CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,564; of 18,087 indexed, latest versions
Container images: 6,417; deployed by those charts
Fix available: 6 of 9; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,564 of 18,087 indexed charts deploy, on 6,417 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,392
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,161
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-387c-5f4p-4rh4 CGA-4653-rw6m-872g CGA-4h9w-grf4-6jpp CGA-8xvx-5mh6-vrc3 CGA-f937-jwj2-rj5j CGA-fjhw-67fq-pm89 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-3qgw-9846-f468, CGA-499x-7xc5-927w, CGA-4qpc-rjrp-f4h4, CGA-5pv4-5xjw-qg97, CGA-5rcr-cqmr-f8hp, CGA-5vh8-jrpp-m4r3, CGA-8g7x-r6mw-97j8, CGA-8mf9-xfh8-jx3h, CGA-923f-66wm-xfq4, CGA-9hgh-r65w-7q99, CGA-fjfp-jwwq-vjp3, CGA-gg5j-j7wm-wf6w, CGA-jrgf-gwq3-rf5w, CGA-m46j-x3g6-mqj4, CGA-mq7q-c763-9cvx, CGA-p4p3-mvmj-v95v, CGA-qpfw-4v8x-3667, CGA-qpqr-hw3x-7qxj, CGA-qqxw-hjpg-6rhv, CGA-r654-5gg7-p6xf, CGA-rggh-6rrq-mfp4, CGA-rwc6-gqq6-4p7r, CGA-vh2x-9247-h576, CGA-w2j8-94m3-rxc6, CGA-w2rp-6hc9-f8qw, CGA-w39g-2gpg-cfqr
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,564 by stars

Chart

Latest

Affected images

Radar Score

librechatlibrechat-openshift

1.9.0

1 of 3 See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :8.0.20	098862b1339f	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

6,745

libredb-studiolibredb-studio

0.1.81

1 of 1 See more

libredb-studio libredb-studio 0.1.81

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/libredb/libredb-studio :0.18.2	1b4051ca999a	stdlib@go1.24.4	1.26.9

Open the chart page →

1,405

local-ailocalai

3.4.2

1 of 1 See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/go-skynet/local-ai :latest	f1bc435659b9	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

3,986

vclustermain

0.17.0

7 of 10 See more

vcluster main 0.17.0

7 of the 10 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/etcd :3.6.4-0	e36c08168342	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.60.0 1.26.9

Open the chart page →

16,571

stannats

0.13.0

1 of 2 See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
natsio/prometheus-nats-exporter :latest	c623b608e148	stdlib@go1.26.6	1.26.9

Open the chart page →

288

headplanenbcloud

0.1.2

3 of 4 See more

headplane nbcloud 0.1.2

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	stdlib@go1.23.4	1.26.9

Open the chart page →

10,086

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

2,352

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0 stdlib@go1.21.7	0.60.0 1.26.9

Open the chart page →

3,388

nri-memtierdnri-plugins

0.14.0

1 of 1 See more

nri-memtierd nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memtierd :v0.14.0	9138314e12ba	stdlib@go1.26.0	1.26.9

Open the chart page →

531

goldpingerokgolove

6.2.0

1 of 1 See more

goldpinger okgolove 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bloomberg/goldpinger :3.10.0	8520120f5598	golang.org/x/net@v0.17.0 stdlib@go1.21.9	0.60.0 1.26.9

Open the chart page →

1,270

geonodeone-acre-fund

0.1.16

1 of 7 See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

2,733

open5gsopen5gs

2.3.8

3 of 5 See more

open5gs open5gs 2.3.8

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.26.9
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/net@v0.34.0 stdlib@go1.22.11	0.60.0 1.26.9

Open the chart page →

12,640

psmdb-operatorpercona

1.23.2

1 of 1 See more

psmdb-operator percona 1.23.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
percona/percona-server-mongodb-operator :1.23.1	78c87b933e18	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

164

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

9,882

capsuleprojectcapsule

0.14.6

2 of 2 See more

capsule projectcapsule 0.14.6

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9
ghcr.io/projectcapsule/capsule :v0.14.6	ac02588e65e8	golang.org/x/net@v0.57.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,920

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

1,249

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

1,175

prometheus-nginx-exporterprometheus-community

1.23.1

1 of 1 See more

prometheus-nginx-exporter prometheus-community 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
nginx/nginx-prometheus-exporter :1.5.3	85666e7fde7e	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

