CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

qbittorrent-exporterkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

qbittorrent-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/martabal/qbittorrent-exporter :v2.0.1	ddf2bff9b357	stdlib@go1.26.3	1.26.9

Open the chart page →

682

scrutinykubernetes-homelab-helm-charts

0.2.2

2 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	983c696655e8	golang.org/x/net@v0.41.0 stdlib@go1.24.9	0.60.0 1.26.9
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

6,974

syncthingkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

1,654

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

1,898

umamikubernetes-homelab-helm-charts

0.1.0

1 of 3 See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.9

Open the chart page →

2,946

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/net@v0.40.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

7,954

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	0b43204c37d6	golang.org/x/net@v0.58.0 stdlib@go1.26.5-X:boringcrypto	0.60.0 1.26.9

Open the chart page →

41,882

kubernetes-nmstatekubernetes-nmstate

0.87.0

1 of 1 See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/nmstate/kubernetes-nmstate-operator :v0.87.0	4dce694f01ea	golang.org/x/net@v0.56.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

854

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

4,406

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

1,826

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

5,475

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,408

servicegatewaykubernetes-replicator

2.3.3

1 of 1 See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/mittwald/servicegateway :v2.3.3	fa948df30d44	stdlib@go1.21.5	1.26.9

Open the chart page →

1,278

kubernetesweeklykubernetesweekly

2.1.0

1 of 1 See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.60.0 1.26.9

Open the chart page →

2,531

kube-secrets-exporterkube-secrets-exporter

0.1.0

1 of 1 See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,119

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9

Open the chart page →

3,404

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,464

kusk-gateway-apikubeshop

0.1.28

2 of 2 See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway-api :v1.5.4	126c713cf7d8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.60.0 1.26.9
kubeshop/kusk-gateway-api-websocket :v1.5.4	3b4f8345ca5c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

3,964

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	golang.org/x/net@v0.40.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

2,211

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/net@v0.34.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

2,054

testkube-operatorkubeshop

2.1.154

2 of 3 See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/kube-webhook-certgen :0.0.7	866827c379ae	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9
kubeshop/testkube-operator :2.1.154	def0d0f0d4ab	golang.org/x/net@v0.34.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

2,036

testkube-runnerkubeshop

2.14.1

1 of 1 See more

testkube-runner kubeshop 2.14.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.14.1	ce04897e5ea2	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

229

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

2,166

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

1,463

kubeskoopkubeskoop

1.0.2

2 of 2 See more

kubeskoop kubeskoop 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubeskoop/agent :v1.0.0-rc.1	9031d9f74832	golang.org/x/net@v0.10.0 stdlib@go1.22.1	0.60.0 1.26.9
kubeskoop/controller :v1.0.0-rc.1	37a3eb73325d	golang.org/x/net@v0.10.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

5,620

apisix-dashboardkubesphere

0.3.0

1 of 1 See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/apisix-dashboard :2.9.0	c010ea7d1694	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.15	0.60.0 1.26.9

Open the chart page →

3,728

apisix-ingress-controllerkubesphere

0.8.0

1 of 2 See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.13.8	0.60.0 1.26.9

Open the chart page →

3,648

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

4,140

gitlabkubesphere

4.2.3

6 of 17 See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.8	0.60.0 1.26.9
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.60.0 1.26.9
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.26.9

Open the chart page →

50,798

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.60.0 1.26.9
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.60.0 1.26.9
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.60.0 1.26.9
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

25,755

pvc-autoresizerkubesphere

0.1.0

1 of 1 See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubesphere/pvc-autoresizer :v0.1	9a18a16c7b87	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

2,656

storageclass-accessorkubesphere

0.1.0

1 of 1 See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubesphere/storageclass-accessor :v0.1.1	eac8f273a9b6	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

2,603

mongodbkubesphere-carryon-experimental

0.1.2

1 of 2 See more

mongodb kubesphere-carryon-experimental 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.26.9

Open the chart page →

10,986

aws-efs-csi-driverkubesphere-carryon-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

3,914

aws-fsx-csi-driverkubesphere-carryon-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-carryon-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.60.0 1.26.9

Open the chart page →

2,708

ccm-qingcloudkubesphere-carryon-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.9

Open the chart page →

2,395

cni-hostnickubesphere-carryon-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

3,632

csi-neonsankubesphere-carryon-test

1.2.8

6 of 6 See more

csi-neonsan kubesphere-carryon-test 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.60.0 1.26.9
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

26,042

csi-qingcloudkubesphere-carryon-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-carryon-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.60.0 1.26.9
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

19,250

curvefs-csikubesphere-carryon-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.60.0 1.26.9

Open the chart page →

4,145

hertzbeatkubesphere-carryon-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :8	6ea90827b110	stdlib@go1.24.6	1.26.9

