StackRadar

CVE-2026-97032

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,143 indexed, latest versions
Container images
6,182
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,143 indexed charts deploy, on 6,182 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+208 more1.26.9, 1.27.26,101
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,931
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
BIT-golang-2026-97032, CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 8 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
traefikkomailo-helm-charts5.1.01 of 1See more

traefik komailo-helm-charts 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/traefik:v3.7.1324841fe2de73
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

267
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
golang.org/x/net@v0.17.0
stdlib@go1.22.0
0.60.0
1.26.9

Open the chart page →

1,971
komoplanekomodorVerified publisher0.1.81 of 1See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
komodorio/komoplane:0.2.19678d02c3f2e
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

1,360
magpiekorioincVerified publisher0.1.01 of 1See more

magpie korioinc 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/yetone/magpie:latest0916bb851298
golang.org/x/net@v0.56.0
0.60.0

Open the chart page →

534
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
golang.org/x/net@v0.29.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

1,497
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
golang.org/x/net@v0.23.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

1,785
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
golang.org/x/net@v0.43.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

2,897
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.13.15
0.60.0
1.26.9

Open the chart page →

4,443
krakenkraken0.2.01 of 7See more

kraken kraken 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
stdlib@go1.16.7
1.26.9

Open the chart page →

2,869
aggregation-layer-examplekrateo0.1.11 of 1See more

aggregation-layer-example krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/aggregation-layer-example:0.1.06a0ed8196346
golang.org/x/net@v0.4.0
stdlib@go1.19.5
0.60.0
1.26.9

Open the chart page →

2,370
appkrateo1.2.861 of 1See more

app krateo 1.2.86

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/app:1.2.86aaa3fe7d5c74
stdlib@go1.22.9
1.26.9

Open the chart page →

3,963
authnkrateo0.23.01 of 1See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/authn:0.23.0791c8f9d885a
golang.org/x/net@v0.38.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

1,210
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:1665b16a8b326e
stdlib@go1.24.6
1.26.9

Open the chart page →

1,816
azuredevops-providerkrateo0.23.12 of 2See more

azuredevops-provider krateo 0.23.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/krateoplatformops/azuredevops-provider:0.23.150f8f704df3d
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

1,121
azuredevops-provider-chartkrateo0.16.12 of 2See more

azuredevops-provider-chart krateo 0.16.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/krateoplatformops/azuredevops-provider:0.16.1d251f3e44714
golang.org/x/net@v0.7.0
stdlib@go1.19.5
0.60.0
1.26.9

Open the chart page →

2,095
azuredevops-provider-kogkrateo0.1.01 of 1See more

azuredevops-provider-kog krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/azuredevops-rest-dynamic-controller-plugin:0.0.586f36ba6fcc5
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

928
azure-pricing-rest-dynamic-controller-pluginkrateo0.1.11 of 1See more

azure-pricing-rest-dynamic-controller-plugin krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/azure-pricing-rest-dynamic-controller-plugin:0.1.068bd2c3fbf57
golang.org/x/net@v0.30.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

975
backendkrateo0.15.31 of 1See more

backend krateo 0.15.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/backend:0.15.383743fcca3a7
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

1,477
bffkrateo0.8.81 of 1See more

bff krateo 0.8.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/bff:0.8.7799eeacbf9a0
golang.org/x/net@v0.33.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

1,017
capi-watcherkrateo0.1.01 of 1See more

capi-watcher krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/capi-watcher:0.1.0fa01a157d972
golang.org/x/net@v0.4.0
stdlib@go1.19.2
0.60.0
1.26.9

Open the chart page →

1,917
composition-watcherkrateo0.1.51 of 1See more

composition-watcher krateo 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/composition-watcher:0.1.4ef3b17c07cfc
golang.org/x/net@v0.28.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

1,046
core-providerkrateo1.0.02 of 2See more

core-provider krateo 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/chart-inspector:1.0.0264ba5302f8e
golang.org/x/net@v0.48.0
stdlib@go1.25.6
0.60.0
1.26.9
ghcr.io/krateoplatformops/core-provider:1.0.0363cdedfa59f
golang.org/x/net@v0.52.0
stdlib@go1.25.6
0.60.0
1.26.9

Open the chart page →

2,675
deviserkrateo0.7.11 of 1See more

deviser krateo 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deviser:0.7.18310717431b2
golang.org/x/net@v0.51.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

563
etcdkrateo11.1.31 of 1See more

etcd krateo 11.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/etcd:3.5.19-debian-12-r00d68858b2699
golang.org/x/net@v0.33.0
stdlib@go1.23.7
0.60.0
1.26.9

Open the chart page →

3,194
eventrouterkrateo0.6.51 of 1See more

eventrouter krateo 0.6.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/eventrouter:0.6.030121418adfa
golang.org/x/net@v0.43.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

