StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
kubestellar-uikubestellaruiVerified publisher0.1.13 of 4See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
library/redis:7.0-alpinec9d92d840fd0
stdlib@go1.18.2
1.26.9
mavrick1/kubestellar-b:latest45ca0429a1d4
golang.org/x/net@v0.26.0
stdlib@go1.20.3
0.60.0
1.26.9

Open the chart page →

7,084
kubevaletkubevaletVerified publisher0.3.211 of 3See more

kubevalet kubevalet 0.3.21

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.9

Open the chart page →

703
terraform-controllerkubevela0.8.01 of 1See more

terraform-controller kubevela 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oamdev/terraform-controller:v0.8.070447f4d360a
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.4
0.60.0
1.26.9

Open the chart page →

5,045
vector-controllerkubevela0.2.32 of 2See more

vector-controller kubevela 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.17.11
0.60.0
1.26.9
oamdev/vector-controller:v0.2.39dd8be44ffc9
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.13
0.60.0
1.26.9

Open the chart page →

6,885
vela-prismkubevela1.6.03 of 3See more

vela-prism kubevela 1.6.0

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oamdev/cluster-gateway:v1.4.0dc97164c4c1f
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.10
0.60.0
1.26.9
oamdev/kube-webhook-certgen:v2.331e0892f3583
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.9
0.60.0
1.26.9
oamdev/vela-prism:v1.6.06db6a937647d
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

9,116
vela-workflowkubevela0.7.21 of 1See more

vela-workflow kubevela 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.17.11
0.60.0
1.26.9

Open the chart page →

2,417
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.127eb8c1385099
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

2,020
network-enforcerkubewardenVerified publisher0.1.32 of 3See more

network-enforcer kubewarden 0.1.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.162.039923a8e431b
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
ghcr.io/kubewarden/network-enforcer/controller:v0.3.08698549f8ca5
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

1,411
wordpresskube-wordpress0.1.01 of 2See more

wordpress kube-wordpress 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

4,912
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9

Open the chart page →

11,112
kube-workload-restarterkube-workload-restarterVerified publisher0.0.41 of 1See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
andreacioni/kube-workload-restarter:0.0.242938b310090a
golang.org/x/net@v0.7.0
stdlib@go1.20.2
0.60.0
1.26.9

Open the chart page →

3,199
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.48 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

8 of the 9 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
golang.org/x/net@v0.31.0
stdlib@go1.22.7
0.60.0
1.26.9
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.9
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
golang.org/x/net@v0.39.0
stdlib@go1.23.12
0.60.0
1.26.9
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
golang.org/x/net@v0.30.0
stdlib@go1.22.10
0.60.0
1.26.9
ghcr.io/kubiyabot/kubiya-operator:runner_v26bf945565865
golang.org/x/net@v0.28.0
stdlib@go1.25.1
0.60.0
1.26.9
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
golang.org/x/net@v0.42.0
stdlib@go1.21.5
0.60.0
1.26.9
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
golang.org/x/net@v0.39.0
stdlib@go1.23.12
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/net@v0.29.0
stdlib@go1.23.3
0.60.0
1.26.9

Open the chart page →

26,352
lethe-stackkuossOfficialVerified publisher0.2.32 of 3See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/kuoss/eventrouter:v0.4.1300b48beff3ae
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.60.0
1.26.9
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
golang.org/x/net@v0.41.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

2,767
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

4,364
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
golang.org/x/net@v0.28.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

1,414
kusionkusionstackVerified publisher0.14.12 of 3See more

kusion kusionstack 0.14.1

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
golang.org/x/net@v0.31.0
stdlib@go1.22.10
0.60.0
1.26.9
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

67,613
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
golang.org/x/net@v0.17.0
stdlib@go1.19.13
0.60.0
1.26.9

Open the chart page →

2,614
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.60.0
1.26.9

Open the chart page →

3,394
kustomize-patcherkustomize-patcher1.0.21 of 2See more

kustomize-patcher kustomize-patcher 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

1,223
azure-key-vault-helperkvalitetsitVerified publisher2.0.21 of 1See more

azure-key-vault-helper kvalitetsit 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/go-loop:1.1.0d07f449d75ed
stdlib@go1.25.1
1.26.9

Open the chart page →

681
dynatrace-operatorkvalitetsitVerified publisher1.3.01 of 1See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
golang.org/x/net@v0.28.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

1,923
kitarguskvalitetsitVerified publisher0.0.0-2026-03-09-091234-10013c41 of 1See more

kitargus kvalitetsit 0.0.0-2026-03-09-091234-10013c4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.60.0
1.26.9

