StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,117 indexed, latest versions
Container images
6,152
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,105
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,915
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

2,134
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.26.9

Open the chart page →

30,491
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
stdlib@go1.20.1
1.26.9

Open the chart page →

2,674
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

9,572
valkey-operatorwellcakeVerified publisher0.11.01 of 1See more

valkey-operator wellcake 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/melancholictheory/wellcake:0.11.05833bb94d394
golang.org/x/net@v0.57.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

329
alertmanagerwener2.1.12See more

alertmanager wener 2.1.1

2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

—
ambassadorwener6.9.51 of 2See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.60.0
1.26.9

Open the chart page →

5,654
apisixwener2.18.01 of 3See more

apisix wener 2.18.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
golang.org/x/net@v0.38.0
stdlib@go1.23.10
0.60.0
1.26.9

Open the chart page →

3,656
apisix-ingress-controllerwener1.4.01 of 2See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

2,339
argo-cdwener10.10.32 of 3See more

argo-cd wener 10.10.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
quay.io/argoproj/argocd:v3.5.513db7b10db23
golang.org/x/net@v0.55.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

2,602
argocd-image-updaterwener1.3.21 of 1See more

argocd-image-updater wener 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.1a578e328e8cb
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

398
argo-eventswener2.4.271 of 1See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/net@v0.57.0
stdlib@go1.25.6
0.60.0
1.26.9

Open the chart page →

1,612
argo-workflowswener2.0.123 of 3See more

argo-workflows wener 2.0.12

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.593534a0d0ba3
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.60.0
1.26.9
quay.io/argoproj/argocli:v4.1.5e0824b55297b
stdlib@go1.26.5
1.26.9
quay.io/argoproj/workflow-controller:v4.1.5328307c9436f
stdlib@go1.26.5
1.26.9

Open the chart page →

966
athens-proxywener0.5.22 of 2See more

athens-proxy wener 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0
stdlib@go1.13.10
0.60.0
1.26.9
jaegertracing/all-in-one:latestab6f1a1f0fb4
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

6,754
cadencewener0.23.02 of 5See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102
stdlib@go1.13.6
0.60.0
1.26.9
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
golang.org/x/net@v0.0.0-20170114055629-f2499483f923
stdlib@go1.15.2
0.60.0
1.26.9

Open the chart page →

13,619
cert-managerwener1.21.24 of 4See more

cert-manager wener 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

866
cockroachdbwener22.0.41 of 3See more

cockroachdb wener 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
cockroachdb/cockroach-self-signer-cert:1.10b0fcc6c8147a
golang.org/x/net@v0.38.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

725
consulwener2.0.42 of 2See more

consul wener 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
hashicorp/consul:2.0.41c59f007df8e
golang.org/x/net@v0.59.0
stdlib@go1.26.7
0.60.0
1.26.9
hashicorp/consul-k8s-control-plane:2.0.49334d7f4bcf0
golang.org/x/net@v0.59.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

459
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
golang.org/x/net@v0.28.0
stdlib@go1.22.4
0.60.0
1.26.9

Open the chart page →

77,077
external-secretswener2.12.01 of 1See more

external-secrets wener 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.12.07a3c4f7e038f
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

270
filebrowserwener1.0.01 of 1See more

filebrowser wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

4,433
giteawener12.7.02 of 4See more

gitea wener 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.9
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.9

Open the chart page →

10,502
gitlab-runnerwener0.93.01 of 1See more

gitlab-runner wener 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

658
haproxy-ingresswener0.16.21 of 1See more

haproxy-ingress wener 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

243
ingress-nginxwener4.15.12 of 2See more

ingress-nginx wener 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

2,366
juicefs-csi-driverwener0.33.05 of 5See more

juicefs-csi-driver wener 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.33.05e5edb62a010
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
golang.org/x/net@v0.52.0
stdlib@go1.25.14
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
golang.org/x/net@v0.13.0
stdlib@go1.20.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
golang.org/x/net@v0.13.0
stdlib@go1.20.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/livenessprobe:v2.12.05baeb4a6d7d5
golang.org/x/net@v0.18.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

12,299
kube-prometheus-stackwener92.3.14See more

kube-prometheus-stack wener 92.3.1

4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

—
kubernetes-dashboardwener7.14.04 of 5See more

kubernetes-dashboard wener 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
golang.org/x/net@v0.40.0
stdlib@go1.23.12
0.60.0
1.26.9
kubernetesui/dashboard-auth:1.4.053e9917898bf
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.60.0
1.26.9
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
golang.org/x/net@v0.34.0
stdlib@go1.23.4
0.60.0
1.26.9
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
golang.org/x/net@v0.38.0
stdlib@go1.23.9
0.60.0
1.26.9

