1.26.9

Open the chart page →

1,398
hatchet-apihatchetOfficialVerified publisher0.20.04 of 4See more

hatchet-api hatchet 0.20.0

4 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

2,450
hatchet-frontendhatchetOfficialVerified publisher0.20.01 of 1See more

hatchet-frontend hatchet 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9

Open the chart page →

213
hatchet-hahatchetOfficialVerified publisher0.20.06 of 8See more

hatchet-ha hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine:v0.110.5185c4311d23f
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

9,565
hatchet-stackhatchetOfficialVerified publisher0.20.06 of 8See more

hatchet-stack hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine:v0.110.5185c4311d23f
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

9,565
hawk-envoy-pluginhawk0.1.02 of 4See more

hawk-envoy-plugin hawk 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.9
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.9

Open the chart page →

71,160
hazelcast-platform-operatorhazelcastVerified publisher5.20.01 of 1See more

hazelcast-platform-operator hazelcast 5.20.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
hazelcast/hazelcast-platform-operator:5.20.0e10ca9d704b1
stdlib@go1.26.6
1.26.9

Open the chart page →

293
cert-manager-webhook-arvanhbahadorzadeh0.1.11 of 1See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
stdlib@go1.15.6
1.26.9

Open the chart page →

4,243
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
stdlib@go1.14.7
1.26.9

Open the chart page →

3,969
cert-manager-webhook-hetznerhcloud0.9.01 of 1See more

cert-manager-webhook-hetzner hcloud 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
stdlib@go1.26.6
1.26.9

Open the chart page →

480
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
stdlib@go1.17.10
1.26.9

Open the chart page →

7,929
headcniheadcni1.0.101 of 1See more

headcni headcni 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
binrc/headcni:1.0.10e199c334b957
stdlib@go1.22.10
1.26.9

Open the chart page →

1,292
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
stdlib@go1.19.5
1.26.9
supabase/gotrue:v2.91.07174d551d720
stdlib@go1.20.7
1.26.9

Open the chart page →

79,996
hello-gohello-goVerified publisher0.2.21 of 1See more

hello-go hello-go 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
anujarosha/hello-go:v1.0.1ed60e46870b6
stdlib@go1.18.3
1.26.9

Open the chart page →

2,145
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
stdlib@go1.21.0
1.26.9

Open the chart page →

1,575
helm-airportshelm-airports0.1.02 of 7See more

helm-airports helm-airports 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9

Open the chart page →

15,406
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9

Open the chart page →

6,074
airports-postgreshelm-airports-dan0.1.01 of 1See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9

Open the chart page →

1,904
helm-airportshelm-airports-dan0.1.02 of 7See more

helm-airports helm-airports-dan 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9

Open the chart page →

7,978
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.9

Open the chart page →

6,074
airports-postgreshelm-airports-postgres0.1.01 of 1See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9

Open the chart page →

1,904
cfgatehelm-chart-cfgateVerified publisher1.10.01 of 1See more

cfgate helm-chart-cfgate 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/cfgate/cfgatedigest-pinned6cd934b258ee
stdlib@go1.27.1
1.26.9

Open the chart page →

209
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.9

Open the chart page →

2,194
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,457
adguard-homehelm-chart-roeiVerified publisher0.107.591 of 2See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.595d5e3aef39a8
stdlib@go1.24.1
1.26.9

Open the chart page →

1,299
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
stdlib@go1.23.3
1.26.9

Open the chart page →

5,700
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
stdlib@go1.15
1.26.9

Open the chart page →

25,961

Container images carrying it

6,033 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-97031.

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.