StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,325
of 18,108 indexed, latest versions
Container images
6,126
deployed by those charts
Fix available
2 of 4
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,325 of 18,108 indexed charts deploy, on 6,126 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,104
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,888
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
OSV records
CGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,325 by stars
ChartLatestAffected imagesRadar Score
prometheusosc0.27.16 of 12See more

prometheus osc 0.27.1

6 of the 12 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.90.1ffe7c4ca80cb
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.60.0
1.26.9
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
golang.org/x/net@v0.9.0
stdlib@go1.20.4
0.60.0
1.26.9
quay.io/prometheus/pushgateway:v1.11.374fa117cef2d
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9
quay.io/utilitywarehouse/kube-summary-exporter:v0.4.8f1b148782af1
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.2ec5732e28f15
golang.org/x/net@v0.7.0
stdlib@go1.19.7
0.60.0
1.26.9

Open the chart page →

6,226
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
stdlib@go1.18.2
1.26.9
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
golang.org/x/net@v0.24.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

13,095
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.012 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

12 of the 40 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
golang.org/x/net@v0.38.0
stdlib@go1.23.10
0.60.0
1.26.9
library/arangodb:3.11.81e75d74954a4
stdlib@go1.21.5
1.26.9
library/mariadb:11.3.2e101f9db3191
stdlib@go1.18.2
1.26.9
library/postgres:17.5-alpine6567bca8d7bc
stdlib@go1.18.2
1.26.9
library/postgres:17.2-alpine7e5df973a748
stdlib@go1.18.2
1.26.9
library/redis:7.4.2-alpine02419de7eddf
stdlib@go1.18.2
1.26.9
prom/prometheus:v3.0.1565ee8650122
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.60.0
1.26.9
yetiplatform/bloomcheck:dev85683ddfccbb
stdlib@go1.24.2
1.26.9
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.60.0
1.26.9
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
golang.org/x/net@v0.24.0
stdlib@go1.22.5
0.60.0
1.26.9
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
golang.org/x/net@v0.55.0
stdlib@go1.25.11
0.60.0
1.26.9
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18.3
0.60.0
1.26.9

Open the chart page →

242,299
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
alpine/git:latesta4bb51f1a355
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,700
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
stdlib@go1.21.5
1.26.9

Open the chart page →

7,114
osm-edgeosm-edgeVerified publisher1.3.94 of 7See more

osm-edge osm-edge 1.3.9

4 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
flomesh/osm-edge-controller:1.3.9add7a4da4622
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
flomesh/osm-edge-injector:1.3.947287e3ad324
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
flomesh/osm-edge-preinstall:1.3.9bd224d55ed0f
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9

Open the chart page →

8,429
k8s-vault-webhookot-container-kit0.2.01 of 1See more

k8s-vault-webhook ot-container-kit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/k8s-vault-webhook:2.063b67ffcdb84
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.3
0.60.0
1.26.9

Open the chart page →

3,860
logging-operatorot-container-kit0.4.01 of 1See more

logging-operator ot-container-kit 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/logging-operator:v0.4.0fd8bb57ef3cf
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.10
0.60.0
1.26.9

Open the chart page →

2,823
lokiot-container-kit1.0.13 of 5See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/loki:3.1.0d947e68a84d9
golang.org/x/net@v0.23.0
stdlib@go1.22.2
0.60.0
1.26.9
grafana/promtail:3.0.0d3de3da9431c
golang.org/x/net@v0.22.0
stdlib@go1.21.9
0.60.0
1.26.9
prom/memcached-exporter:v0.14.2d8a61419b841
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

6,808
loki-standaloneot-container-kit1.0.22 of 5See more

loki-standalone ot-container-kit 1.0.2

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
quay.io/opstree/memcached-exporter:0.15.5-debian13cf8f8410eaad
golang.org/x/net@v0.47.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

4,918
mongodb-operatorot-container-kit0.3.11 of 1See more

mongodb-operator ot-container-kit 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/mongodb-operator:v0.3.0879b9bead838
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

2,928
mysqlot-container-kit0.1.01 of 1See more

mysql ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

880
otel-operatorot-container-kit1.0.11 of 1See more

otel-operator ot-container-kit 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/opentelemetry-operator:0.149.0-debian13a21405ab9a9a
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.60.0
1.26.9

Open the chart page →

647
ot-karpenterot-container-kit0.3.01 of 1See more

ot-karpenter ot-container-kit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/karpenter/controller:1.1.1fe383abf1dbc
golang.org/x/net@v0.30.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

1,025
pgaot-container-kit1.0.34 of 6See more

pga ot-container-kit 1.0.3

4 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.75.1a7cc63108511
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
golang.org/x/net@v0.22.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

