CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,530; of 18,090 indexed, latest versions
Container images: 6,374; deployed by those charts
Fix available: 6 of 9; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,530 of 18,090 indexed charts deploy, on 6,374 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,355
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,126
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-387c-5f4p-4rh4 CGA-4653-rw6m-872g CGA-4h9w-grf4-6jpp CGA-8xvx-5mh6-vrc3 CGA-f937-jwj2-rj5j CGA-fjhw-67fq-pm89 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-3qgw-9846-f468, CGA-499x-7xc5-927w, CGA-4qpc-rjrp-f4h4, CGA-5pv4-5xjw-qg97, CGA-5rcr-cqmr-f8hp, CGA-5vh8-jrpp-m4r3, CGA-8g7x-r6mw-97j8, CGA-8mf9-xfh8-jx3h, CGA-923f-66wm-xfq4, CGA-9hgh-r65w-7q99, CGA-fjfp-jwwq-vjp3, CGA-gg5j-j7wm-wf6w, CGA-jrgf-gwq3-rf5w, CGA-m46j-x3g6-mqj4, CGA-mq7q-c763-9cvx, CGA-p4p3-mvmj-v95v, CGA-qpfw-4v8x-3667, CGA-qpqr-hw3x-7qxj, CGA-qqxw-hjpg-6rhv, CGA-r654-5gg7-p6xf, CGA-rggh-6rrq-mfp4, CGA-rwc6-gqq6-4p7r, CGA-vh2x-9247-h576, CGA-w2j8-94m3-rxc6, CGA-w2rp-6hc9-f8qw, CGA-w39g-2gpg-cfqr
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,530 by stars

Chart

Latest

Affected images

Radar Score

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.60.0 1.26.9
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.60.0 1.26.9
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.26.9

Open the chart page →

36,742

eoapieoapi

0.17.3

1 of 7 See more

eoapi eoapi 0.17.3

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

4,476

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

3,317

error-pageserror-pages

4.2.5

1 of 1 See more

error-pages error-pages 4.2.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :4.2.5	6d42b5d6e1a0	stdlib@go1.27.0	1.27.2

Open the chart page →

paraerudika

0.3.0

1 of 1 See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
erudikaltd/para :latest_stable	a6aba08c21fa	stdlib@go1.26.7	1.26.9

Open the chart page →

941

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.26.9

Open the chart page →

2,421

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

3,773

erigonethereum-helm-charts

2.0.2

1 of 2 See more

erigon ethereum-helm-charts 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
erigontech/erigon :latest	28ee51ce29ec	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,280

ethereumjsethereum-helm-charts

0.1.2

1 of 2 See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ethpandaops/ethereumjs :master	fb84b718500f	stdlib@go1.23.12	1.26.9

Open the chart page →

2,150

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	stdlib@go1.17.13	1.26.9

Open the chart page →

4,496

ipfs-clusterethereum-helm-charts

0.1.14

3 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ipfs/ipfs-cluster :latest	a83266c524f1	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.60.0 1.26.9
ipfs/kubo :latest	b293923d66e4	golang.org/x/net@v0.59.0 stdlib@go1.26.5	0.60.0 1.26.9
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

6,406

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.26.9

Open the chart page →

13,254

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,553

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

1,779

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.60.0 1.26.9

Open the chart page →

2,881

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.60.0 1.26.9

Open the chart page →

1,843

ext-postgres-operatorext-postgres-operator

3.0.0

1 of 1 See more

ext-postgres-operator ext-postgres-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

737

akauntingf3k-tech

1.3121.0

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	stdlib@go1.24.5	1.26.9

Open the chart page →

4,879

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.60.0 1.26.9

Open the chart page →

4,807

ecr-cleanupfairwinds-stable

1.2.8

1 of 1 See more

ecr-cleanup fairwinds-stable 1.2.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

1,709

falco-operatorfalcosecurity

0.3.1

1 of 1 See more

falco-operator falcosecurity 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
falcosecurity/falco-operator :0.4.1	8a99fcc57a57	golang.org/x/net@v0.53.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

711

fastapi-microservice-appfast-api-microservice-app

1.3.0

1 of 4 See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :7.0	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

10,785

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.26.9
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.26.9

Open the chart page →

10,877

federidfederid

0.1.2

1 of 1 See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
federid/webhook :0.1.0	fbfb7c6510a7	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

2,734

fencemasterfencemaster

0.1.13

1 of 1 See more

fencemaster fencemaster 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

563

taigafermosit

0.0.11

2 of 7 See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.26.9
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.26.9

Open the chart page →

10,057

ferriskeyferriskey

0.9.0

1 of 3 See more

ferriskey ferriskey 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :17	d74eeac9a635	stdlib@go1.24.6	1.26.9

Open the chart page →

2,514

ai-gatewayferro-labs

1.2.0

1 of 1 See more

ai-gateway ferro-labs 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/ferro-labs/ai-gateway :1.2.0	baa285ec0fc9	golang.org/x/net@v0.55.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

305

file-manager-serverfile-manager-server

1.11.0

1 of 1 See more

file-manager-server file-manager-server 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.60.0 1.26.9

Open the chart page →

1,203

fission-corefission-charts

1.14.1

3 of 3 See more

fission-core fission-charts 1.14.1

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.60.0 1.26.9
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.60.0 1.26.9
fission/reporter :1.14.1	04c6e06af175	stdlib@go1.15.14	1.26.9

Open the chart page →

10,182

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,164

fluorite-chartfluorite-helm

0.1.0

1 of 1 See more

fluorite-chart fluorite-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/afcms/fluorite :master	00f3a5219ac0	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

