CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,401; of 18,104 indexed, latest versions
Container images: 6,250; deployed by those charts
Fix available: 2 of 4; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,401 of 18,104 indexed charts deploy, on 6,250 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,223
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,000
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1

OSV records: CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,401 by stars

Chart

Latest

Affected images

Radar Score

pax-prometheuspaxtecnologia

0.7.3

7 of 8 See more

pax-prometheus paxtecnologia 0.7.3

7 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

4,106

stk-fluent-bit-loki-s3paxtecnologia

0.2.1

2 of 6 See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.1

2 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.11	44148ad243c0	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

4,828

archive-analysispcp-helm-charts

1.0.1

1 of 1 See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/performancecopilot/archive-analysis :latest	8bb7902a3e4b	golang.org/x/net@v0.19.0	0.60.0

Open the chart page →

1,918

everest-db-namespacepercona

1.13.0

1 of 1 See more

everest-db-namespace percona 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
percona/everest-helmtools :0.0.1	904458d04a18	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

1,252

pmm-ha-dependenciespercona

1.0.0

4 of 4 See more

pmm-ha-dependencies percona 1.0.0

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.25.4	1d6f18dbd599	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.60.0 1.26.9
altinity/metrics-exporter :0.25.4	6ecf67edfb71	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.60.0 1.26.9
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.60.0 1.26.9
victoriametrics/operator :v0.65.0	716b89a3ed79	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

4,394

ps-operatorpercona

1.2.0

1 of 1 See more

ps-operator percona 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

644

permission-managerpermission-manager

1.0.0-seal

1 of 1 See more

permission-manager permission-manager 1.0.0-seal

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.60.0 1.26.9

Open the chart page →

3,398

perses-operatorperses

0.5.0

2 of 2 See more

perses-operator perses 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
persesdev/perses-operator :v0.5.0	8f8d7b09caef	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.22.1	e8cad21b2f9a	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

807

matomopetbattle

11.0.1

2 of 2 See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.26.9
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	stdlib@go1.25.0	1.26.9

Open the chart page →

13,505

pet-battle-infrapetbattle

1.0.32

2 of 2 See more

pet-battle-infra petbattle 1.0.32

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.60.0 1.26.9

Open the chart page →

17,885

pet-battle-tournamentpetbattle

1.0.40

2 of 3 See more

pet-battle-tournament petbattle 1.0.40

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :latest	486bf8e8f5b5	golang.org/x/net@v0.47.0 stdlib@go1.24.11	0.60.0 1.26.9
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.60.0 1.26.9

Open the chart page →

17,885

mariadbpetersandor

15.2.5

1 of 1 See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mariadb :11.7.2	16a7dae804fb	stdlib@go1.22.12	1.26.9

Open the chart page →

3,569

mongodbpetersandor

14.1.8

1 of 1 See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

5,459

redispetersandor

15.2.2

1 of 1 See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/redis :7.4.2	4e65bf641805	stdlib@go1.23.8	1.26.9

Open the chart page →

3,405

lan-orangutanpeterweissdk

0.1.0

1 of 1 See more

lan-orangutan peterweissdk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/291-group/lan-orangutan :3.3.8	86b55c80eeb1	stdlib@go1.25.12	1.26.9

Open the chart page →

478

pgcopydb-operatorpgcopydb-operator

0.20.0

1 of 1 See more

pgcopydb-operator pgcopydb-operator 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/ydixken/pgcopydb-operator :v0.20.0	fe18e854c7ef	golang.org/x/net@v0.59.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

213

pgdogpgdog

0.89.0

1 of 1 See more

pgdog pgdog 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/pgdogdev/pgdog :v0.1.60	25d1908886f5	stdlib@go1.26.7	1.26.9