7,584
tempo-standaloneot-container-kit1.0.11 of 1See more

tempo-standalone ot-container-kit 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

1,016
vmot-container-kit0.0.34 of 7See more

vm ot-container-kit 0.0.3

4 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
victoriametrics/operator:v0.47.271be93cfafb6
golang.org/x/net@v0.26.0
stdlib@go1.23.0
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

7,755
vm-standaloneot-container-kit0.0.44 of 6See more

vm-standalone ot-container-kit 0.0.4

4 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
quay.io/opstree/kube-state-metrics:2.18.0-debian1353525d253793
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.60.0
1.26.9
quay.io/opstree/node-exporter:1.11.1-alpine3.233b6b3a7eb001
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
quay.io/opstree/victoriametrics-operator:v0.69.066fe5216c278
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

5,348
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
golang.org/x/net@v0.47.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

1,241
otsotsVerified publisher1.9.01 of 2See more

ots ots 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/luzifer/ots:v1.22.01a62eb026ff5
stdlib@go1.27.1
1.27.2

Open the chart page →

899
akash-hostname-operatorovrclk-211.5.11 of 1See more

akash-hostname-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
golang.org/x/net@v0.30.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

4,208
akash-inventory-operatorovrclk-211.5.11 of 1See more

akash-inventory-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
golang.org/x/net@v0.30.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

4,208
akash-ip-operatorovrclk-211.5.11 of 1See more

akash-ip-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
golang.org/x/net@v0.30.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

4,208
akash-nodeovrclk-211.1.31 of 1See more

akash-node ovrclk-2 11.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/node:0.36.08763983b31f1
golang.org/x/net@v0.24.0
stdlib@go1.21.10
0.60.0
1.26.9

Open the chart page →

1,931
console-apiovrclk-20.1.11 of 1See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/console-api:2.64.0ba359097329d
stdlib@go1.21.13
1.26.9

Open the chart page →

4,479
providerovrclk-211.5.11 of 1See more

provider ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
golang.org/x/net@v0.30.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

4,208
provider-proxyovrclk-20.1.11 of 1See more

provider-proxy ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-proxy:1.4.353f533d7c6f8
stdlib@go1.21.13
1.26.9

Open the chart page →

3,387
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

1,575
httpbunowan-charts0.1.01 of 1See more

httpbun owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
sharat87/httpbun:latesta148af533afd
stdlib@go1.27.1
1.27.2

Open the chart page →

153
minioowan-charts0.1.22 of 2See more

minio owan-charts 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
cleanstart/minio:latestf1156f7fd14a
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9

Open the chart page →

1,933
shlinkowan-charts0.1.01 of 1See more

shlink owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
shlinkio/shlink:stable844e1f2b6455
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

659
owui-cee-proxyowui-cee-proxy0.8.01 of 1See more

owui-cee-proxy owui-cee-proxy 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ctolon17/owui-cee-proxy:0.8.06023888bf007
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

771
kubernetes-taggeroxyno-zetaVerified publisher1.1.21 of 1See more

kubernetes-tagger oxyno-zeta 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17
0.60.0
1.26.9

Open the chart page →

2,939
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
golang.org/x/net@v0.24.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,559
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
golang.org/x/net@v0.26.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

4,584
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
golang.org/x/net@v0.24.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

4,140
eigendap2p-avs0.1.12 of 3See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/layr-labs/eigenda/opr-node:0.8.46650119a385f
golang.org/x/net@v0.24.0
stdlib@go1.21.1
0.60.0
1.26.9
ghcr.io/layr-labs/eigenda/opr-nodeplugin:0.8.4e459ad3ae758
golang.org/x/net@v0.24.0
stdlib@go1.21.1
0.60.0
1.26.9

Open the chart page →

3,658
predicatep2p-avs0.1.41 of 1See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
golang.org/x/net@v0.33.0
stdlib@go1.23.5
0.60.0
1.26.9

Open the chart page →

1,414
p4p40.1.03 of 7See more

p4 p4 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
golang.org/x/net@v0.7.0
stdlib@go1.18.10
0.60.0
1.26.9
library/mongo:5.0-focal5e15a3f014ed
golang.org/x/net@v0.47.0
stdlib@go1.25.9
0.60.0
1.26.9
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

31,131
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.9

Open the chart page →

23,394
packetrusherpacketrusherVerified publisher0.0.31 of 1See more

packetrusher packetrusher 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gradiant/packetrusher:2b26573e9b46dc76af4
golang.org/x/net@v0.38.0
stdlib@go1.21.3
0.60.0
1.26.9

Open the chart page →

6,990
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
golang.org/x/net@v0.47.0
stdlib@go1.24.0
0.60.0
1.26.9

