CVE-2026-97032
MediumAdvisory
Published 8 Oct 2026In the index since 9 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,553
- of 18,090 indexed, latest versions
- Container images
- 6,402
- deployed by those charts
- Fix available
- 8 of 9
- affected packages
HTTP/2 server crash due to HPACK encoder race in net/http
Carried by container images the latest versions of 5,553 of 18,090 indexed charts deploy, on 6,402 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+212 more | 1.26.9, 1.27.2 | 6,378 |
| golang.org/ | v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more | 0.60.0 | 5,149 |
| golang-1.19deb | 1.19.8-2 | no fix listed | 1 |
| helm-4apk | 4.3.0-r0 | 4.3.0-r2 | 1 |
| ingress-nginx-controller-1.15apk | 1.15.10-r3 | 1.15.10-r8 | 1 |
| kineapk | 0.17.1-r1 | 0.17.2-r2 | 1 |
| kubernetes-1.37apk | 1.37.1-r0 | 1.37.1-r2 | 1 |
| runcapk | 1.5.2-r0 | 1.5.2-r3 | 1 |
| tetragonapk | 1.7.1-r4 | 1.7.1-r6 | 1 |
- OSV records
- CGA-4653-rw6m-872gCGA-4h9w-grf4-6jppCGA-8xvx-5mh6-vrc3CGA-9hgh-r65w-7q99CGA-f937-jwj2-rj5jCGA-fjhw-67fq-pm89DEBIAN-CVE-2026-97032GO-2026-6617
- Also known as
- CGA-387c-5f4p-4rh4, CGA-3qgw-9846-f468, CGA-499x-7xc5-927w, CGA-4qpc-rjrp-f4h4, CGA-5pv4-5xjw-qg97, CGA-5rcr-cqmr-f8hp, CGA-5vh8-jrpp-m4r3, CGA-8g7x-r6mw-97j8, CGA-8mf9-xfh8-jx3h, CGA-923f-66wm-xfq4, CGA-fjfp-jwwq-vjp3, CGA-gg5j-j7wm-wf6w, CGA-jrgf-gwq3-rf5w, CGA-m46j-x3g6-mqj4, CGA-mq7q-c763-9cvx, CGA-p4p3-mvmj-v95v, CGA-qpfw-4v8x-3667, CGA-qpqr-hw3x-7qxj, CGA-qqxw-hjpg-6rhv, CGA-r654-5gg7-p6xf, CGA-rggh-6rrq-mfp4, CGA-rwc6-gqq6-4p7r, CGA-vh2x-9247-h576, CGA-w2j8-94m3-rxc6, CGA-w2rp-6hc9-f8qw, CGA-w39g-2gpg-cfqr
- Trending
- Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →
Charts affected
5,553 by stars
Container images carrying it
6,402 by charts deploying them
A fixed version is listed for 8 of the 9 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| iomesh/ | a31e26b6ae22 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | 0b13bf217110 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | df149e4ab39f | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | 002c4b92fd34 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | 292ad270082e | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | de4aa40684ad | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | f6c76380db34 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | 60081c9b2f52 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | ba4dd6be7e59 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | e3b92f838f4b | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iomesh/ | eea5651f3270 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iosifache/ | 85df3f04b5da | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iotaledger/ | b02a8f77474f | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iotaledger/ | 01206f1ba89c | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| iotaledger/ | 12c669cb8748 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | 17259397f587 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | bfce363b878b | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | 1511f6d57994 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | 0661819c2e09 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | 803fac58ba15 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | b293923d66e4 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipfs/ | e3de33bd746b | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ipushc/ | fa3e0c66c289 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| irakli/ | 966a4bfefe27 | stdlib | 1.26.9 | 1 |
| isebben/ | ee3c01b698a3 | golang.org/ | 0.60.0 | 1 |
| ispras/ | 42aa9fa9f189 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 2232f365aed6 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | ab34c4740f44 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | ce27c9ce43c8 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 655eefa11c84 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 6cfce8a071b9 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 70f9d1fe5fff | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 325156535773 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 52f25f91d702 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | 9c3d6a218181 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | ac0284d75ec9 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | ce9d87606701 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | db08d6963975 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | e7e110a421c2 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | f8b0e412ac4a | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| istio/ | df69c1a7af7c | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itscontained/ | 7ec3e93c6469 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itzg/ | 7b7ff61d2a60 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itzg/ | 64ae69eaa7a6 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itzg/ | bb552b59fb53 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itzg/ | de5d1b1a83eb | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| itzmanish/ | 02154d1c05b5 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| ixsystems/ | 19c218455cd2 | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| j0113/ | 696cb8ca9f4e | golang.org/ stdlib | 0.60.0 1.26.9 | 1 |
| jacobalberty/ | 4a3616625dda | stdlib | 1.26.9 | 1 |