Open the chart page →

766

whoamiphilippwaller

1.0.3

1 of 1 See more

whoami philippwaller 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.26.9

Open the chart page →

1,893

codimdphntom

0.1.12

1 of 3 See more

8,176

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.60.0 1.26.9

Open the chart page →

2,779

external-dns-host-networkphntom

0.0.12

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

6,571

goalertphntom

0.0.29

1 of 1 See more

goalert phntom 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

1,716

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

4,184

loki-stackphntom

2.10.2

2 of 2 See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.60.0 1.26.9
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

8,409

mindavphntom

0.1.6

1 of 2 See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

5,728

npre-essentialsphntom

0.1.60

13 of 22 See more

npre-essentials phntom 0.1.60

13 of the 22 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.60.0 1.26.9
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.60.0 1.26.9
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.60.0 1.26.9
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.60.0 1.26.9
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.60.0 1.26.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9
quay.io/prometheuscommunity/elasticsearch-exporter :v1.5.0	13a41e8ac836	stdlib@go1.18.4	1.26.9
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

39,239

prometheus-elasticsearch-exporterphntom

4.5.1

1 of 2 See more

prometheus-elasticsearch-exporter phntom 4.5.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.26.9

Open the chart page →

3,117

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	stdlib@go1.19	1.26.9

Open the chart page →

94,572

picoclawpicoclaw

0.1.26

1 of 1 See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/mattn/picoclaw :latest	517556c8b144	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

1,995

piepie

0.11.1

1 of 1 See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/pie :0.18.0	aa467443e407	golang.org/x/net@v0.49.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

2,712

piggy-webhookspiggy

0.7.6

1 of 1 See more

piggy-webhooks piggy 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kongz/piggy-webhooks :0.7.6	9197edc00bbf	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

205

pagespighosh-pages

1.0.0

1 of 3 See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,311

pii-shieldpii-shield

2.2.7

1 of 1 See more

pii-shield pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
thelisdeep/pii-shield :2.2.7	6a8b0c89227b	stdlib@go1.27.1	1.27.2

Open the chart page →

141

pii-shield-operatorpii-shield

2.2.7

1 of 1 See more

pii-shield-operator pii-shield 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/pii-shield/pii-shield-operator :2.2.7	1d21a4b3683c	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

224

pillar-csipillar-csi

0.5.4

8 of 9 See more

pillar-csi pillar-csi 0.5.4

8 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/isac322/pillar-csi/agent :0.5.4	adb7fecffc4e	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/isac322/pillar-csi/controller :0.5.4	f9eea76ec045	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/isac322/pillar-csi/node :0.5.4	835432e4ddf1	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
registry.k8s.io/sig-storage/csi-attacher :v4.13.0	d1a26170efed	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.18.0	b7fefd08651f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.20.0	19f2cf2f40e1	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

2,272

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

2,351

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.60.0 1.26.9

Open the chart page →

4,663

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

8,634

substreams-sink-kvpinax

0.0.4

1 of 1 See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9

Open the chart page →

59,737

substreams-sink-nooppinax

0.0.3

1 of 1 See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.60.0 1.26.9

Open the chart page →

59,668

substreams-tier-2pinax

0.0.8

1 of 1 See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

6,204

pipekit-agentpipekit-helm

8.4.0

1 of 1 See more

pipekit-agent pipekit-helm 8.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
pipekit13/agent :v8.4.0	50afc3bd0158	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

378

pipelockpipelock

3.6.0

1 of 1 See more

pipelock pipelock 3.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/luckypipewrench/pipelock :3.6.0	66d65eaca81d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

205

pixie-operator-chartpixie

0.1.7

1 of 3 See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	1b6002156f56	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

2,634

pixie-operator-helm2-chartpixie

0.1.2

1 of 2 See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	f9ea8cef95ac	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

2,606

planectlplanectl

0.7.0

6 of 10 See more

planectl planectl 0.7.0

6 of the 10 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.22.3	0.60.0 1.26.9
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	stdlib@go1.24.6	1.26.9
gitea/act_runner :0.2.11	c57233403eff	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.60.0 1.26.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.26.9
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/net@v0.34.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