Open the chart page →

8,580

mongodbkubesphere-carryon-test

0.3.2

1 of 2 See more

mongodb kubesphere-carryon-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.26.9

Open the chart page →

10,986

online-boutiquekubesphere-carryon-test

0.1.0

8 of 11 See more

online-boutique kubesphere-carryon-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

37,028

openelbkubesphere-carryon-test

0.2.4

2 of 2 See more

openelb kubesphere-carryon-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.60.0 1.26.9

Open the chart page →

6,655

porterkubesphere-carryon-test

0.2.2

1 of 2 See more

porter kubesphere-carryon-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.60.0 1.26.9

Open the chart page →

3,993

skywalkingkubesphere-carryon-test

3.1.0

2 of 4 See more

skywalking kubesphere-carryon-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.60.0 1.26.9

Open the chart page →

20,807

snapshot-controllerkubesphere-carryon-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-carryon-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

3,467

ccm-qingcloudkubesphere-stable

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.9

Open the chart page →

2,395

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

12,243

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

3,632

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
skylenet/ethereum-testnet-homepage :latest	8698903e379f	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.2	0.60.0 1.26.9	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	stdlib@go1.15.6	1.26.9	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.60.0 1.26.9	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.60.0 1.26.9	1
slamdev/flux-notifier :v0.0.8	b173d809132d	stdlib@go1.13.11	1.26.9	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5 stdlib@go1.13.11	0.60.0 1.26.9	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.5	0.60.0 1.26.9	1
snapr/app :v0.1.0	e9eb8287bfe1	golang.org/x/net@v0.30.0 stdlib@go1.23.12	0.60.0 1.26.9	1
snyk/kubernetes-monitor :2.23.26	fb5ad76ce84e	golang.org/x/net@v0.54.0 stdlib@go1.25.14	0.60.0 1.26.9	1
softonic/homing-pigeon :0.9.6	f26d467b7b82	golang.org/x/net@v0.41.0 stdlib@go1.23.10	0.60.0 1.26.9	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.60.0 1.26.9	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.9	0.60.0 1.26.9	1
softonic/preemptible-killer :1.2.6-2	94b87f1fb362	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.10	0.60.0 1.26.9	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.60.0 1.26.9	1
softwaremill/bootzooka :latest	dfd0d3a7246a	stdlib@go1.26.7	1.26.9	1
solarwinds/solarwinds-otel-collector :0.152.3-k8s	3c1110e8bdfb	golang.org/x/net@v0.55.0 stdlib@go1.26.4-X:boringcrypto	0.60.0 1.26.9	1
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.26.9	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.18.2	0.60.0 1.26.9	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.60.0 1.26.9	1
sophos/nginx-vts-exporter :latest	f1073556b29b	stdlib@go1.13.6	1.26.9	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.60.0 1.26.9	1
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.60.0 1.26.9	1
speckle/alertmanager-discord :latest	f6221ff308e9	stdlib@go1.22.4	1.26.9	1
spectolabs/hoverfly :v1.12.13	250986d58ed4	golang.org/x/net@v0.56.0 stdlib@go1.27.0	0.60.0 1.27.2	1
splatform/stratos-jetstream :4.4.0-bc65c315c	886311c331b9	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.4	0.60.0 1.26.9	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.60.0 1.26.9	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.60.0 1.26.9	1
sslhep/servicex_app :v1.8.6	c935e123030d	stdlib@go1.27.1	1.27.2	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	stdlib@go1.14.2	1.26.9	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271 stdlib@go1.13.6	0.60.0 1.26.9	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271 stdlib@go1.13.9	0.60.0 1.26.9	1
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/net@v0.51.0 stdlib@go1.26.4	0.60.0 1.26.9	1
stakater/forecastle :v1.0.138	86b24cdef409	golang.org/x/net@v0.10.0 stdlib@go1.22.1	0.60.0 1.26.9	1
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.26.9	1
stakater/k8s-cost-optimizer :v0.0.5	450415ce1b4e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.60.0 1.26.9	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/net@v0.17.0 stdlib@go1.17.13	0.60.0 1.26.9	1
stakater/reloader :v1.0.15	f4b87a8e56d4	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.60.0 1.26.9	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.1	0.60.0 1.26.9	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.13	0.60.0 1.26.9	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.60.0 1.26.9	1
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.60.0 1.26.9	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.26.9	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.60.0 1.26.9	1
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.15	0.60.0 1.26.9	1
stashapp/stash :v0.31.1	df744af5a0c9	golang.org/x/net@v0.47.0 stdlib@go1.24.3	0.60.0 1.26.9	1
stashapp/stash-box :latest	a534c8afdf39	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9	1
staslevchenko/kent :0.4.0	e1b5de030254	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.10	0.60.0 1.26.9	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.10	0.60.0 1.26.9	1