Open the chart page →

5,029
kube-state-metricswener8.6.01 of 1See more

kube-state-metrics wener 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
golang.org/x/net@v0.57.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

322
logging-operatorwener3.17.101 of 1See more

logging-operator wener 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

2,552
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.1
0.60.0
1.26.9

Open the chart page →

17,142
mesherywener1.0.711 of 1See more

meshery wener 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
meshery/meshery:stable-latestb3816d0c691d
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

1,883
minio-operatorwener4.3.71 of 2See more

minio-operator wener 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
golang.org/x/net@v0.0.0-20210421230115-4e50805a0758
stdlib@go1.17.4
0.60.0
1.26.9

Open the chart page →

7,319
natswener2.15.11See more

nats wener 2.15.1

1 container image this version deploys carries CVE-2026-97032.

Container imageDigestPackageFixed in
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.9

Open the chart page →

—
nats-account-serverwener0.8.11 of 1See more

nats-account-server wener 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.9

Open the chart page →

3,667
nfs-subdir-external-provisionerwener4.0.181 of 1See more

nfs-subdir-external-provisioner wener 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.15
0.60.0
1.26.9

Open the chart page →

4,006
openebswener3.10.03 of 3See more

openebs wener 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.60.0
1.26.9

Open the chart page →

13,468
prometheus-blackbox-exporterwener11.20.01 of 1See more

prometheus-blackbox-exporter wener 11.20.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.29.09613f2884689
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

213
prometheus-mysql-exporterwener2.15.01 of 1See more

prometheus-mysql-exporter wener 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/mysqld-exporter:v0.20.0abed8dac117b
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

357
prometheus-nats-exporterwener2.23.21 of 1See more

prometheus-nats-exporter wener 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
stdlib@go1.26.6
1.26.9

Open the chart page →

347
prometheus-node-exporterwener4.60.01See more

prometheus-node-exporter wener 4.60.0

1 container image this version deploys carries CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

—
prometheus-pushgatewaywener3.9.11 of 1See more

prometheus-pushgateway wener 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

213
prometheus-redis-exporterwener6.33.01 of 1See more

prometheus-redis-exporter wener 6.33.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.93.06ca518a72f30
stdlib@go1.27.1
1.27.2

Open the chart page →

152
prometheus-statsd-exporterwener1.0.01 of 1See more

prometheus-statsd-exporter wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
golang.org/x/net@v0.29.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

1,333
rancherwener2.15.22 of 2See more

rancher wener 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
golang.org/x/net@v0.58.0
stdlib@go1.26.4
0.60.0
1.26.9
rancher/shell:v0.8.21eeed72d4eda
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

2,599
rediswener28.3.11 of 1See more

redis wener 28.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.9

Open the chart page →

148
reloaderwener2.2.181 of 1See more

reloader wener 2.2.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/stakater/reloader:v1.4.22def2480040ad
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

209
sealed-secretswener2.20.01 of 1See more

sealed-secrets wener 2.20.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

213
temporalwener0.15.16 of 13See more

temporal wener 0.15.1

6 of the 13 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.4
0.60.0
1.26.9
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.5
0.60.0
1.26.9
prom/prometheus:v2.16.0e4ca62c0d62f
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.8
0.60.0
1.26.9
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.26.9
temporalio/admin-tools:1.15.135034611d981
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.6
0.60.0
1.26.9
temporalio/server:1.15.1e26758f5a1bf
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.6
0.60.0
1.26.9

Open the chart page →

30,696
traefikwener9.1.11 of 1See more

traefik wener 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.14.6
0.60.0
1.26.9