749
eventrouter-kafka-producerkrateo0.1.11 of 1See more

eventrouter-kafka-producer krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventrouter-kafka-producer:0.1.155b18c0dda37
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.19.2
0.60.0
1.26.9

Open the chart page →

2,507
events-ingesterkrateo0.5.31 of 1See more

events-ingester krateo 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/events-ingester:0.5.3e917b25f6b49
golang.org/x/net@v0.51.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

563
events-presenterkrateo0.9.31 of 1See more

events-presenter krateo 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/events-presenter:0.9.381b8ad5e4178
golang.org/x/net@v0.51.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

587
eventssekrateo0.5.91 of 1See more

eventsse krateo 0.5.9

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/eventsse:0.5.8b65eb9c88669
golang.org/x/net@v0.38.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

880
finops-composition-definition-parserkrateo0.1.41 of 1See more

finops-composition-definition-parser krateo 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-composition-definition-parser:0.1.2d9d82c32f418
golang.org/x/net@v0.38.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

1,514
finops-database-handler-uploaderkrateo0.2.11 of 1See more

finops-database-handler-uploader krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler-uploader:0.2.131ee1096bc9c
golang.org/x/net@v0.38.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

782
finops-example-pricing-vm-azurekrateo0.2.141 of 1See more

finops-example-pricing-vm-azure krateo 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.32.0d69cd9c163db
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

1,818
finops-http-rest-queuekrateo0.1.01 of 1See more

finops-http-rest-queue krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-http-rest-queue:0.1.0eaa0801e29a7
stdlib@go1.22.1
1.26.9

Open the chart page →

1,294
finops-moving-window-microservicekrateo0.1.01 of 1See more

finops-moving-window-microservice krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-moving-window-microservice:0.1.01c9a888ee58f
golang.org/x/net@v0.36.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

1,209
finops-nats-subscriberkrateo0.1.01 of 1See more

finops-nats-subscriber krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-nats-subscriber:0.1.0761d96bf2d9c
golang.org/x/net@v0.27.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

1,534
finops-notebookskrateo0.1.11 of 1See more

finops-notebooks krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

5,052
finops-operator-exporterkrateo0.5.21 of 1See more

finops-operator-exporter krateo 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-exporter:0.5.17444eb2107f6
golang.org/x/net@v0.38.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

953
finops-operator-focuskrateo0.4.31 of 1See more

finops-operator-focus krateo 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-focus:0.4.346a16edcb62e
golang.org/x/net@v0.34.0
stdlib@go1.23.0
0.60.0
1.26.9

Open the chart page →

1,073
finops-operator-scraperkrateo0.5.11 of 1See more

finops-operator-scraper krateo 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-scraper:0.5.15523ff02e511
golang.org/x/net@v0.34.0
stdlib@go1.23.0
0.60.0
1.26.9

Open the chart page →

1,073
finops-operator-vm-managerkrateo0.1.21 of 2See more

finops-operator-vm-manager krateo 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-vm-manager:0.1.215f804bdd1e8
golang.org/x/net@v0.19.0
stdlib@go1.21.12
0.60.0
1.26.9

Open the chart page →

1,170
frontendkrateo1.0.301 of 1See more

frontend krateo 1.0.30

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/frontend:1.0.300e71b5572579
stdlib@go1.26.8
1.26.9

Open the chart page →

178
frontend-providerkrateo0.3.01 of 1See more

frontend-provider krateo 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/frontend-provider:0.3.084c3219b00a2
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.60.0
1.26.9

Open the chart page →

1,614
github-providerkrateo0.2.21 of 1See more

github-provider krateo 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/github-provider:0.2.2c9438109f23d
golang.org/x/net@v0.28.0
stdlib@go1.23.0
0.60.0
1.26.9

Open the chart page →

1,091
github-provider-kogkrateo0.2.11 of 1See more

github-provider-kog krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/github-rest-dynamic-controller-plugin:0.0.35705f43dcafb
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

928
git-providerkrateo0.13.01 of 1See more

git-provider krateo 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-provider:0.10.061deb827aa9f
golang.org/x/net@v0.43.0
stdlib@go1.25.0
0.60.0
1.26.9

Open the chart page →

1,267
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

4,488
installer-post-upgrade-2-5-1krateo1.0.11 of 1See more

installer-post-upgrade-2-5-1 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

3,273
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

3,273
installer-pre-upgrade-2-5-0krateo1.0.11 of 1See more

installer-pre-upgrade-2-5-0 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

3,273
installer-pre-upgrade-2-5-1krateo1.0.11 of 1See more

installer-pre-upgrade-2-5-1 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

3,273

Container images carrying it

6,182 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

No deployed image carries CVE-2026-97032.

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.