CVE-2026-97031

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,360; of 18,104 indexed, latest versions
Container images: 6,204; deployed by those charts
Fix available: 1 of 2; affected packages

Reject malformed ECH outer extension references in crypto/tls

Carried by container images the latest versions of 5,360 of 18,104 indexed charts deploy, on 6,204 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,204
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-97031 GO-2026-6607
Trending: Rank 5 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,360 by stars

Chart

Latest

Affected images

Radar Score

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.26.9

Open the chart page →

2,062

trust-managercert-manager

0.25.0

2 of 2 See more

trust-manager cert-manager 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/jetstack/trust-manager :v0.25.0	0521921c2a46	stdlib@go1.27.1	1.26.9
quay.io/jetstack/trust-pkg-debian-trixie :20250419.2	3093d4f6634f	stdlib@go1.27.1	1.26.9

Open the chart page →

346

gatekeepergatekeeper

3.23.1

2 of 3 See more

gatekeeper gatekeeper 3.23.1

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	stdlib@go1.26.6	1.26.9
openpolicyagent/gatekeeper-crds :v3.23.1	ab3620e6bec9	stdlib@go1.26.6	1.26.9

Open the chart page →

955

snapshot-controllerpiraeus-charts

5.3.0

1 of 1 See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.26.9

Open the chart page →

580

rocketchatrocketchat-server

7.0.2

6 of 12 See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.26.9
library/nats :2.12-alpine	b270f5e24283	stdlib@go1.25.12	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.26.9
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.9
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.26.9

Open the chart page →

16,625

zammadzammad

19.1.4

1 of 5 See more

zammad zammad 19.1.4

1 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.26.9

Open the chart page →

6,272

victoria-metrics-clustervictoriametrics

0.52.0

3 of 3 See more

victoria-metrics-cluster victoriametrics 0.52.0

3 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
victoriametrics/vminsert :v1.153.0-cluster	629d128af12f	stdlib@go1.27.1	1.26.9
victoriametrics/vmselect :v1.153.0-cluster	3a593a1d02f7	stdlib@go1.27.1	1.26.9
victoriametrics/vmstorage :v1.153.0-cluster	83e67bde1b2a	stdlib@go1.27.1	1.26.9

Open the chart page →

520

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.26.9
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.26.9

Open the chart page →

4,228

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.26.9

Open the chart page →

2,877

k10kasten

9.0.7

22 of 23 See more

k10 kasten 9.0.7

22 of the 23 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/aggregatedapis :9.0.7	9a189cf0aff8	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/auth :9.0.7	16efe4c210e0	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/bloblifecyclemanager :9.0.7	83f7c06dc4d1	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/catalog :9.0.7	0ea3df63f5b6	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/configmap-reload :9.0.7	b9b8a1b65f7a	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/controllermanager :9.0.7	a01f872d8e0c	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/crypto :9.0.7	6c6b6d9af1d4	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/dashboardbff :9.0.7	1a8b1ccfc402	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/events :9.0.7	e7beb79514f9	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/executor :9.0.7	4fe7419cecd9	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/garbagecollector :9.0.7	4dfd4a2dae57	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/gateway :9.0.7	6f14d4acd0c5	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/jobs :9.0.7	a093d080604f	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/kanister :9.0.7	03d05d517803	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/kanister-tools :9.0.7	9778af80396e	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/logging :9.0.7	e41747f4a3c3	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/metering :9.0.7	209e1aaee219	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/prometheus :9.0.7	93bdb766db72	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/repositories :9.0.7	5c5435aea185	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/state :9.0.7	c4bfd7feb74a	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/upgrade :9.0.7	b2447f8bc553	stdlib@go1.27.1	1.26.9
gcr.io/kasten-images/vbrintegrationapi :9.0.7	85e432303eff	stdlib@go1.27.1	1.26.9

Open the chart page →

6,678

mariadb-operatormariadb-operator

26.10.1

1 of 1 See more

mariadb-operator mariadb-operator 26.10.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.10.1	37714fb240a5	stdlib@go1.27.1	1.26.9

Open the chart page →

545

podinfopodinfo

6.15.0

1 of 1 See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/stefanprodan/podinfo :6.15.0	ec73780a8425	stdlib@go1.27.0	1.26.9

Open the chart page →

506

ceph-csi-cephfsceph-csi

3.18.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.18.1	a8c0653a9565	stdlib@go1.26.4	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9

Open the chart page →

2,843

ceph-csi-rbdceph-csi

3.18.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.18.1	a8c0653a9565	stdlib@go1.26.4	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	stdlib@go1.26.6	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9

Open the chart page →

2,843

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.26.9
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	stdlib@go1.25.11	1.26.9
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	stdlib@go1.25.11	1.26.9
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	stdlib@go1.25.11	1.26.9

Open the chart page →

8,811

rabbitmqcloudpirates-rabbitmq

0.21.31

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.31

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.6-management	8dd6e3570dda	stdlib@go1.22.2	1.26.9

