CVE-2026-97032

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 35th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,143 indexed, latest versions
Container images: 6,182; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,143 indexed charts deploy, on 6,182 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+208 more	1.26.9, 1.27.2	6,101
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,931
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: BIT-golang-2026-97032, CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 8 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

longhornrelease-longhorn

1.12.0

3 of 3 See more

longhorn release-longhorn 1.12.0

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.0	fd245bae2e82	golang.org/x/net@v0.53.0 stdlib@go1.25.10	0.60.0 1.26.9
longhornio/longhorn-share-manager :v1.12.0	cb9d6863e4c6	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.60.0 1.26.9
longhornio/longhorn-ui :v1.12.0	3870d52a2b0a	stdlib@go1.25.10	1.26.9

Open the chart page →

2,809

relfinder-reformedrelfinderreformed

2.0.0

1 of 2 See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.26.9

Open the chart page →

7,133

reporting-chartreporting-application

0.1.0

1 of 1 See more

reporting-chart reporting-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.26.9

Open the chart page →

2,495

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6 stdlib@go1.13.6	0.60.0 1.26.9
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

29,543

resource-manager-operatorresource-manager-operator

0.1.0

1 of 1 See more

resource-manager-operator resource-manager-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

2,554

redminerestic-pvc-backup

0.2.6

1 of 1 See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.26.9

Open the chart page →

6,118

restic-pvc-backuprestic-pvc-backup

0.2.1

2 of 2 See more

restic-pvc-backup restic-pvc-backup 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ngosang/restic-exporter :2.1.2	a8f9cfa30162	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9
restic/restic :0.19.1	136600b6ff68	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,678

retromretsamedoc

2026.2.5

1 of 1 See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	golang.org/x/net@v0.28.0 stdlib@go1.20.12	0.60.0 1.26.9

Open the chart page →

8,503

spoolmanretsamedoc

26.9.0

1 of 1 See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.26.9

Open the chart page →

2,682

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,519

claude-relayrevolution1

0.1.37

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	stdlib@go1.20.12	1.26.9

Open the chart page →

6,013

istio-fortiorgnu

1.0.3

1 of 1 See more

istio-fortio rgnu 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
fortio/fortio :latest_release	fc8221136fe2	golang.org/x/net@v0.40.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

1,103

whoamirgnu

1.0.0

1 of 1 See more

whoami rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.26.9

Open the chart page →

2,298

security-sample-chartrimusz

0.2.1

1 of 3 See more

security-sample-chart rimusz 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.26.9

Open the chart page →

2,450

backup-maker-controllerriotkit-org

0.1.2

1 of 1 See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	golang.org/x/net@v0.2.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,432

haproxy-loadbalanced-redisrivals-space

0.1.2

1 of 3 See more

haproxy-loadbalanced-redis rivals-space 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :2.6.6	14e4afa90dfd	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

2,346

flannelrke2-charts

0.24.0

2 of 2 See more

flannel rke2-charts 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/hardened-cni-plugins :v1.2.0-build20240108	4f0fd4a0201c	stdlib@go1.20.7	1.26.9
rancher/hardened-flannel :v0.24.0-build20240108	de22a17107b6	golang.org/x/net@v0.18.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

5,913

harvester-cloud-providerrke2-charts

0.2.1600

2 of 2 See more

harvester-cloud-provider rke2-charts 0.2.1600

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/harvester-cloud-provider :v0.2.9	5fb3954ccef4	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
rancher/mirrored-kube-vip-kube-vip-iptables :v1.2.4	a071159e19cc	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

522

harvester-csi-driverrke2-charts

0.1.3200

6 of 6 See more

harvester-csi-driver rke2-charts 0.1.3200

6 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/harvester-csi-driver :v0.2.10	eb75514c6979	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
rancher/mirrored-longhornio-csi-attacher :v4.11.0-20260428	fe417c28a6b8	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9
rancher/mirrored-longhornio-csi-node-driver-registrar :v2.16.0-20260428	e82a8c8f800d	golang.org/x/net@v0.49.0 stdlib@go1.25.9	0.60.0 1.26.9
rancher/mirrored-longhornio-csi-provisioner :v5.3.0-20260428	9e519a21a77c	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9
rancher/mirrored-longhornio-csi-resizer :v2.1.0-20260428	41cb674d1154	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.60.0 1.26.9
rancher/mirrored-longhornio-csi-snapshotter :v8.5.0-20260428	1975fac3890f	golang.org/x/net@v0.49.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

4,354

rancher-vsphere-cpirke2-charts

1.16.400

1 of 1 See more

rancher-vsphere-cpi rke2-charts 1.16.400

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.60.0 1.26.9

Open the chart page →

1,493

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

3,505

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

2 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.60.0
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.60.0

Open the chart page →

6,401

rke2-ciliumrke2-charts

1.20.300

1 of 3 See more

rke2-cilium rke2-charts 1.20.300

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.3	95cfa5c2427c	stdlib@go1.26.7	1.26.9

Open the chart page →

712

rke2-ovirt-csi-driverrke2-charts

4.15.0

4 of 5 See more

rke2-ovirt-csi-driver rke2-charts 4.15.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-csi-provisioner :v6.0.0	0c537015fe9c	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

