CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

7,482

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

12,921

wazuh-operatorwazuh-operator

2026.10.2

1 of 1 See more

wazuh-operator wazuh-operator 2026.10.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/maximewewer/wazuh-operator :2026.10.2	aad30dd2e645	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

anubiswbstack

0.1.0

1 of 1 See more

anubis wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

977

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

7,324

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9

Open the chart page →

10,875

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

azure-janitorwebdevops

1.0.13

1 of 1 See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-janitor :24.9.0	2446baee7b69	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,354

azure-keyvault-exporterwebdevops

1.0.12

1 of 1 See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-keyvault-exporter :24.9.1	f333704ecd60	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,353

azure-loganalytics-exporterwebdevops

1.0.13

1 of 1 See more

azure-loganalytics-exporter webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-loganalytics-exporter :25.12.0	051845d06d85	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

azure-resourcegraph-exporterwebdevops

1.1.5

1 of 1 See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcegraph-exporter :24.9.0	381136dda026	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,338

azure-resourcemanager-exporterwebdevops

1.3.6

1 of 1 See more

azure-resourcemanager-exporter webdevops 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcemanager-exporter :26.1.0	d3e1842ad419	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

970

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,691

kube-pool-managerwebdevops

1.0.16

1 of 1 See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/kube-pool-manager :24.9.0	4fad7e14ad67	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,038

pagerduty-exporterwebdevops

1.1.8

1 of 1 See more

pagerduty-exporter webdevops 1.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/pagerduty-exporter :25.12.1	83b95faf10a0	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mariadb :10	7db29378d4fd	stdlib@go1.24.6	1.26.9

Open the chart page →

11,207

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,194

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

30,659

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	stdlib@go1.20.1	1.26.9

Open the chart page →

2,674

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,563

valkey-operatorwellcake

0.11.0

1 of 1 See more

valkey-operator wellcake 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/melancholictheory/wellcake :0.11.0	5833bb94d394	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

329

alertmanagerwener

2.1.1

2 of 2 See more

alertmanager wener 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

502

ambassadorwener

6.9.5

1 of 2 See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

5,651

apisixwener

2.18.1

1 of 3 See more

apisix wener 2.18.1

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

3,705

apisix-ingress-controllerwener

1.4.0

1 of 2 See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,338

argo-cdwener

10.10.3

2 of 3 See more

argo-cd wener 10.10.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/argoproj/argocd :v3.5.5	13db7b10db23	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

2,657

argocd-image-updaterwener

1.3.2

1 of 1 See more

argocd-image-updater wener 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.1	a578e328e8cb	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

398

argo-eventswener

2.4.27

1 of 1 See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.57.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,609

argo-rolloutswener

2.43.7

1 of 1 See more

argo-rollouts wener 2.43.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.1	fbcc4cf0a29d	golang.org/x/net@v0.56.0	0.60.0

Open the chart page →

220

argo-workflowswener

2.0.13

3 of 3 See more

argo-workflows wener 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.5	93534a0d0ba3	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/argoproj/argocli :v4.1.5	e0824b55297b	stdlib@go1.26.5	1.26.9
quay.io/argoproj/workflow-controller :v4.1.5	328307c9436f	stdlib@go1.26.5	1.26.9

Open the chart page →

966

athens-proxywener

0.5.2

2 of 2 See more

athens-proxy wener 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.60.0 1.26.9
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

6,742

cadencewener

0.23.0

2 of 5 See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.60.0 1.26.9
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

13,620

cert-managerwener

1.21.2

4 of 4 See more

cert-manager wener 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

866

cockroachdbwener

22.0.4

1 of 3 See more

cockroachdb wener 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

781

consulwener

2.0.4

2 of 2 See more

consul wener 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hashicorp/consul :2.0.4	1c59f007df8e	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9
hashicorp/consul-k8s-control-plane :2.0.4	9334d7f4bcf0	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

459

emissary-ingresswener

8.12.2

1 of 2 See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	golang.org/x/net@v0.28.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