166

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

1,727

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

1,249

proxmox-cloud-controller-managerproxmox-ccm

0.2.32

1 of 1 See more

proxmox-cloud-controller-manager proxmox-ccm 0.2.32

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager :v0.16.1	474dbfd3be5c	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

128

pvc-autoresizerpvc-autoresizer

0.20.1

1 of 1 See more

pvc-autoresizer pvc-autoresizer 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/pvc-autoresizer :0.21.2	d7885d57f6f9	golang.org/x/net@v0.56.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

137

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.60.0

Open the chart page →

4,708

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

1,875

argo-watchershini4i

1.4.1

1 of 1 See more

argo-watcher shini4i 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/shini4i/argo-watcher :v1.4.2	0faab179997f	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

128

fulciosigstore

2.11.4

5 of 6 See more

fulcio sigstore 2.11.4

5 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/fulcio :v1.9.0	2de0226c5f82	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	4d64dac937e2	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.33	e591f98e3899	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/createtree :v0.7.33	4c845ced03d8	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9
ghcr.io/sigstore/scaffolding/ct_server :v0.7.33	24293fa1ed50	golang.org/x/net@v0.47.0 stdlib@go1.25.0	0.60.0 1.26.9

Open the chart page →

4,935

policy-controllersigstore

0.10.8

1 of 2 See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned	0bcd60beb93f	golang.org/x/net@v0.39.0 stdlib@go1.24.7	0.60.0 1.26.9

Open the chart page →

1,355

pubsubplus-hasolace

3.10.0

1 of 1 See more

pubsubplus-ha solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	3c8a8b7fdcae	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

393

sops-secrets-operatorsops-secrets-operator

0.28.1

1 of 1 See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

1,268

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

2 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.60.0 1.26.9
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	golang.org/x/net@v0.48.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

6,796

superstreamsuperstream

0.9.62

3 of 3 See more

superstream superstream 0.9.62

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.10.25-alpine	3290c829aa05	stdlib@go1.23.5	1.26.9
natsio/nats-server-config-reloader :0.16.1	bf97e5e9b9d2	stdlib@go1.23.3	1.26.9
natsio/prometheus-nats-exporter :0.16.0	54b0d7ff058e	stdlib@go1.23.4	1.26.9

Open the chart page →

4,928

topolvmtopolvm

17.3.0

1 of 1 See more

topolvm topolvm 17.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.42.0	719ab11d974a	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,508

trivy-operator-polr-adaptertrivy-operator-polr-adapter

0.11.5

1 of 1 See more

trivy-operator-polr-adapter trivy-operator-polr-adapter 0.11.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/fjogeleit/trivy-operator-polr-adapter :0.11.5	37029b4d464f	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

251

uffizzi-appuffizzi-app

1.3.0

8 of 14 See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0 stdlib@go1.20.14	0.60.0 1.26.9
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0 stdlib@go1.19.13	0.60.0 1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

25,848

valdvald

1.8.0

4 of 5 See more

vald vald 1.8.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
vdaas/vald-agent-ngt :v1.8.0	32e3695fe585	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
vdaas/vald-discoverer-k8s :v1.8.0	f6495f38ae92	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
vdaas/vald-lb-gateway :v1.8.0	61009e319a9a	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9
vdaas/vald-manager-index :v1.8.0	ab881d2262d8	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

780

vault-secrets-webhookvault-secrets-webhook

1.23.1

1 of 1 See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

775

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

2,713

wg-easywg-easy

0.1.6

1 of 1 See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15	0e7bc9d34e86	golang.org/x/net@v0.44.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,214

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

14,927

nfs-server-provisionerwso2

1.1.0

1 of 1 See more

nfs-server-provisioner wso2 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

4,027

yunikornyunikorn

1.10.0

3 of 3 See more

yunikorn yunikorn 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/yunikorn :scheduler-1.10.0	49fc54894fdf	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
apache/yunikorn :web-1.10.0	90e6a62a578a	stdlib@go1.26.7	1.26.9
apache/yunikorn :admission-1.10.0	95c6b951f38a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

375

matrixzekker6

3.32.0

1 of 4 See more

matrix zekker6 3.32.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.162.0	6b84a7bbac36	stdlib@go1.24.4	1.26.9

