CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,373; of 18,117 indexed, latest versions
Container images: 6,208; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,150
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,957
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars

Chart

Latest

Affected images

Radar Score

sikalabs-harbor-master-snapshotsikalabs

2023.6.20

5 of 8 See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

5 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :dev	f4707b275f04	golang.org/x/net@v0.58.0	0.60.0
goharbor/harbor-jobservice :dev	97f7d9464924	golang.org/x/net@v0.58.0	0.60.0
goharbor/harbor-registryctl :dev	ca0765d1c0eb	golang.org/x/net@v0.58.0	0.60.0
goharbor/registry-photon :dev	2d344e1d870d	golang.org/x/net@v0.58.0	0.60.0
goharbor/trivy-adapter-photon :dev	72aa75db0f6c	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

1,129

vault-devsikalabs

0.2.0

1 of 1 See more

vault-dev sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hashicorp/vault :latest	c2f666266f38	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

295

sillytavernsillytavern

0.1.19

1 of 1 See more

sillytavern sillytavern 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sillytavern/sillytavern :1.19.0	eef27ff0c796	golang.org/x/net@v0.55.0 stdlib@go1.25.10	0.60.0 1.26.9

Open the chart page →

2,193

bytesafe-cesimcube

1.0.4

1 of 3 See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

2,238

headscalesinextra

0.1.1

1 of 1 See more

headscale sinextra 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.29.4	8833f828b414	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

814

infisicalsinextra

0.6.1

1 of 1 See more

infisical sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
infisical/infisical :v0.165.16	6b911e3938ac	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

3,747

keydbsinextra

0.31.2

1 of 1 See more

keydb sinextra 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,201

mongosqldsinextra

0.3.7

1 of 1 See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	stdlib@go1.23.8	1.26.9

Open the chart page →

3,279

mongosyncsinextra

0.4.0

1 of 1 See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,612

pgbouncersinextra

0.17.0

1 of 1 See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	stdlib@go1.24.6	1.26.9

Open the chart page →

2,617

system-upgrade-controllersinextra

0.6.1

1 of 1 See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.19.2	34fa058fe453	golang.org/x/net@v0.48.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

645

tailscalesinextra

0.18.1

2 of 2 See more

tailscale sinextra 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/tailscale :1.102.3	d91287e83d1a	golang.org/x/net@v0.56.0 stdlib@go1.26.6	0.60.0 1.26.9
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,843

talos-backupsinextra

0.1.2

1 of 1 See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.60.0 1.26.9

Open the chart page →

1,470

teamcitysinextra

1.0.2

1 of 3 See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/docker :26.1-dind	dd43b430341a	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

3,115

mariadbsitepilot

1.0.3

1 of 1 See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mariadb :10.6	23616f0bd3af	stdlib@go1.24.6	1.26.9

Open the chart page →

3,361

sk8lsk8l

0.23.0

1 of 1 See more

sk8l sk8l 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
danroux/sk8l-api :v0.19.0	dee851fc72cc	golang.org/x/net@v0.57.0 stdlib@go1.26.4-X:loopvar	0.60.0 1.26.9

Open the chart page →

546

skupperskupper

2.2.3

1 of 1 See more

skupper skupper 2.2.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/skupper/controller :2.2.3	735568990038	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

235

network-observerskupper-network-observer

2.2.3

2 of 3 See more

network-observer skupper-network-observer 2.2.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.60.0 1.26.9
quay.io/skupper/network-observer :2.2.3	3c20bd40b918	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

1,217

skyhook-agentskyhook

1.3.15

1 of 1 See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	golang.org/x/net@v0.44.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

721

skyhook-connectorskyhook

1.3.25

1 of 1 See more

skyhook-connector skyhook 1.3.25

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

441

mimirskyloud-helm-charts

5.5.1

2 of 5 See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/mimir :r292-5f01872	7476e456c738	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.60.0 1.26.9
grafana/rollout-operator :v0.14.0	3409edfb45c7	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

4,294

tailscale-operatorskyloud-helm-charts

1.70.3

1 of 1 See more

tailscale-operator skyloud-helm-charts 1.70.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
tailscale/k8s-operator :v1.70.0	8edd06cf5bac	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,617

skypilot-prometheus-serverskypilot

0.11.1

3 of 3 See more

skypilot-prometheus-server skypilot 0.11.1

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.83.0	78aec597d87a	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.60.0 1.26.9

