CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,334; of 18,117 indexed, latest versions
Container images: 6,152; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,105
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,915
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars

Chart

Latest

Affected images

Radar Score

unifi-network-applicationjanip81-helm-charts

0.2.9

1 of 3 See more

unifi-network-application janip81-helm-charts 0.2.9

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :7.0	1f995ad6fdb9	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

2,459

janus-shieldjanus-shield

1.0.0

1 of 2 See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon :v1.1.0	96fac2482898	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.60.0 1.26.9

Open the chart page →

3,300

javascriptweeklyjavascriptweekly

2.1.0

1 of 1 See more

javascriptweekly javascriptweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/javascriptweekly :v2.1.0	86424bd0b2a4	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,124

sql-exporterjdstone

0.2.1

1 of 1 See more

sql-exporter jdstone 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.60.0 1.26.9

Open the chart page →

1,456

newtjeffresc

0.2.1

1 of 1 See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
fosrl/newt :1.10.4	ccd2b0e9a049	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.60.0 1.26.9

Open the chart page →

1,517

jenkinsjenkins-automation-tool

0.1.0

1 of 1 See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,134

jenkinsjenkins-automation-tool-by-helm

0.1.0

1 of 1 See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,134

jenkinsjenkins-chart

0.1.0

1 of 1 See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,134

athens-proxyjenkins-x

0.2.2

1 of 2 See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

1,831

jx-app-athensjenkins-x

0.0.18

1 of 1 See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gomods/athens :v0.8.1	d714c7ff0231	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

5,564

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	golang.org/x/net@v0.33.0 stdlib@go1.21.11	0.60.0 1.26.9

Open the chart page →

4,986

jx-app-flaggerjenkins-x

0.0.5

2 of 2 See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :6.5.1	befcd84da2c1	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.60.0 1.26.9
weaveworks/flagger :1.0.0-rc.5	174307de1b36	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.2	0.60.0 1.26.9

Open the chart page →

8,631

jx-app-jenkinsjenkins-x

0.0.15

1 of 2 See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,134

knative-servingjenkins-x

0.19.12

4 of 4 See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	1e3db4f2eeed	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	db6ceff2aab4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	b2cd45b8a8a4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	d27b4495ccc3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9

Open the chart page →

14,700

jetspotterjetspotter

1.49.0

1 of 1 See more

jetspotter jetspotter 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/vvanouytsel/jetspotter :1.49.0	d6f9149a36db	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

1,143

ingress-nginxjfrog

4.5.2

2 of 2 See more

ingress-nginx jfrog 4.5.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.60.0 1.26.9

Open the chart page →

5,504

vaultjfrog

0.25.0

2 of 2 See more

vault jfrog 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.14.0	b2177a8bfe85	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
hashicorp/vault-k8s :1.2.1	4500e988b7ce	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.60.0 1.26.9

Open the chart page →

5,486

kafka-offset-lag-for-prometheusjhidalgo3-github

2.3.0

1 of 1 See more

kafka-offset-lag-for-prometheus jhidalgo3-github 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jhidalgo3/kafka-offset-lag-for-prometheus :latest	0390e155c46d	golang.org/x/net@v0.1.0 stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,369

missing-container-metricsjimdo-missing-container-metrics

0.5.0

1 of 1 See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

3,656

cloudflare-tunneljmmaloney4

0.1.3

1 of 1 See more

cloudflare-tunnel jmmaloney4 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2022.1.3	61f608cd1123	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,758

ipfsjmmaloney4

0.9.23

1 of 1 See more

ipfs jmmaloney4 0.9.23

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.27.0	bfce363b878b	golang.org/x/net@v0.21.0 stdlib@go1.19.8	0.60.0 1.26.9

Open the chart page →

2,143

job-manager-syncerjob-manager-syncer

1.27.0

1 of 1 See more

job-manager-syncer job-manager-syncer 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer :1.27.0	86957bbeeff5	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9

Open the chart page →

952

job-pod-reaperjob-pod-reaper

0.14.0

1 of 1 See more

job-pod-reaper job-pod-reaper 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/ohiosupercomputercenter/job-pod-reaper :v0.14.0	775449888968	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

347

haven-complinacy-dashboardjolle-dev

1.0.0

1 of 2 See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

6,283

BNSdeployjongseo22

0.1.0

1 of 8 See more

BNSdeploy jongseo22 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

226

cloudnative-pgjouve

0.27.0

1 of 1 See more

cloudnative-pg jouve 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.28.0	34198e85b6e6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

1,092

corednsjouve

1.45.0

1 of 1 See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0 stdlib@go1.25.2	0.60.0 1.26.9

Open the chart page →

1,415

distributionjouve

0.2.3

1 of 1 See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
distribution/distribution :3.1.1	bca24727f400	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.60.0 1.26.9

Open the chart page →

1,270

etcd-defragjouve

0.1.1

1 of 1 See more

etcd-defrag jouve 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/ahrtr/etcd-defrag :v0.45.0	b2a97f7fac6e	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

251

api-key-managerjtekt

0.3.0

2 of 4 See more

api-key-manager jtekt 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9
public.ecr.aws/jtekt-corporation/api-key-manager-api :v0.1.1	75a48d987e0f	stdlib@go1.20.7	1.26.9

