CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,564; of 18,087 indexed, latest versions
Container images: 6,417; deployed by those charts
Fix available: 6 of 9; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,564 of 18,087 indexed charts deploy, on 6,417 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,392
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,161
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-387c-5f4p-4rh4 CGA-4653-rw6m-872g CGA-4h9w-grf4-6jpp CGA-8xvx-5mh6-vrc3 CGA-f937-jwj2-rj5j CGA-fjhw-67fq-pm89 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-3qgw-9846-f468, CGA-499x-7xc5-927w, CGA-4qpc-rjrp-f4h4, CGA-5pv4-5xjw-qg97, CGA-5rcr-cqmr-f8hp, CGA-5vh8-jrpp-m4r3, CGA-8g7x-r6mw-97j8, CGA-8mf9-xfh8-jx3h, CGA-923f-66wm-xfq4, CGA-9hgh-r65w-7q99, CGA-fjfp-jwwq-vjp3, CGA-gg5j-j7wm-wf6w, CGA-jrgf-gwq3-rf5w, CGA-m46j-x3g6-mqj4, CGA-mq7q-c763-9cvx, CGA-p4p3-mvmj-v95v, CGA-qpfw-4v8x-3667, CGA-qpqr-hw3x-7qxj, CGA-qqxw-hjpg-6rhv, CGA-r654-5gg7-p6xf, CGA-rggh-6rrq-mfp4, CGA-rwc6-gqq6-4p7r, CGA-vh2x-9247-h576, CGA-w2j8-94m3-rxc6, CGA-w2rp-6hc9-f8qw, CGA-w39g-2gpg-cfqr
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,564 by stars

Chart

Latest

Affected images

Radar Score

apishiftapishift

0.3.0

1 of 4 See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	golang.org/x/net@v0.25.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

3,701

api-usage-cleanerapi-usage-cleaner

1.16.0

1 of 1 See more

api-usage-cleaner api-usage-cleaner 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.26.9

Open the chart page →

935

d.vazquezm.2021_helmapphelm

1.0.0

2 of 6 See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.26.9
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.26.9

Open the chart page →

24,882

app-mobilityappmo

0.1.0

3 of 5 See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c stdlib@go1.18.5	0.60.0 1.26.9
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.60.0 1.26.9
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

15,653

app-movies-seriesapp-movies-series

0.1.0

1 of 2 See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.26.9

Open the chart page →

4,488

accounts-uiappscode

2026.9.11

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

2,887

aceappscode

2026.9.11

2 of 2 See more

ace appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

3,512

ace-installerappscode

2026.9.11

2 of 2 See more

ace-installer appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/registry :3.1.1	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

3,871

ace-installer-certifiedappscode

2026.9.11

2 of 2 See more

ace-installer-certified appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/registry :3.1.1	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9
ghcr.io/appscode/b3 :v2026.9.11	4b5993768740	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

4,039

acerproxyappscode

2026.9.11

1 of 1 See more

acerproxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,753

aceshifterappscode

2026.9.11

1 of 1 See more

aceshifter appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/aceshifter :v0.0.3	e5f5c254a55a	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,415

appcatalogappscode

2023.3.23

1 of 1 See more

appcatalog appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/appcatalog :v0.0.1	09709a346888	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,299

appscode-otel-stackappscode

2026.9.22

3 of 3 See more

appscode-otel-stack appscode 2026.9.22

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.150.0	89490ef63b72	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9
quay.io/brancz/kube-rbac-proxy :v0.20.0	147cb28fea35	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.60.0 1.26.9

Open the chart page →

2,574

auditorappscode

2023.10.1

1 of 1 See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/auditor :v0.0.1	c62c89ee706d	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,449

aws-credential-managerappscode

2026.4.16

1 of 1 See more

aws-credential-manager appscode 2026.4.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/aws-credential-manager :v0.1.0	0511bbe501c3	golang.org/x/net@v0.53.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

910

azure-credential-managerappscode

2026.4.16

1 of 1 See more

azure-credential-manager appscode 2026.4.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/azure-credential-manager :v0.1.0	f5c797f7fbe7	golang.org/x/net@v0.49.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

1,189

billingappscode

2026.9.11

1 of 1 See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

2,887

capa-vpc-peering-operatorappscode

2023.12.11

1 of 1 See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/capa-vpc-peering-operator :v0.0.4	b1557553a2b3	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,019

capi-ops-managerappscode

2024.8.14

2 of 2 See more

capi-ops-manager appscode 2024.8.14

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/capi-ops-manager :v0.0.5	7465f35b684c	golang.org/x/net@v0.33.0 stdlib@go1.23.2	0.60.0 1.26.9
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9

Open the chart page →

5,193

catalog-managerappscode

2026.9.11

1 of 1 See more

catalog-manager appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/catalog-manager :v0.14.0	5e9a05238ed5	golang.org/x/net@v0.57.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

266

cattlesetappscode

2026.7.8

1 of 1 See more

cattleset appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cattleset :v0.0.1	45554a03e448	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

966

cert-manager-csi-driver-cacertsappscode

2026.9.18

3 of 3 See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/csi-driver-cacerts :v0.6.0	ab213b156017	golang.org/x/net@v0.47.0 stdlib@go1.25.13	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

3,720

cert-manager-webhook-aceappscode

2026.9.11

1 of 1 See more

cert-manager-webhook-ace appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,740

clickhouse-uiappscode

2026.3.30

1 of 1 See more

clickhouse-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/caioricciuti/ch-ui :v2.14.1	80f4d92c2d8d	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