32,025

account-operatorplatform-mesh-account-operator

0.21.1

1 of 1 See more

account-operator platform-mesh-account-operator 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/account-operator :v0.15.5	fa4923226063	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

223

extension-manager-operatorplatform-mesh-extension-manager-operator

0.43.0

1 of 1 See more

extension-manager-operator platform-mesh-extension-manager-operator 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator :v0.10.0	9371fcf05f76	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

223

kubernetes-graphql-gatewayplatform-mesh-kubernetes-graphql-gateway

0.53.0

1 of 1 See more

kubernetes-graphql-gateway platform-mesh-kubernetes-graphql-gateway 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway :v1.20.0	2e6c9c111893	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

227

platform-mesh-operatorplatform-mesh-operator

0.47.0

1 of 1 See more

platform-mesh-operator platform-mesh-operator 0.47.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator :v0.89.0	b26d85c68aa8	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

223

Container images carrying it

6,250 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9	2
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9	2
ghcr.io/browserless/chromium :v2.57.0	6bac628b3d82	stdlib@go1.26.7	1.26.9	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.60.0 1.26.9	2
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.60.0 1.26.9	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0 stdlib@go1.24.7	0.60.0 1.26.9	2
ghcr.io/cerbos/cerbos :0.56.0	540643bc67ba	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.19.7	0.60.0 1.26.9	2
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.60.0 1.26.9	2
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.60.0 1.26.9	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.60.0 1.26.9	2
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.15	0.60.0 1.26.9	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.26.9	2
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.26.9	2
ghcr.io/dellnoantechnp/bitnami/redis :8.4.0	29064423c369	stdlib@go1.25.6	1.26.9	2
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.60.0 1.26.9	2
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.60.0 1.26.9	2
ghcr.io/donkie/spoolman :0.27.0	7aba565eff77	stdlib@go1.19.8	1.26.9	2
ghcr.io/eosc-lot-1/curl-jq :8	156beafae7ca	golang.org/x/net@v0.15.0 stdlib@go1.21.10	0.60.0 1.26.9	2
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.60.0 1.26.9	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	2
ghcr.io/gotify/server :3.1.1	44fc5bbd1c06	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9	2
ghcr.io/grafana/grafana-operator :v5.25.0	bc572995823f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0 stdlib@go1.23.6	0.60.0 1.26.9	2
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	2
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	golang.org/x/net@v0.56.0 stdlib@go1.26.7	0.60.0 1.26.9	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	stdlib@go1.18.2	1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.4	76a2170cd0c9	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.7.4	7a62bba56a7c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.3	8ce13c365c8e	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	2
ghcr.io/jkroepke/kube-webhook-certgen :1.8.5	d0e80b2f62fe	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/jont828/cluster-api-visualizer :v1.5.0	678ba6833297	golang.org/x/net@v0.42.0 stdlib@go1.24.11	0.60.0 1.26.9	2
ghcr.io/juanfont/headscale :0.29.4 :v0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r5	136348264b41	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9	2
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0 stdlib@go1.23.4	0.60.0 1.26.9	2
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9	2
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9	2
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	2
ghcr.io/krateoplatformops/installer/installer :0.6.3	a7e922ddac55	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/krateoplatformops/kubectl :1.32.0	d69cd9c163db	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9	2
ghcr.io/kubestash/kubestash :v0.29.0	0686b2a40280	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9	2
ghcr.io/kubestash/kubestash :v0.30.0	4ff37f9863d5	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9	2
ghcr.io/kyverno/readiness-checker :v1.19.1	31bb42ce7f5b	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9	2
ghcr.io/libredb/libredb-studio :0.18.3	7cac22734b0f	stdlib@go1.24.4	1.26.9	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	golang.org/x/net@v0.37.0 stdlib@go1.24.5	0.60.0 1.26.9	2