Open the chart page →

7,875

image-storage-servicejtekt

0.5.1

1 of 4 See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.60.0 1.26.9

Open the chart page →

25,725

time-series-storagejtekt

0.1.10

1 of 2 See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.60.0 1.26.9

Open the chart page →

19,237

firstchartjuanjmerono

0.2.0

1 of 1 See more

firstchart juanjmerono 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jmalloc/echo-server :0.3.1	e4eaee2c7998	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

2,571

daily-restartjuniorjpdj

0.1.73

1 of 1 See more

daily-restart juniorjpdj 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r5	136348264b41	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

738

mumbledjjuniorjpdj

0.1.207

1 of 2 See more

mumbledj juniorjpdj 0.1.207

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r5	136348264b41	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,281

alertmanager-irc-relayjuppi88

0.0.1

1 of 1 See more

alertmanager-irc-relay juppi88 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
maldridge/alertmanager-irc-relay :v0.4.1	391de2b76128	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.4	0.60.0 1.26.9

Open the chart page →

2,796

nginx-gateway-fabricjupyter-jsc

2.4.1

1 of 1 See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/nginx/nginx-gateway-fabric :2.4.1	80f3a0a51af5	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

769

jupyter-notebook-validator-operatorjupyter-notebook-validator

1.0.10

1 of 1 See more

jupyter-notebook-validator-operator jupyter-notebook-validator 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

226

k10appk10app

0.2.1

1 of 11 See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/k10app/businit :latest	94c9a3e799c2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.60.0 1.26.9

Open the chart page →

12,082

multusk3s

4.0.201+upv4.0.2-build2024020801

2 of 2 See more

multus k3s 4.0.201+upv4.0.2-build2024020801

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/hardened-cni-plugins :v1.4.0-build20240122	2581c5490bab	stdlib@go1.20.7	1.26.9
rancher/hardened-multus-cni :v4.0.2-build20240208	7d0f41b72eb7	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

2,906

snapshot-controllerk3s

1.6.1+up1.6.0

1 of 1 See more

snapshot-controller k3s 1.6.1+up1.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-snapshot-controller :v6.1.0	934863015367	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

2,410

snapshot-validation-webhookk3s

1.6.1+up1.6.0

1 of 1 See more

snapshot-validation-webhook k3s 1.6.1+up1.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-snapshot-validation-webhook :v6.1.0	deac027820ae	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

2,410

traefikk3s

20.3.1+up20.3.0

1 of 1 See more

traefik k3s 20.3.1+up20.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/mirrored-library-traefik :2.9.4	0842af6afcdf	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.2	0.60.0 1.26.9

Open the chart page →

4,257

k8-ldap-configmapk8-ldap-configmap

0.16.0

1 of 1 See more

k8-ldap-configmap k8-ldap-configmap 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/ohiosupercomputercenter/k8-ldap-configmap :v0.16.0	40d0b67afd77	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

388

k8-namespace-reaperk8-namespace-reaper

0.11.0

1 of 1 See more

k8-namespace-reaper k8-namespace-reaper 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/ohiosupercomputercenter/k8-namespace-reaper :v0.11.0	ead1f817e8c2	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

347

k8quk8qu

1.4.0

1 of 1 See more

k8qu k8qu 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/gijsvandulmen/k8qu :1.4	e897b18db13d	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9

Open the chart page →

1,119

k8s-aibomk8s-aibom

1.5.1

1 of 1 See more

k8s-aibom k8s-aibom 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/googlecloudplatform/k8s-aibomdigest-pinned	7b02731563a5	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

260

k8s-ai-srek8s-ai-sre

3.1.2

1 of 1 See more

k8s-ai-sre k8s-ai-sre 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
mohankrishna999/k8s-ai-agent :3.1.2	7f980f8c650c	golang.org/x/net@v0.57.0 stdlib@go1.26.5-X:jsonv2	0.60.0 1.26.9

Open the chart page →

981

clonarrk8s-charts

0.10.1

1 of 1 See more

clonarr k8s-charts 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/prophetse7en/clonarr :latest	9400d298b37a	stdlib@go1.26.4	1.26.9

Open the chart page →

770

deltabadgerk8s-charts

2.0.0

1 of 1 See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/deltabadger/deltabadger :2.23.3	bffe3c22fabc	stdlib@go1.24.4	1.26.9

Open the chart page →

7,224

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/knative-releases/knative.dev/operator/cmd/webhook :v1.22.3	66ae76179a80	golang.org/x/net@v0.53.0 stdlib@go1.26.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook	6c5c90cdf707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	08315309da4b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	105bdd14ecaa	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/default-domain	5e0429b70299	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook	15f1ce7f35b4	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	1282a399cbb9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.60.0 1.26.9	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.60.0 1.26.9	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	golang.org/x/net@v0.33.0 stdlib@go1.23.3	0.60.0 1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.4	0.60.0 1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.60.0 1.26.9	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.16.5	0.60.0 1.26.9	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.16.4	0.60.0 1.26.9	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.60.0 1.26.9	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.60.0 1.26.9	1
gcr.io/ml-pipeline/mysql :5.7-debian	df28187b5455	stdlib@go1.16.7	1.26.9	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.60.0 1.26.9	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.60.0 1.26.9	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.60.0 1.26.9	1