StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
rollout-operatorgrafana0.52.01 of 1See more

rollout-operator grafana 0.52.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/rollout-operator:v0.40.0c49161c368a5
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

209
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
stdlib@go1.21.0
1.26.9

Open the chart page →

1,234
synthetic-monitoring-agentgrafana-communityVerified publisher1.20.11 of 1See more

synthetic-monitoring-agent grafana-community 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/synthetic-monitoring-agent:v0.66.1d5f33ade9d66
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

325
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/net@v0.20.0
stdlib@go1.21.7
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/net@v0.28.0
stdlib@go1.23.1
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/net@v0.29.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

8,781
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

9,503
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
golang.org/x/net@v0.26.0
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

90,639
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mongo:8d731d77bfd7a
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

5,976
armada-executorgresearch0.22.121 of 1See more

armada-executor gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gresearch/armada-executor:latest0ba37b0f5a3b
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

815
armada-lookout-ingestergresearch0.22.121 of 1See more

armada-lookout-ingester gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gresearch/armada-lookout-ingester:latestc6fce922dec3
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

815
armada-lookout-migrationgresearch0.22.121 of 1See more

armada-lookout-migration gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gresearch/armada-lookout:latest2e924223c0f7
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

815
armada-scheduler-migrationgresearch0.22.121 of 1See more

armada-scheduler-migration gresearch 0.22.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gresearch/armada-scheduler:latesta5f8c2d040c0
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

815
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
golang.org/x/net@v0.24.0
stdlib@go1.21.10
0.60.0
1.26.9

Open the chart page →

2,012
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

16,379
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
golang.org/x/net@v0.27.0
stdlib@go1.22.7
0.60.0
1.26.9

Open the chart page →

3,246
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

3,099
routergroundcover1.13.824 of 7See more

router groundcover 1.13.82

4 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.55-grafana11.3.77d261462727d
golang.org/x/net@v0.55.0
stdlib@go1.26.1
0.60.0
1.26.9
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.60.0
1.26.9
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
stdlib@go1.25.7
1.26.9
quay.io/groundcover/tools:20260929e8a79ea4cf39
stdlib@go1.24.4
1.26.9

Open the chart page →

8,767
temporalgroundcover1.13.822 of 2See more

temporal groundcover 1.13.82

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
golang.org/x/net@v0.53.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

2,486
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:9.7.2e2bde46db656
stdlib@go1.24.6
1.26.9

Open the chart page →

887
tailscale-subnet-routergtaylor1.2.11 of 1See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
golang.org/x/net@v0.1.0
stdlib@go1.19.2-ts3fd24dee31
0.60.0
1.26.9

Open the chart page →

2,728
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

1,887
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

763
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.7
0.60.0
1.26.9

Open the chart page →

3,631
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.3
0.60.0
1.26.9

Open the chart page →

5,760
mautrix-signalhalkeye0.3.01 of 2See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
signald/signald:0.23.2edbff058278c
stdlib@go1.18.10
1.26.9

Open the chart page →

2,401
thunderdome-planning-pokerhalkeye0.1.11 of 1See more

thunderdome-planning-poker halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

775
whoamihalkeye1.0.11 of 1See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
containous/whoami:v1.5.07d6a3c8f9147
stdlib@go1.14
1.26.9

Open the chart page →

2,369
hcp-terraform-operatorhashicorpVerified publisher2.12.12 of 2See more

hcp-terraform-operator hashicorp 2.12.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hashicorp/hcp-terraform-operator:2.12.15a15932f6838
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

1,399
hatchet-apihatchetOfficialVerified publisher0.20.04 of 4See more

hatchet-api hatchet 0.20.0

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

2,449
hatchet-frontendhatchetOfficialVerified publisher0.20.01 of 1See more

hatchet-frontend hatchet 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9

Open the chart page →

213
hatchet-hahatchetOfficialVerified publisher0.20.06 of 8See more

hatchet-ha hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine:v0.110.5185c4311d23f
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

9,539
hatchet-stackhatchetOfficialVerified publisher0.20.06 of 8See more

hatchet-stack hatchet 0.20.0

6 of the 8 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-admin:v0.110.57c233e606095
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-api:v0.110.5be06a6b88299
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-engine:v0.110.5185c4311d23f
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.110.5136c6a29a81a
stdlib@go1.26.8
1.26.9
ghcr.io/hatchet-dev/hatchet/hatchet-migrate:v0.110.5b2112d73f37a
stdlib@go1.26.8
1.26.9

Open the chart page →

9,539
hauler-helmhauler2.4.11 of 1See more

hauler-helm hauler 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hauler/hauler:2.1.13f36bf6bc92d
golang.org/x/net@v0.58.0
stdlib@go1.27.0-X:boringcrypto
0.60.0
1.27.2

Open the chart page →

227
hawk-envoy-pluginhawk0.1.02 of 4See more

hawk-envoy-plugin hawk 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.9
ghcr.io/privacyengineering/consumer:main73f59c032812
golang.org/x/net@v0.0.0-20211029224645-99673261e6eb
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