128

cluster-auth-agentappscode

2026.2.16

1 of 1 See more

cluster-auth-agent appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,360

cluster-auth-managerappscode

2026.2.16

1 of 1 See more

cluster-auth-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,360

cluster-connectorappscode

2025.12.15

1 of 1 See more

cluster-connector appscode 2025.12.15

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cluster-connector :v0.0.14	0efd9d9ef6ca	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

982

cluster-gatewayappscode

2026.6.26

1 of 1 See more

cluster-gateway appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-gateway :v1.12.1	58bed8d1e7fc	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

952

cluster-gateway-managerappscode

2026.6.26

1 of 1 See more

cluster-gateway-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-gateway-manager :v1.12.1	f22cae0e6cf3	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

952

cluster-importerappscode

2026.9.11

1 of 1 See more

cluster-importer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

1,400

cluster-manager-hubappscode

2026.2.16

1 of 1 See more

cluster-manager-hub appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/registration-operator :v1.2.0	0cbced8e6240	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

1,465

cluster-presetsappscode

2026.9.11

1 of 1 See more

cluster-presets appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cluster-presets :v0.0.12	8fbdd2479645	golang.org/x/net@v0.55.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

667

cluster-profile-managerappscode

2026.9.18

1 of 1 See more

cluster-profile-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-profile :v0.13.0	b8b0aaef2543	golang.org/x/net@v0.58.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

320

cluster-proxyappscode

2024.2.25

1 of 1 See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-proxy :latest	27a5c64b7ea8	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

1,684

cluster-proxy-managerappscode

2026.6.26

1 of 1 See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-proxy :v0.10.1	a7fce69e171c	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.60.0 1.26.9

Open the chart page →

2,193

crd-managerappscode

2026.10.10

1 of 1 See more

crd-manager appscode 2026.10.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.4.0	4466bb77dc78	golang.org/x/net@v0.47.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

1,023

dns-proxyappscode

2026.9.11

1 of 1 See more

dns-proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,017

docker-machine-operatorappscode

2024.7.9

1 of 1 See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	golang.org/x/net@v0.14.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,878

external-dns-operatorappscode

2026.6.22

1 of 1 See more

external-dns-operator appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/external-dns-operator :v0.4.0	5605f97e636d	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

603

falco-ui-serverappscode

2026.1.15

2 of 2 See more

falco-ui-server appscode 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

3,926

fargocdappscode

2026.9.18

1 of 1 See more

fargocd appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fargocd :v0.1.0	c59d775d9a7c	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

653

fargocd-managerappscode

2026.9.18

1 of 1 See more

fargocd-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fargocd :v0.1.0	c59d775d9a7c	golang.org/x/net@v0.55.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

653

fluxcd-addon-managerappscode

2024.2.25

1 of 1 See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/fluxcd-addon :v0.0.2	3acba3df8827	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,841

fluxcd-managerappscode

2026.9.18

1 of 1 See more

fluxcd-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/fluxcd-addon :v0.0.11	37105f529ed0	golang.org/x/net@v0.47.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

612

gateway-converterappscode

2024.8.30

1 of 1 See more

gateway-converter appscode 2024.8.30

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway-converter :v0.0.1	b92123805584	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,761

gcp-credential-managerappscode

2026.3.11

1 of 1 See more

gcp-credential-manager appscode 2026.3.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/gcp-credential-manager :v0.1.0	b58345fe8209	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,403

gh-ci-webhookappscode

2026.9.11

1 of 1 See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/gh-ci-webhook :v0.0.20	36ce246d884e	golang.org/x/net@v0.33.0 stdlib@go1.24.0	0.60.0 1.26.9

Open the chart page →

1,922

grafanaappscode

2026.9.11

1 of 1 See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/grafana :v2025.2.3	67d18880448c	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,394

grafana-operatorappscode

2026.6.12

1 of 1 See more

grafana-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/grafana-tools :v0.8.0	77c9d29080eb	golang.org/x/net@v0.52.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

558

grafana-opscenterappscode

2023.3.23

1 of 1 See more

grafana-opscenter appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/grafana-tools :v0.0.2	2c7b9b0a9101	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.60.0 1.26.9

Open the chart page →

2,143

Container images carrying it

6,417 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2 :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.26.9	7
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.60.0 1.26.9	7
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.60.0 1.26.9	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.60.0 1.26.9	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-resizer :v2.2.1	ea1d25e23479	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	7
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	7
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	6
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.9	6
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	6
cloudflare/cloudflared :2026.10.0 :latest	9b49eed8f628	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	6
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9	6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9	6
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.60.0 1.26.9	6
library/mariadb :10 :10.11	7db29378d4fd	stdlib@go1.24.6	1.26.9	6
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.26.9	6
library/postgres :17	d74eeac9a635	stdlib@go1.24.6	1.26.9	6
library/registry :2 :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.9	6
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.9	6
postgis/postgis :17-3.5 :latest	01a6a70e41e6	stdlib@go1.18.2	1.26.9	6
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9	6
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9	6
traefik/whoami :latest :v1.12.0	c4717a8d1f01	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	6
victoriametrics/operator :v0.75.0	78da26b41a81	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	6
ghcr.io/appscode/b3 :v2026.9.11	49b706354a6f	golang.org/x/net@v0.57.0 stdlib@go1.25.3	0.60.0 1.26.9	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.60.0 1.26.9	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.9	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.60.0 1.26.9	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.60.0 1.26.9	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.60.0 1.26.9	6
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.9	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.60.0 1.26.9	6
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.60.0 1.26.9	6
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9	6
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0 stdlib@go1.25.3	0.60.0 1.26.9	6
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	6
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	6
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.60.0 1.26.9	6