160

flyway-operatorflyway-operator

0.2.13

1 of 1 See more

flyway-operator flyway-operator 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

1,062

contentserverfoomo

0.8.0

1 of 1 See more

contentserver foomo 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
foomo/contentserver :1.21.2	8da4b33610c6	golang.org/x/net@v0.58.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

476

fqdn-controllerfqdn-controller

0.3.0

1 of 1 See more

fqdn-controller fqdn-controller 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/konsole-is/fqdn-controller :0.3.0	8d5d41ab22aa	golang.org/x/net@v0.56.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

206

free5gcfree5gc

0.1.3

12 of 12 See more

free5gc free5gc 0.1.3

12 of the 12 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	c8babafb7d15	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

16,819

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.60.0 1.26.9
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

5,679

function-mesh-operatorfunction-mesh

0.2.45

1 of 1 See more

function-mesh-operator function-mesh 0.2.45

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
streamnative/function-mesh :v0.29.0	4176923db03c	golang.org/x/net@v0.56.0 stdlib@go1.25.13	0.60.0 1.26.9

Open the chart page →

402

adguard-homegabe565

0.3.25

1 of 2 See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.56	c64a0b37f7b9	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

1,278

home-assistantgabe565

0.17.0

1 of 1 See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :latest	3e6710a7ab2a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

3,076

memosgabe565

0.17.0

1 of 1 See more

memos gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/usememos/memos :0.24.0	4723d86e6797	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9

Open the chart page →

2,042

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,543

garage-uigarage-ui

0.13.0

1 of 1 See more

garage-ui garage-ui 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
noooste/garage-ui :v0.13.0	a1444fa10585	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

141

garmgarm

4.2.0

1 of 3 See more

garm garm 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/igrikus/garm-operator :4.2.0	9e24d8a6a3b2	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

1,125

gateboardgateboard

1.12.5

1 of 1 See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,892

gateboard-discoverygateboard

1.9.5

1 of 1 See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
udhos/gateboard-discovery :1.9.5	5567c9363c4c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9

Open the chart page →

1,599

gboxgbox

1.0.5

1 of 2 See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

3,487

adguard-homegeek-cookbook

5.5.2

1 of 2 See more

adguard-home geek-cookbook 5.5.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.7	b9974aed13d0	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

2,676

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

4,735

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	stdlib@go1.16.8	1.26.9

Open the chart page →

19,102

Container images carrying it

6,374 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
conduction/agendaservice-php :latest	9cfeeb6c7c20	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/checkin-component-php :dev	3423845692c1	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9	1
confluentinc/cp-kafka :latest	5e8f3ab5b497	stdlib@go1.27.1	1.27.2	1
confluentinc/cp-schema-registry :latest	482d3048b3f6	stdlib@go1.27.1	1.27.2	1
consensys/web3signer :latest	0a64d3b00613	stdlib@go1.26.7	1.26.9	1
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.4	0.60.0 1.26.9	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.60.0 1.26.9	1
coordimap/coordimap-agent :latest	7748fd0fae9f	golang.org/x/net@v0.38.0 stdlib@go1.26.4	0.60.0 1.26.9	1
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.60.0 1.26.9	1
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.4	0.60.0 1.26.9	1
coredns/coredns :1.14.7	7efd3c635b03	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	1
coredns/coredns :1.11.3	9caabbf6238b	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9	1
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/net@v0.4.0 stdlib@go1.20	0.60.0 1.26.9	1
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9	1
cortezaproject/corteza :2024.9.0	8eb7a26605c9	golang.org/x/net@v0.21.0 stdlib@go1.19.13	0.60.0 1.26.9	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9	1
cortezaproject/corteza-server-corredor :2024.9.4	4ea78dfe5364	stdlib@go1.23.5	1.26.9	1
couchbase/admission-controller :2.9.3	bf2d2e87e45f	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.60.0 1.26.9	1
couchbase/operator :2.9.3	69a385b49e1f	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.60.0 1.26.9	1
countly/api :25.05.4	f4cc7447c4f5	stdlib@go1.19.4	1.26.9	1
countly/countly-server :25.05.4	e3c238248f99	stdlib@go1.21.11	1.26.9	1
countly/frontend :25.05.4	2acbc11499b6	stdlib@go1.19.4	1.26.9	1
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.60.0 1.26.9	1
crocodilestick/calibre-web-automated :v4.0.6	c31a738b6d5e	stdlib@go1.17.8	1.26.9	1
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.60.0 1.26.9	1
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.14	0.60.0 1.26.9	1
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.60.0 1.26.9	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.2	0.60.0 1.26.9	1
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9	1
ctolon17/owui-cee-proxy :0.8.0	6023888bf007	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.16.13	0.60.0 1.26.9	1
cube8021/push-to-k8s :v1.2.2	c5d1a1ec4c5e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.60.0 1.26.9	1
cyberark/conjur-k8s-csi-provider :latest	737a967088d9	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.60.0 1.26.9	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	golang.org/x/net@v0.43.0 stdlib@go1.25.4	0.60.0 1.26.9	1
cyverse/irods-csi-driver :v0.12.2	c5877ea80e0e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
czerwonk/ping_exporter :v1.2.0	2a35a0584608	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.60.0 1.26.9	1
czerwonk/ping_exporter :v1.1.3	94f51e1ef1e2	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9	1
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.26.9	1
dagster/dagster-cloud-agent :1.13.26	c9320c34f7ed	stdlib@go1.25.7	1.26.9	1
dalf/filtron :latest	b19cbf5b2f37	stdlib@go1.18.2	1.26.9	1
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861 stdlib@go1.18.2	0.60.0 1.26.9	1
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.60.0 1.26.9	1