Open the chart page →

3,926

pritunl-zerosky-sail

0.3.3

1 of 1 See more

pritunl-zero sky-sail 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
pritunl/pritunl-zero :1.0.3648.46	0f2943e0d41b	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,116

yopasssky-sail

1.3.1

1 of 2 See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jhaals/yopass :12.5.0	916a1cf45d36	stdlib@go1.25.5	1.26.9

Open the chart page →

3,751

config-connector-templaterslamdev

0.0.5

1 of 1 See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.60.0 1.26.9

Open the chart page →

3,277

flux-notifierslamdev

0.0.7

1 of 1 See more

flux-notifier slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
slamdev/flux-notifier :v0.0.8	b173d809132d	stdlib@go1.13.11	1.26.9

Open the chart page →

3,090

gitlab-runnerslamdev

0.0.1

1 of 1 See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.9	0.60.0 1.26.9

Open the chart page →

10,793

gke-preemptible-notifierslamdev

0.0.6

1 of 1 See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5 stdlib@go1.13.11	0.60.0 1.26.9

Open the chart page →

4,120

octavia-ingress-controllerslamdev

0.0.7

1 of 1 See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
k8scloudprovider/octavia-ingress-controller :v1.20.2	6ddf80b34265	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

4,027

weblateslamdev

0.0.11

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.13.5	0.60.0 1.26.9

Open the chart page →

11,817

crashloop-operatorslauger-crashloop-operator

0.1.0

1 of 1 See more

crashloop-operator slauger-crashloop-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/slauger/crashloop-operator :0.1.0	76e0216124b7	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

223

slothsloth

0.16.0

2 of 2 See more

sloth sloth 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	stdlib@go1.25.1	1.26.9

Open the chart page →

5,168

slurm-bridgeslurm-bridge

1.2.3

3 of 3 See more

slurm-bridge slurm-bridge 1.2.3

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/slinkyproject/slurm-bridge-admission :1.2.3	042e3827a68f	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-bridge-controllers :1.2.3	e2e3e2c82d2c	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-bridge-scheduler :1.2.3	53db9c40f2b9	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

672

oi-slurm-cluster-chartslurm-cluster-chart

0.25.1

2 of 4 See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.26.9

Open the chart page →

5,749

slurm-cluster-chartslurm-cluster-chart

0.25.0

2 of 4 See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.26.9

Open the chart page →

5,749

slurm-operatorslurm-operator

1.2.3

2 of 2 See more

slurm-operator slurm-operator 1.2.3

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/slinkyproject/slurm-operator :1.2.3	b35e76c09e58	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/slinkyproject/slurm-operator-webhook :1.2.3	68a4460abaa1	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

453

deconzsmall-hack

0.1.0

1 of 1 See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.26.1	23c86008d73f	stdlib@go1.19.8	1.26.9

Open the chart page →

14,591

home-assistantsmall-hack

2.1.0

1 of 1 See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.3.1	0e091dfce306	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

5,050

smarter-k3s-edgesmarter

0.0.12

1 of 2 See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

4,368

smarter-device-managersmarter-device-manager

0.0.10

1 of 1 See more

smarter-device-manager smarter-device-manager 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

1,986

mealiesmarthall

0.0.10

1 of 1 See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	stdlib@go1.19.8	1.26.9

Open the chart page →

6,696

smtp-gotifysmtp-gotify

0.1.4

1 of 1 See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	golang.org/x/net@v0.28.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

1,071

snaprsnapr

0.1.0

1 of 2 See more

snapr snapr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
snapr/app :v0.1.0	e9eb8287bfe1	golang.org/x/net@v0.30.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

2,570

sneakerssneakers

1.0.0

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
helga09/my_sql_shoes :v1.1.1	a03657d97897	stdlib@go1.18.2	1.26.9

Open the chart page →

10,016

echobotsngular

0.3.5

1 of 1 See more

echobot sngular 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sngular/gitops-echobot :v0.2.2	3cde2e04b739	stdlib@go1.16.5	1.26.9

Open the chart page →

3,493

webhooksngular

0.1.1

1 of 1 See more

webhook sngular 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/sngular/gitops-webhook :v0.2.1	caa1c77a5750	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