Open the chart page →

1,332

csi-driver-nfscsi-driver-nfs

4.13.5

6 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.5

6 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.26.9
registry.k8s.io/sig-storage/nfsplugin :v4.13.5	19162ec4fb3f	stdlib@go1.26.5	1.26.9

Open the chart page →

4,439

portainerportainer

245.2.0

1 of 1 See more

portainer portainer 245.2.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.2	03f94a406496	stdlib@go1.26.6	1.26.9

Open the chart page →

550

atlantisatlantis

6.16.1

1 of 1 See more

atlantis atlantis 6.16.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.48.1	42bde40e38ec	stdlib@go1.26.6	1.26.9

Open the chart page →

859

codercoder-v2

2.38.0

1 of 1 See more

coder coder-v2 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.38.0	38a4cfc548b0	stdlib@go1.26.4	1.26.9

Open the chart page →

372

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.26.9

Open the chart page →

3,343

milvusmilvus

4.0.31

3 of 5 See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	stdlib@go1.18.2	1.26.9
milvusdb/milvus :v2.2.13	a3a55e1c1497	stdlib@go1.18.3	1.26.9
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	stdlib@go1.16.15	1.26.9

Open the chart page →

177,141

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.25.5	1.26.9

Open the chart page →

3,179

victoria-metrics-operatorvictoriametrics

0.68.1

1 of 1 See more

victoria-metrics-operator victoriametrics 0.68.1

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.75.0	78da26b41a81	stdlib@go1.27.1	1.26.9

Open the chart page →

205

cockroachdbcockroachdb

22.0.4

1 of 3 See more

cockroachdb cockroachdb 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	stdlib@go1.26.2	1.26.9

Open the chart page →

718

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	stdlib@go1.26.7	1.26.9

Open the chart page →

486

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	stdlib@go1.22.11	1.26.9
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.26.9

Open the chart page →

4,813

tempografana-community

3.1.0

1 of 1 See more

tempo grafana-community 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
grafana/tempo :3.1.0	3076b8dcdfb3	stdlib@go1.27.1	1.26.9

Open the chart page →

252

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	stdlib@go1.26.5	1.26.9

Open the chart page →

350

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9

Open the chart page →

12,265

tomcatbitnami

13.6.33

1 of 1 See more

tomcat bitnami 13.6.33

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnami/tomcat :latest	a364a0270d35	stdlib@go1.26.8	1.26.9

Open the chart page →

226

local-path-provisionercontaineroo

0.0.38

1 of 1 See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.37	e757967a5ec3	stdlib@go1.26.5	1.26.9

Open the chart page →

320

mailpitjouve

0.37.0

1 of 1 See more

mailpit jouve 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
axllent/mailpit :v1.31.1	98b916bd3c8d	stdlib@go1.27.1	1.26.9

Open the chart page →

218

signozsignoz

0.145.0

5 of 5 See more

signoz signoz 0.145.0

5 of the 5 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.26.9
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.26.9
signoz/signoz :v0.145.0	1301f2df51f0	stdlib@go1.25.7	1.26.9
signoz/signoz-otel-collector :v0.144.12	deb566a7a3c0	stdlib@go1.25.0	1.26.9
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.9

Open the chart page →

11,000

weblateweblate

0.5.42

2 of 3 See more

weblate weblate 0.5.42

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.26.9
weblate/weblate :2026.10.1.0	57f8cdc6dcb2	stdlib@go1.26.7	1.26.9

Open the chart page →

7,542

postgresgroundhog2k

1.6.8

1 of 1 See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/postgres :18.6	5a5a84b19854	stdlib@go1.24.6	1.26.9

Open the chart page →

1,919

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.26.9

Open the chart page →

5,699

keelkeel

1.2.3

1 of 1 See more

keel keel 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.4	09872633675d	stdlib@go1.26.5	1.26.9

Open the chart page →

1,127

community-operatormongodb-helm-charts

0.13.0

1 of 1 See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.26.9

Open the chart page →

1,679

openfgaopenfga

0.3.16

1 of 1 See more

openfga openfga 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
openfga/openfga :v1.22.0	9cf9a20af32a	stdlib@go1.26.8	1.26.9

Open the chart page →

201

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.26.9

Open the chart page →

1,248

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	stdlib@go1.26.2	1.26.9

Open the chart page →

600

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	stdlib@go1.24.8	1.26.9

Open the chart page →

2,328

dragonflydragonfly

1.8.5

2 of 3 See more

dragonfly dragonfly 1.8.5

2 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v1.5.5	9fe2a1d6206f	stdlib@go1.26.5	1.26.9
dragonflyoss/scheduler :v2.5.2	d5dea9e662cd	stdlib@go1.25.5	1.26.9

Open the chart page →

5,471

fission-allfission-charts

1.27.0

3 of 3 See more

fission-all fission-charts 1.27.0

3 of the 3 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	stdlib@go1.26.4	1.26.9
ghcr.io/fission/pre-upgrade-checks :v1.27.0	b053fc3539b4	stdlib@go1.26.4	1.26.9
ghcr.io/fission/reporter :v1.27.0	c77cc925debe	stdlib@go1.26.4	1.26.9