Open the chart page →

4,243
pact-brokerpact-broker-chart0.2.11 of 2See more

pact-broker pact-broker-chart 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.100.0.163801b40a4e9
stdlib@go1.14.4
1.26.9

Open the chart page →

4,039
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,311

Container images carrying it

6,126 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
conduction/betaalservice-php:latestece1ab544c57
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/cgrc-php:dev25415534d245
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/checkin-component-php:dev3423845692c1
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/docparser-php:devb6f95c8ead7d
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
conduction/pan-php:dev24f03c57568f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9
1
confluentinc/cp-kafka:latest5e8f3ab5b497
stdlib@go1.27.1
1.27.2
1
confluentinc/cp-schema-registry:latest482d3048b3f6
stdlib@go1.27.1
1.27.2
1
consensys/web3signer:latest0a64d3b00613
stdlib@go1.26.7
1.26.9
1
containous/maesh:v1.3.2587162516502
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.14.4
0.60.0
1.26.9
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
golang.org/x/net@v0.23.0
stdlib@go1.22.7
0.60.0
1.26.9
1
coordimap/coordimap-agent:latest7748fd0fae9f
golang.org/x/net@v0.38.0
stdlib@go1.26.4
0.60.0
1.26.9
1
coredns/coredns:1.12.040384aa1f5ea
golang.org/x/net@v0.31.0
stdlib@go1.23.3
0.60.0
1.26.9
1
coredns/coredns:1.7.073ca82b4ce82
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.4
0.60.0
1.26.9
1
coredns/coredns:1.14.77efd3c635b03
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9
1
coredns/coredns:1.11.39caabbf6238b
golang.org/x/net@v0.25.0
stdlib@go1.21.11
0.60.0
1.26.9
1
coredns/coredns:1.10.1a0ead06651cf
golang.org/x/net@v0.4.0
stdlib@go1.20
0.60.0
1.26.9
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
golang.org/x/net@v0.33.0
stdlib@go1.24.1
0.60.0
1.26.9
1
cortezaproject/corteza:2024.9.08eb7a26605c9
golang.org/x/net@v0.21.0
stdlib@go1.19.13
0.60.0
1.26.9
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
golang.org/x/net@v0.33.0
stdlib@go1.24.1
0.60.0
1.26.9
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
stdlib@go1.23.5
1.26.9
1
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.60.0
1.26.9
1
couchbase/operator:2.9.369a385b49e1f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.60.0
1.26.9
1
countly/api:25.05.4f4cc7447c4f5
stdlib@go1.19.4
1.26.9
1
countly/countly-server:25.05.4e3c238248f99
stdlib@go1.21.11
1.26.9
1
countly/frontend:25.05.42acbc11499b6
stdlib@go1.19.4
1.26.9
1
craftypath/sops-operator:v0.8.0402a0024c732
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.16.5
0.60.0
1.26.9
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
stdlib@go1.17.8
1.26.9
1
crossplane/crossplane:v0.12.066666e6963af
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.4
0.60.0
1.26.9
1
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
stdlib@go1.13.14
0.60.0
1.26.9
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.60.0
1.26.9
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.14.2
0.60.0
1.26.9
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.4
0.60.0
1.26.9
1
ctolon17/owui-cee-proxy:0.8.06023888bf007
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.16.13
0.60.0
1.26.9
1
cube8021/push-to-k8s:v1.2.2c5d1a1ec4c5e
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.60.0
1.26.9
1
cyberark/conjur-k8s-csi-provider:latest737a967088d9
golang.org/x/net@v0.54.0
stdlib@go1.26.5
0.60.0
1.26.9
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/net@v0.43.0
stdlib@go1.25.4
0.60.0
1.26.9
1
cyverse/irods-csi-driver:v0.12.2c5877ea80e0e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
czerwonk/ping_exporter:v1.2.02a35a0584608
golang.org/x/net@v0.50.0
stdlib@go1.26.0
0.60.0
1.26.9
1
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9
1
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.26.9
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
stdlib@go1.25.7
1.26.9
1
dalf/filtron:latestb19cbf5b2f37
stdlib@go1.18.2
1.26.9
1
dalf/morty:latest248a4849c350
golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861
stdlib@go1.18.2
0.60.0
1.26.9
1
danielfm/kube-ecr-cleanup-controller:0.1.1012485563b1d0
golang.org/x/net@v0.7.0
stdlib@go1.19.6
0.60.0
1.26.9
1
danielqsj/kafka-exporter:v1.7.0e90b7ba06d97
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.60.0
1.26.9
1
dannielkil/book-db:latest433290c5c1db
stdlib@go1.18.2
1.26.9
1

syft 1.42.1 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.