3,671

avalanchesnowplow-devops

0.12.1

1 of 6 See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.26.9

Open the chart page →

1,780

vertical-pod-autoscalersnowplow-devops

0.1.1

3 of 3 See more

vertical-pod-autoscaler snowplow-devops 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.4.1	71d817780aa9	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.4.1	40b6d76e8526	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.4.1	8ebf269779c1	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.60.0 1.26.9

Open the chart page →

2,766

snspingsnsping

1.2.9

1 of 1 See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
udhos/snsping :1.2.9	6ae70677b6a3	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,893

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
miniflux/miniflux :2.2.18	a3ca6bbc1f74	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9	1
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8 stdlib@go1.17.8	0.60.0 1.26.9	1
minio/operator :v5.0.9	170b154d2c61	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.60.0 1.26.9	1
minio/operator :v4.1.0	2adc5be088f5	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.16.3	0.60.0 1.26.9	1
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.60.0 1.26.9	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9	1
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.60.0 1.26.9	1
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9	1
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.60.0 1.26.9	1
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.26.9	1
misalbasynchrotron/visa-k8s :latest	48e4dcba8f6e	golang.org/x/net@v0.49.0 stdlib@go1.26.8	0.60.0 1.26.9	1
missuo/deeplx :v1.2.2	32e492587678	golang.org/x/net@v0.55.0 stdlib@go1.25.10	0.60.0 1.26.9	1
mitre/vulcan :latest	2bc4dfb8150f	stdlib@go1.25.5	1.26.9	1
moby/buildkit :v0.33.0-rootless	80b15f0735e8	golang.org/x/net@v0.43.0 stdlib@go1.26.8	0.60.0 1.26.9	1
moby/buildkit :v0.31.0	a095b3d11ce1	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
moby/buildkit :v0.34.0	b059f8d7226d	golang.org/x/net@v0.55.0 stdlib@go1.25.7	0.60.0 1.26.9	1
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.60.0 1.26.9	1
moby/buildkit :master	e7c131019aa9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
moby/buildkit :master-rootless	f3864381e463	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9	1
mohankrishna999/k8s-ai-agent :3.1.2	7f980f8c650c	golang.org/x/net@v0.57.0 stdlib@go1.26.5-X:jsonv2	0.60.0 1.26.9	1
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.26.9	1
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.60.0 1.26.9	1
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.60.0 1.26.9	1
mongodb/mongodb-atlas-kubernetes-operator :2.17.0	cfe202a2a076	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9	1
mongodb/mongodb-atlas-local :8	3a8affee01fd	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.60.0 1.26.9	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.26.9	1
moul/sshportal :v1.19.3	332b603727c3	stdlib@go1.17.6	1.26.9	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.60.0 1.26.9	1
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	golang.org/x/net@v0.47.0 stdlib@go1.26.3	0.60.0 1.26.9	1
muonsoft/openapi-mock :latest	c9afe1295484	stdlib@go1.20.2	1.26.9	1
murtazashah46/helmfile :latest	4d11726cf803	golang.org/x/net@v0.5.0 stdlib@go1.22.8	0.60.0 1.26.9	1
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/net@v0.24.0 stdlib@go1.22.4	0.60.0 1.26.9	1
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.60.0 1.26.9	1
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.60.0 1.26.9	1
n8nio/n8n :1.86.0	8b39ed5a2de9	stdlib@go1.24.0	1.26.9	1
n8nio/n8n :1.115.1	ed16e560c40e	stdlib@go1.24.6	1.26.9	1
n8nio/runners :2.41.3	1522f8179b76	stdlib@go1.25.11	1.26.9	1
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.26.9	1
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0 stdlib@go1.20.14	0.60.0 1.26.9	1
nathanfirmo/dbgate :latest	6b0487e6e987	stdlib@go1.24.5	1.26.9	1
natsio/jetstream-controller :0.24.0	58862daca582	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.60.0 1.26.9	1
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9	1
natsio/nats-box :0.19.5	5d513bf0bb82	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.60.0 1.26.9	1
natsio/nats-box :0.18.0	abdc9f9f0120	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.60.0 1.26.9	1
natsio/nats-box :0.8.1	b7f9328145f4	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.6	0.60.0 1.26.9	1
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9	1
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.60.0 1.26.9	1