4,455

rke2-snapshot-validation-webhookrke2-charts

1.9.1

1 of 1 See more

rke2-snapshot-validation-webhook rke2-charts 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-snapshot-validation-webhook :v8.1.0	67ca97fe362b	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,080

kubernetes-diff-loggerrlex

0.1.2

1 of 1 See more

kubernetes-diff-logger rlex 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

3,632

runtimeclass-controllerrlex

0.1.0

1 of 1 See more

runtimeclass-controller rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

3,182

yopassrlex

0.8.0

1 of 2 See more

yopass rlex 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.15.1	6bca8d5a4914	stdlib@go1.20.5	1.26.9

Open the chart page →

1,743

memosrm3l

0.1.1

1 of 1 See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.24	c6defc2dfb98	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

2,233

ntfyrm3l

0.1.1

1 of 1 See more

ntfy rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

1,891

olivetinrm3l

0.2.0

1 of 1 See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	golang.org/x/net@v0.33.0 stdlib@go1.22.0	0.60.0 1.26.9

Open the chart page →

2,116

shopwarerobjuz

2.0.0

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	stdlib@go1.20.7	1.26.9

Open the chart page →

3,576

rb-theron-simrobotnik-fluidos-robotic-logistics-use-case

0.0.5

1 of 6 See more

rb-theron-sim robotnik-fluidos-robotic-logistics-use-case 0.0.5

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
robotnik/filebrowser :2.24.2-1	43b177ffbb72	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

5,929

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.23.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

4,900

kubewatchrobusta

3.5.0

1 of 1 See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

2,477

pagesroccohiggins-pages

1.0.0

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,576

bastillion-upstreamrock8s

0.1.0

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

4,281

easy-olm-operatorrock8s

0.0.1

1 of 1 See more

easy-olm-operator rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

1,675

fleet-vendoredrock8s

6.5.1

1 of 1 See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
fleetdm/fleet :v4.66.0	12e644b7f40e	golang.org/x/net@v0.36.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,406

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.16.14	0.60.0 1.26.9

Open the chart page →

6,699

imgproxyrock8s

0.8.30

1 of 1 See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.15.0	40f6eb807444	golang.org/x/net@v0.7.0 stdlib@go1.20	0.60.0 1.26.9

Open the chart page →

3,047

mailserverrock8s

0.1.2

1 of 1 See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

2,714

matrix-stackrock8s

0.8.1

4 of 7 See more

matrix-stack rock8s 0.8.1

4 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	stdlib@go1.19.8	1.26.9
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

12,093

resource-binding-operatorrock8s

0.1.0

1 of 1 See more

resource-binding-operator rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

1,629

reviewboardrock8s

0.0.1

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.26.9

Open the chart page →

7,463

zentaorock8s

0.0.1

1 of 1 See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
easysoft/quickon-zentao :18.5	592ad5df1f8b	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.20.3	0.60.0 1.26.9

Open the chart page →

2,481

monitoringrocketchat-server

0.0.17

7 of 9 See more

monitoring rocketchat-server 0.0.17

7 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.3	cd6e176883a9	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

10,924

rocketchat-livekitrocketchat-server

0.1.1

1 of 1 See more

rocketchat-livekit rocketchat-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.13.9	d0c04791bf63	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

227

jaegerromanow-helm-charts

1.7.3

1 of 1 See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.9.0	e128b9adbb29	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

2,190

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

11,175

Container images carrying it

6,182 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheuscommunity/postgres-exporter :v0.19.1	e96064f87622	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	1
quay.io/prometheuscommunity/prom-label-proxy :v0.15.1	186f9fe79115	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.60.0 1.26.9	1
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9	1
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter :v0.68.0	651b4041d9c3	stdlib@go1.26.8	1.26.9	1
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter :v0.62.1	bdba5215a666	stdlib@go1.23.4	1.26.9	1
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9	1
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0 stdlib@go1.24.9	0.60.0 1.26.9	1
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.60.0 1.26.9	1
quay.io/prometheus/node-exporter :v1.12.0-distroless	843ed23bb564	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/prometheus-operator/admission-webhook :v0.94.1	691ecb7e05ce	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9	1
quay.io/prometheus-operator/admission-webhook :v0.90.1	ffe7c4ca80cb	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.93.0	0ccb22ca9f3f	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.63.0	3f976422884e	stdlib@go1.19.5	1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.93.1	428f088fe6fe	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.1	693faa0b8724	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.73.2	706cde441321	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.83.0	78aec597d87a	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	golang.org/x/net@v0.19.0 stdlib@go1.21.4	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.93.0	a001ed10a382	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.10	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.75.1	a7cc63108511	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.88.0	b4f51de53357	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.60.0 1.26.9	1
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.4	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.2.1	6927e0919a14	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9	1
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9	1
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.60.0 1.26.9	1
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9	1
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0 stdlib@go1.26.3	0.60.0 1.26.9	1
quay.io/prometheus/statsd-exporter :v0.27.2	9ed70604d941	golang.org/x/net@v0.28.0 stdlib@go1.22.8	0.60.0 1.26.9	1
quay.io/prometheus/statsd-exporter :v0.22.8	f53cca722a03	stdlib@go1.18.6	1.26.9	1
quay.io/promhippie/dockerhub-exporter :2.18.0	16dd480dae3e	golang.org/x/net@v0.59.0	0.60.0	1