Open the chart page →

4,678

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
flanksource/apm-hub:v0.0.471dacc3195bf9
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
stdlib@go1.20.7
1.26.9
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
stdlib@go1.23.5
1.26.9
1
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
golang.org/x/net@v0.7.0
stdlib@go1.17.13
0.60.0
1.26.9
1
flashbots/mev-boost:1.8.07c486b5789da
stdlib@go1.22.6
1.26.9
1
flashcatcloud/nightingale:8.5.1421acb36181b
golang.org/x/net@v0.47.0
stdlib@go1.24.0
0.60.0
1.26.9
1
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
golang.org/x/net@v0.34.0
stdlib@go1.23.9
0.60.0
1.26.9
1
fleetdm/fleet:v4.66.012e644b7f40e
golang.org/x/net@v0.36.0
stdlib@go1.23.4
0.60.0
1.26.9
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
golang.org/x/net@v0.10.0
stdlib@go1.19.13
0.60.0
1.26.9
1
flomesh/fsm-manager:0.2.1122f849c70b25
golang.org/x/net@v0.10.0
stdlib@go1.19.13
0.60.0
1.26.9
1
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
1
flomesh/osm-edge-controller:1.3.9add7a4da4622
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
1
flomesh/osm-edge-injector:1.3.947287e3ad324
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
1
flomesh/osm-edge-preinstall:1.3.9bd224d55ed0f
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.60.0
1.26.9
1
fluxcd/flux-cli:v2.9.5704d55295355
golang.org/x/net@v0.49.0
stdlib@go1.26.2
0.60.0
1.26.9
1
fluxcd/flux-cli:v2.9.6b1ac18156f22
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9
1
fluxcd/helm-controller:v0.9.092b891e495d8
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.10
0.60.0
1.26.9
1
fluxcd/source-controller:v0.10.031a8c79a6803
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.10
0.60.0
1.26.9
1
fluxninja/aperture-operator:2.34.0356d7aa86632
golang.org/x/net@v0.19.0
stdlib@go1.21.5
0.60.0
1.26.9
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
golang.org/x/net@v0.7.0
stdlib@go1.21.0
0.60.0
1.26.9
1
foomo/contentserver:1.21.28da4b33610c6
golang.org/x/net@v0.58.0
stdlib@go1.26.5
0.60.0
1.26.9
1
foomo/csp-reporter:1.3.0e436da524785
stdlib@go1.18
1.26.9
1
forchaladtest/mygowiki:1.0.170827eaecad1
stdlib@go1.22.6
1.26.9
1
fortio/fortio:latest_releasefc8221136fe2
golang.org/x/net@v0.40.0
stdlib@go1.23.9
0.60.0
1.26.9
1
fosrl/newt:1.10.4ccd2b0e9a049
golang.org/x/net@v0.51.0
stdlib@go1.25.8
0.60.0
1.26.9
1
foxcpp/maddy:0.7.16ab538e2f28b
golang.org/x/net@v0.20.0
stdlib@go1.19.13
0.60.0
1.26.9
1
foxcpp/maddy:v0.5.28fa2bd8f6830
golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0
stdlib@go1.17.2
0.60.0
1.26.9
1
foxcpp/maddy:0.9.2a4b839985b9b
golang.org/x/net@v0.34.0
stdlib@go1.23.12
0.60.0
1.26.9
1
foxcpp/maddy:0.8.2eeb5813fc4d1
golang.org/x/net@v0.34.0
stdlib@go1.23.12
0.60.0
1.26.9
1
freikin/dawarich:1.15.2e58334ca5697
stdlib@go1.24.4
1.26.9
1
frinx/resource-manager:1.0.455575caebd01
golang.org/x/net@v0.0.0-20200927032502-5d4f70055728
stdlib@go1.17.9
0.60.0
1.26.9
1
gabekangas/owncast:0.0.797461aedb580
golang.org/x/net@v0.0.0-20210421230115-4e50805a0758
stdlib@go1.15.2
0.60.0
1.26.9
1
galaxy/cloudman-server:lateste5c265fe9fcd
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.13
0.60.0
1.26.9
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
golang.org/x/net@v0.33.0
stdlib@go1.22.7
0.60.0
1.26.9
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
stdlib@go1.24.8
1.26.9
1
garugaru/presto-exporter:cb666560e9e82d5ae36aef1e663c3d7f51cca9fc5201314c28f3
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.14.13
0.60.0
1.26.9
1
garugaru/presto-loadbalancer:v0.1.589d66d117029
stdlib@go1.15.2
1.26.9
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.17.9
0.60.0
1.26.9
1
gdxbsv/traktor:0.0.17675693335054
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.60.0
1.26.9
1
geldata/gel:6b3a2815a3956
stdlib@go1.19.8
1.26.9
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
golang.org/x/net@v0.11.0
stdlib@go1.19.11
0.60.0
1.26.9
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
stdlib@go1.26.5
1.26.9
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
stdlib@go1.26.5
1.26.9
1
gesellix/couchdb-prometheus-exporter:v27.2.05b891f1fc2b9
stdlib@go1.13.10
1.26.9
1
gesellix/couchdb-prometheus-exporter:v286266d063f5d5
stdlib@go1.13.13
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.