CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

seafileschmitzis

13.0.13

2 of 4 See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
seafileltd/notification-server :13.0.21	1cac4101d0f4	stdlib@go1.26.2	1.26.9

Open the chart page →

44,456

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

4,257

vikunjaschmitzis

1.0.0

1 of 3 See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,204

koffanschoenwald

0.1.8

1 of 1 See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.9

Open the chart page →

174

minifluxschoenwald

0.1.6

1 of 1 See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

540

uptime-kumaschoenwald

1.0.10

1 of 1 See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,895

yopassschoenwald

1.1.0

1 of 2 See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2

Open the chart page →

548

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

61,319

restic-serverschoolguys-helmcharts

0.3.1

1 of 1 See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9

Open the chart page →

3,008

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,460

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.60.0 1.26.9

Open the chart page →

14,628

seafileseafile

0.12.1

1 of 1 See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.26.9

Open the chart page →

76,934

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

5,872

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,402

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.26.9

Open the chart page →

3,996

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,411

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

3,345

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9

Open the chart page →

1,555

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.26.9
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.26.9

Open the chart page →

7,671

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

789

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,428

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,735

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,270

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,711

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9

Open the chart page →

1,749

nucleisecurecodebox-nuclei

5.2.0

1 of 1 See more

nuclei securecodebox-nuclei 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
projectdiscovery/nuclei :v3.5.1	d76713284ad0	golang.org/x/net@v0.46.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,602

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

400

trivysecurecodebox-trivy

5.9.0

1 of 1 See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

838

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,009

security-webhooksecurity-webhook

0.0.14

1 of 1 See more

security-webhook security-webhook 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubestar/security-webhook :latest	156d495afe77	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,206

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.60.0 1.26.9
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9

Open the chart page →

15,747

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9

Open the chart page →

3,164

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	6d45ab59ec50	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,861

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

360

s3managersergeyshevch

0.1.0

1 of 1 See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,212

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

4,015

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

4,170

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,106

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,489

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.26.9
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.26.9

Open the chart page →

7,321

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.26.9
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.26.9
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.26.9

Open the chart page →

11,804

serviceexampleserviceexample-chart

0.3.0

2 of 4 See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

4,359

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

2,170

service-exampleservice-example-jt

0.1.1

8 of 9 See more

service-example service-example-jt 0.1.1

8 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/mongodb-exporter :latest	fb4874bb3d07	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
bitnami/redis-exporter :latest	c6a2883c0bb7	stdlib@go1.26.8	1.26.9
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.26.9
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.9

Open the chart page →

10,552

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

10,910

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,424

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

3,837

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
redislabs/operator :8.0.18-11	9078e713bb6a	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
redislabs/operator :7.4.2-2	ecb101af0506	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9	1
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.26.9	1
redpandadata/kminion :v2.3.6	12bc33b3e334	golang.org/x/net@v0.55.0 stdlib@go1.26.6	0.60.0 1.26.9	1
redpandadata/kminion :v2.3.2	56da99e8d0d3	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
regclient/regsync :v0.8.3	3d8d8e40afb7	stdlib@go1.24.2	1.26.9	1
releaseargus/argus :0.29.0	e07088252d03	stdlib@go1.25.5	1.26.9	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.60.0 1.26.9	1
reportportal/k8s-wait-for :latest	bd5cb2bd57f3	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9	1
reportportal/migrations :5.15.5	1b3d70635332	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	1
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6 stdlib@go1.13.6	0.60.0 1.26.9	1
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.17.1	0.60.0 1.26.9	1
reportportal/service-index :5.15.2	7f78a31a8c8d	golang.org/x/net@v0.54.0 stdlib@go1.26.6	0.60.0 1.26.9	1
restic/restic :0.19.1	136600b6ff68	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.60.0 1.26.9	1
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9	1
resurfaceio/resurface :3.7.84	d5cda2f64109	stdlib@go1.23.0	1.26.9	1
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.26.9	1
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.26.9	1
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.26.9	1
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.26.9	1
robiningelbrecht/strava-statistics :v5.0.0	40842cdfd616	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
robjuz/postgresql-nominatim :latest	805c7bab76df	stdlib@go1.16.5	1.26.9	1
robotnik/filebrowser :2.24.2-1	43b177ffbb72	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.60.0 1.26.9	1
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.26.9	1
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.26.9	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.60.0 1.26.9	1
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.26.9	1
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
rook/ceph :v1.21.0	2c3a65786d3c	golang.org/x/net@v0.58.0 stdlib@go1.22.10	0.60.0 1.26.9	1
rook/ceph :v1.19.2	944a1dd70496	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9	1
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.60.0 1.26.9	1
rotationalio/beacon :0.2.0	f8d8b694515a	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.60.0 1.26.9	1
rotationalio/genoa :1.2.0	3ab583519215	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	1
rotationalio/geoping :1.3.0	34bcb6fc3cb7	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
rotationalio/honu :0.5.0	69fd30c2e31c	stdlib@go1.25.1	1.26.9	1
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9	1
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.60.0 1.26.9	1
rotationalio/vanity :1.2.0	d77350f69b45	stdlib@go1.25.8	1.26.9	1
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.60.0 1.26.9	1
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.26.9	1
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.60.0 1.26.9	1
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.26.9	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.26.9	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.26.9	1
rstream/rstream-operator :latest	c7615b3e3f85	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
rtuszik/photon-docker :2.4.0	21549c60f9e6	stdlib@go1.22.2	1.26.9	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.14.7	0.60.0 1.26.9	1
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.60.0 1.26.9	1