Open the chart page →

6,109

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.26.9
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.26.9

Open the chart page →

24,081

moon2aerokube

2.8.2

3 of 3 See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.8.2	072f3c5592dc	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/aerokube/moon-conf :2.8.2	35c465ab25d8	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/aerokube/moon-ui :2.8.2	f374d0b9953b	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

372

microgatewayairlock-microgateway

5.2.0

1 of 1 See more

microgateway airlock-microgateway 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/airlock/microgateway-operatordigest-pinned	48518d704307	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

124

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.26.9

Open the chart page →

4,744

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	golang.org/x/net@v0.30.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,783

tt-rssangelnu

7.0.0

1 of 2 See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/tt-rss :2.0.10080	9fb02162f151	stdlib@go1.26.7	1.26.9

Open the chart page →

923

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.26.9

Open the chart page →

5,034

aperture-controlleraperture

2.34.0

4 of 5 See more

aperture-controller aperture 2.34.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

7,350

Container images carrying it

6,417 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.60.0 1.26.9	1
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.60.0 1.26.9	1
broadinstitute/dsde-toolbox :master	656131886a08	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.10	0.60.0 1.26.9	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.12	0.60.0 1.26.9	1
buall/postgres-stack :18.6	881a785642cb	stdlib@go1.24.6	1.26.9	1
buddyspencer/gickup :0.10.38	6b656f19b0c1	golang.org/x/net@v0.37.0 stdlib@go1.22.5	0.60.0 1.26.9	1
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.60.0 1.26.9	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.7	0.60.0 1.26.9	1
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.60.0 1.26.9	1
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.60.0 1.26.9	1
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9	1
byjg/static-httpserver :0.5.1	bed29f3f45e8	stdlib@go1.26.8	1.26.9	1
bytebase/bytebase :latest	0b3a44dfac3e	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9	1
caarlos0/domain_exporter :v1.23.0	d11dec138900	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.60.0 1.26.9	1
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9	1
calico/cni :v3.28.1	e486870cfde8	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	1
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9	1
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	1
calico/node :v3.28.0	385bf6391fea	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9	1
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.60.0 1.26.9	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.60.0 1.26.9	1
camptocamp/mapserver :master	18959d939a66	stdlib@go1.26.5	1.26.9	1
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	1
caroga/commentoplusplus :v1.8.7	f3233882b3bd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.15	0.60.0 1.26.9	1
casbin/casdoor :4.18.0	30c176f544bc	golang.org/x/net@v0.58.0 stdlib@go1.25.8	0.60.0 1.26.9	1
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.5	0.60.0 1.26.9	1
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/net@v0.21.0 stdlib@go1.20.12	0.60.0 1.26.9	1
castopod/castopod :1.12.10	1fd37280cbb2	stdlib@go1.21.13	1.26.9	1
castopod/castopod :1.15.5	4e4f0440520f	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.15.3	0.60.0 1.26.9	1
censedata/floating-server :v1.6.3	ebfffb9dd4c0	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
certimate/certimate :v0.4.34	ff42541a047b	golang.org/x/net@v0.58.0 stdlib@go1.25.14	0.60.0 1.26.9	1
cesanta/docker_auth :1.14.0	98e0307e0d2d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.60.0 1.26.9	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.60.0 1.26.9	1
cgtysylr/cluster-octopus :1.0.0	aec0f8a38a77	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.60.0 1.26.9	1
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9	1
chainflag/eth-faucet :latest	ac642796bcb6	stdlib@go1.17.13	1.26.9	1
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	stdlib@go1.20.12	1.26.9	1
chainsafe/lodestar :latest	c13eac6aada7	stdlib@go1.23.1	1.26.9	1
chandanteekinavar/findery-market-payment-service :1.0	c96f759b6ce4	golang.org/x/net@v0.25.0 stdlib@go1.19.13	0.60.0 1.26.9	1
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.15	0.60.0 1.26.9	1
chaosnative/cle-license-module :2.7.0	62cf6adc355e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.15	0.60.0 1.26.9	1
chaosnative/cle-server :2.7.0	e7bcff4a20c0	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.16.15	0.60.0 1.26.9	1
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.5	0.60.0 1.26.9	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9	1
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.26.9	1
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.8	0.60.0 1.26.9	1
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.60.0 1.26.9	1