Open the chart page →

1,159

rancherrancher-latest

2.15.2

2 of 2 See more

rancher rancher-latest 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.2	0c3d8e570255	stdlib@go1.26.4	1.26.9
rancher/shell :v0.8.2	1eeed72d4eda	stdlib@go1.26.8	1.26.9

Open the chart page →

2,584

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.26.9
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.26.9

Open the chart page →

7,181

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	stdlib@go1.24.6	1.26.9

Open the chart page →

1,132

mariadbcloudpirates-mariadb

0.16.16

1 of 1 See more

mariadb cloudpirates-mariadb 0.16.16

1 of the 1 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
library/mariadb :13.0.2	f1bba652ba57	stdlib@go1.26.7	1.26.9

Open the chart page →

1,834

difydouban

0.10.0

4 of 6 See more

dify douban 0.10.0

4 of the 6 container images this version deploys carry CVE-2026-97031.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.26.9
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	stdlib@go1.25.5	1.26.9
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.26.9
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.26.9

Open the chart page →

84,033

Container images carrying it

6,204 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/knative-releases/knative.dev/serving/cmd/default-domain	5e0429b70299	stdlib@go1.19.5	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	stdlib@go1.17.8	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	stdlib@go1.18.3	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	stdlib@go1.20.4	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook	15f1ce7f35b4	stdlib@go1.18.3	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	stdlib@go1.20.4	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	stdlib@go1.17.8	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	1282a399cbb9	stdlib@go1.18.3	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	stdlib@go1.20.4	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	stdlib@go1.21.5	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	stdlib@go1.17.8	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	stdlib@go1.14.10	1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	stdlib@go1.14.2	1.26.9	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	stdlib@go1.23.3	1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	stdlib@go1.16.4	1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	stdlib@go1.21.5	1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	stdlib@go1.16.5	1.26.9	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	stdlib@go1.23.4	1.26.9	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	stdlib@go1.16.5	1.26.9	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	stdlib@go1.16.4	1.26.9	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	stdlib@go1.21.7	1.26.9	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	stdlib@go1.17.6	1.26.9	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	stdlib@go1.21.7	1.26.9	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	stdlib@go1.17.6	1.26.9	1
gcr.io/ml-pipeline/mysql :5.7-debian	df28187b5455	stdlib@go1.16.7	1.26.9	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	stdlib@go1.17.6	1.26.9	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	stdlib@go1.21.7	1.26.9	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	stdlib@go1.17.6	1.26.9	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	stdlib@go1.21.7	1.26.9	1
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	stdlib@go1.17.6	1.26.9	1
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	stdlib@go1.21.7	1.26.9	1
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	stdlib@go1.17.11	1.26.9	1
gcr.io/pingcap-public/deadmansswitch :1.0	4861d81aa528	stdlib@go1.16.3	1.26.9	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	stdlib@go1.21.1	1.26.9	1
gcr.io/projectsigstore/cosigned	784518ff3ee7	stdlib@go1.17.9	1.26.9	1
gcr.io/projectsigstore/policy-webhook	82940e8c3e0d	stdlib@go1.17.9	1.26.9	1
gcr.io/spotit-today/spot-ocean-admission-controller :0.1.6	4f634aeb31b8	stdlib@go1.24.13	1.26.9	1
ghcr.io/0xerr0r/blocky :v0.29.0	a6d99f323d30	stdlib@go1.26.0	1.26.9	1
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	stdlib@go1.17.7	1.26.9	1
ghcr.io/291-group/lan-orangutan :3.3.8	86b55c80eeb1	stdlib@go1.25.12	1.26.9	1
ghcr.io/aardbol/cert-manager-webhook-bunny :v1.4.1	be5e446c5ed5	stdlib@go1.26.8	1.26.9	1
ghcr.io/abcdesktopio/keysgenerator :4.4	26e0bcfa4c01	stdlib@go1.26.8	1.26.9	1
ghcr.io/abcdesktopio/mongo :safe8.0	b91afcb145a5	stdlib@go1.26.6	1.26.9	1
ghcr.io/absmach/magistrala/re :latest	0257a658a108	stdlib@go1.27.0	1.26.9	1
ghcr.io/absmach/magistrala/ui-backend :latest	b3986672fa02	stdlib@go1.27.0	1.26.9	1
ghcr.io/abstract-foundation/zksync-external-node-sidecar :v1.0.0	3e705d0eb1ce	stdlib@go1.18.10	1.26.9	1
ghcr.io/aclerici38/pocket-id-operator :v0.15.0	e1f94e349df1	stdlib@go1.27.1	1.26.9	1
ghcr.io/actions/gha-runner-scale-set-controller :0.15.0	162dfb5bfbda	stdlib@go1.27.1	1.26.9	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	stdlib@go1.23.7	1.26.9	1
ghcr.io/aetrius/msockperf-client/msockperf-client :main	820af919c5e2	stdlib@go1.22.1	1.26.9	1