76,693

external-secretswener

2.12.0

1 of 1 See more

external-secrets wener 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

270

filebrowserwener

1.0.0

1 of 1 See more

filebrowser wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,422

giteawener

12.7.0

2 of 4 See more

gitea wener 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9

Open the chart page →

10,533

gitlab-runnerwener

0.93.0

1 of 1 See more

gitlab-runner wener 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

657

haproxy-ingresswener

0.16.2

1 of 1 See more

haproxy-ingress wener 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

243

ingress-nginxwener

4.15.1

2 of 2 See more

ingress-nginx wener 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,364

juicefs-csi-driverwener

0.33.0

5 of 5 See more

juicefs-csi-driver wener 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,321

kube-prometheus-stackwener

92.7.0

5 of 6 See more

kube-prometheus-stack wener 92.7.0

5 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.4-distroless	ae3d3add290a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.11.0	778d97dc3986	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,464

kubernetes-dashboardwener

7.14.0

4 of 5 See more

kubernetes-dashboard wener 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

5,075

kube-state-metricswener

8.6.0

1 of 1 See more

kube-state-metrics wener 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

322

logging-operatorwener

3.17.10

1 of 1 See more

logging-operator wener 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,541

longhornwener

1.2.3

1 of 2 See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.60.0 1.26.9

Open the chart page →

17,191

mesherywener

1.0.71

1 of 1 See more

meshery wener 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	b3816d0c691d	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,882

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.10	0.60.0 1.26.9	1
ghcr.io/mindburn-labs/helm-ai-kernel :v0.11.1	0e7a5cd11858	golang.org/x/net@v0.58.0 stdlib@go1.25.13	0.60.0 1.26.9	1
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9	1
ghcr.io/miropshq/mirops/operator :v0.2.0	4b0b5fef9a6a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/miropshq/mirops/remediation :v0.2.0	976a7319ff4a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-console :v1.6.0	209e966322ab	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-controller :v1.6.0	b547c38dcc9d	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-forkd :v1.6.0	979b462ab7d6	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-gateway :v1.6.0	017274a28204	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mitos-run/mitos-kvm-device-plugin :v1.6.0	63e2b78d03c4	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.60.0 1.26.9	1
ghcr.io/mogenius/renovate-operator :6.5.1	892eec306b8a	golang.org/x/net@v0.59.0	0.60.0	1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/net@v0.9.0 stdlib@go1.24.4	0.60.0 1.26.9	1
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	stdlib@go1.26.0	1.26.9	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	golang.org/x/net@v0.24.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	1
ghcr.io/mrueg/netcupscp-exporter :v0.5.2	5b86c2c0b0e0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/mschenck/ddns-kubernetes-controller :latest	590d55aab53c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.8	0.60.0 1.26.9	1
ghcr.io/mskazemi/kubeintellect :2.6.0	1d2b74d49f63	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/msueberkrueb/cloudflare-dyndns :1.0.0	e5c945a3b000	stdlib@go1.25.1	1.26.9	1
ghcr.io/muhmmadayan/fake-network-operator :0.1.0	3806b1fd4a4b	golang.org/x/net@v0.28.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	golang.org/x/net@v0.17.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.15.6	0.60.0 1.26.9	1
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9	1
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.60.0 1.26.9	1
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.60.0 1.26.9	1
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
ghcr.io/nefelim4ag/k8s-ondemand-proxy :0.0.2	078b25d48cf7	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	golang.org/x/net@v0.23.0 stdlib@go1.21.11	0.60.0 1.26.9	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.26.9	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.26.9	1
ghcr.io/netbirdio/netbird-operator :v0.8.0	ae2c26cfc547	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/netbox-community/netbox :v4.7.3	3a1e8d317c63	stdlib@go1.26.7	1.26.9	1
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.60.0 1.26.9	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.17	0.60.0 1.26.9	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.16.8	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :2.4.1	80f3a0a51af5	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/nginx/nginx-gateway-fabric :edge	e15ba2abf4e6	golang.org/x/net@v0.59.0	0.60.0	1
ghcr.io/nicholaswilde/golinks :version-154c581	8e67b26324c5	stdlib@go1.16.5	1.26.9	1
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.26.9	1
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.5	0.60.0 1.26.9	1
ghcr.io/nicholaswilde/olivetin :version-2021-07-19	e1d5c8a01008	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.5	0.60.0 1.26.9	1
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.16.5	0.60.0 1.26.9	1
ghcr.io/nicholaswilde/static :version-ee8a20c	d1d47c730bc4	stdlib@go1.16.5	1.26.9	1
ghcr.io/nicholaswilde/todo :941c0d3-ls1	d7ba1341a940	stdlib@go1.14.15	1.26.9	1
ghcr.io/nicholaswilde/twtxt :version-0.1.1	58736a73ca10	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.5	0.60.0 1.26.9	1
ghcr.io/nicholaswilde/wiki :version-900b76a	6c4f261d8f5e	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.16.5	0.60.0 1.26.9	1