71,504
hazelcast-platform-operatorhazelcastVerified publisher5.20.01 of 1See more

hazelcast-platform-operator hazelcast 5.20.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hazelcast/hazelcast-platform-operator:5.20.0e10ca9d704b1
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

263
cert-manager-webhook-arvanhbahadorzadeh0.1.11 of 1See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.15.6
0.60.0
1.26.9

Open the chart page →

4,253
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

3,980
cert-manager-webhook-hetznerhcloud0.9.01 of 1See more

cert-manager-webhook-hetzner hcloud 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

480
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
stdlib@go1.17.10
1.26.9

Open the chart page →

7,929
headcniheadcni1.0.101 of 1See more

headcni headcni 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
binrc/headcni:1.0.10e199c334b957
golang.org/x/net@v0.53.0
stdlib@go1.22.10
0.60.0
1.26.9

Open the chart page →

1,293
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
stdlib@go1.19.5
1.26.9
supabase/gotrue:v2.91.07174d551d720
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9

Open the chart page →

80,242
hello-gohello-goVerified publisher0.2.21 of 1See more

hello-go hello-go 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
anujarosha/hello-go:v1.0.1ed60e46870b6
stdlib@go1.18.3
1.26.9

Open the chart page →

2,144
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
golang.org/x/net@v0.17.0
stdlib@go1.21.0
0.60.0
1.26.9

Open the chart page →

1,575
helm-airportshelm-airports0.1.02 of 7See more

helm-airports helm-airports 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.10
0.60.0
1.26.9

Open the chart page →

15,416
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.10
0.60.0
1.26.9

Open the chart page →

6,084
airports-postgreshelm-airports-dan0.1.01 of 1See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9

Open the chart page →

1,904
helm-airportshelm-airports-dan0.1.02 of 7See more

helm-airports helm-airports-dan 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.10
0.60.0
1.26.9

Open the chart page →

7,988
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.10
0.60.0
1.26.9

Open the chart page →

6,084
airports-postgreshelm-airports-postgres0.1.01 of 1See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
postgis/postgis:latest01a6a70e41e6
stdlib@go1.18.2
1.26.9

Open the chart page →

1,904
cfgatehelm-chart-cfgateVerified publisher1.10.01 of 1See more

cfgate helm-chart-cfgate 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/cfgate/cfgatedigest-pinned6cd934b258ee
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

209
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

2,134

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/orkspace/orkestra:0.7.1863356a41fbef
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/orkspace/orkestra-cc:0.7.18ebb9654ac4d2
stdlib@go1.26.6
1.26.9
1
ghcr.io/oscrx/tlsa-dnsendpoint-controllerddd9b71b2d98
golang.org/x/net@v0.58.0
0.60.0
1
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
golang.org/x/net@v0.24.0
stdlib@go1.21.12
0.60.0
1.26.9
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/oxidecomputer/cluster-api-provider-oxide:0.2.37b05d3bbfbfa
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/p10node/p10logs-agent:1.1.44bc72bd8ff5a
stdlib@go1.26.8
1.26.9
1
ghcr.io/p10node/p10logs-hub:1.1.44385afd18845
stdlib@go1.26.8
1.26.9
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.15.12
0.60.0
1.26.9
1
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.9
1
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
golang.org/x/net@v0.55.0
stdlib@go1.25.0
0.60.0
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.26.9
1
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
stdlib@go1.24.4
1.26.9
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
stdlib@go1.20.7
1.26.9
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.60.0
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
golang.org/x/net@v0.19.0
stdlib@go1.21.4
0.60.0
1.26.9
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
golang.org/x/net@v0.43.0
stdlib@go1.24.7
0.60.0
1.26.9
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.1e58c98b4d28a
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.26.9
1
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
golang.org/x/net@v0.45.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/peak-scale/capsule-argo-addon:0.8.064b8c5389b33
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.60.0
1.26.9
1
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
golang.org/x/net@v0.57.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/peimanja/artifactory_exporter:v1.16.0d3e3929a3d2b
stdlib@go1.21.13
1.26.9
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.18.4
0.60.0
1.26.9
1
ghcr.io/performancecopilot/archive-analysis:latest8bb7902a3e4b
golang.org/x/net@v0.19.0
0.60.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/pgdogdev/pgdog:v0.1.6025d1908886f5
stdlib@go1.26.7
1.26.9
1
ghcr.io/phoeluga/synology-proxy-operator:0.0.9a0b74674d0e3
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/pierinho13/github-platform-operator:v0.7.9cd69de76b3d2
golang.org/x/net@v0.59.0
0.60.0
1
ghcr.io/pii-shield/pii-shield-operator:2.2.71d21a4b3683c
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
stdlib@go1.14.6
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.0b26d85c68aa8
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook:v0.12.0fbb6df9ad2af
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.