Open the chart page →

1,384
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
golang.org/x/net@v0.36.0
stdlib@go1.24.2
0.60.0
1.26.9

Open the chart page →

2,153
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.14.1
0.60.0
1.26.9

Open the chart page →

18,464
metadockvalitetsitVerified publisher0.0.72 of 2See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/metadoc-app:maine89e351733ad
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.19.5
0.60.0
1.26.9
kvalitetsit/metadoc-web:mainf57e7553f5bd
golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4
stdlib@go1.16
0.60.0
1.26.9

Open the chart page →

6,123
myra-cert-manager-webhookkvalitetsitVerified publisher1.2.11 of 1See more

myra-cert-manager-webhook kvalitetsit 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/myra-cert-manager-webhook:1.2.184ab59a1434e
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

482
nsp-prometheus-exporterkvalitetsitVerified publisher1.0.191 of 2See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/nsp-prometheus-exporter:1.0.190b397ff954ec
stdlib@go1.15.3
1.26.9

Open the chart page →

3,129
oauth2-proxy-injectorkvalitetsitVerified publisher1.5.01 of 1See more

oauth2-proxy-injector kvalitetsit 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/oauth2-proxy-injector:1.5.00c906908d632
golang.org/x/net@v0.49.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

647
openidkvalitetsitVerified publisher1.7.21 of 2See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.14.368336da945bd
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.60.0
1.26.9

Open the chart page →

996
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

9,135
stakit-adapter-alertmanagerkvalitetsitVerified publisher0.2.61 of 1See more

stakit-adapter-alertmanager kvalitetsit 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kvalitetsit/stakit-adapter-alertmanager:0.2.6838db1e90c6b
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

370
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

11,142
kyvernokyverno-oci3.9.11 of 7See more

kyverno kyverno-oci 3.9.1

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/kyverno/readiness-checker:v1.19.131bb42ce7f5b
golang.org/x/net@v0.58.0
stdlib@go1.26.6
0.60.0
1.26.9

Open the chart page →

243
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476
stdlib@go1.14
0.60.0
1.26.9

Open the chart page →

29,124
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

3,084
everest-lakefs-csi-driverlakefsVerified publisher1.4.03 of 3See more

everest-lakefs-csi-driver lakefs 1.4.0

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
treeverse/everest-lakefs-csi-driver:1.4.0556a05af968c
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
golang.org/x/net@v0.49.0
stdlib@go1.26.1
0.60.0
1.26.9
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
golang.org/x/net@v0.49.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

2,003
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

1,904
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
golang.org/x/net@v0.23.0
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

2,006
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

21,421
express-botxlavr0.31.91 of 1See more

express-botx lavr 0.31.9

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
lavr/express-botx:0.43.0-rootlessbb5d9bb4efc8
golang.org/x/net@v0.38.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

586
kubernetes-dashboardlbenicio-communityVerified publisher7.14.104 of 5See more

kubernetes-dashboard lbenicio-community 7.14.10

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
lbenicio/kubernetes-dashboard-api:1.14.951d3d30206c8
golang.org/x/net@v0.46.0
stdlib@go1.25.11
0.60.0
1.26.9
lbenicio/kubernetes-dashboard-auth:1.4.1635eb784c03fa
golang.org/x/net@v0.46.0
stdlib@go1.25.12
0.60.0
1.26.9
lbenicio/kubernetes-dashboard-scraper:1.2.69202e96ad403
golang.org/x/net@v0.46.0
stdlib@go1.25.11
0.60.0
1.26.9
lbenicio/kubernetes-dashboard-web:1.7.142797937bc2a5
golang.org/x/net@v0.46.0
stdlib@go1.25.11
0.60.0
1.26.9

Open the chart page →

3,052
listmonklbenicio-communityVerified publisher0.1.01 of 1See more

listmonk lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
listmonk/listmonk:latestf535d59e1499
golang.org/x/net@v0.47.0
stdlib@go1.26.1
0.60.0
1.26.9

Open the chart page →

1,219
pinglbenicio-communityVerified publisher0.1.11 of 1See more

ping lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

1,029
pod-cleanerlbenicio-communityVerified publisher0.1.11 of 1See more

pod-cleaner lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

226
speedtestlbenicio-communityVerified publisher0.1.01 of 1See more

speedtest lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

628
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

40,136
whoamilbenicio-communityVerified publisher0.1.21 of 1See more

whoami lbenicio-community 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

357
ld-relayld-relay3.11.21 of 1See more

ld-relay ld-relay 3.11.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
launchdarkly/ld-relay:8.22.0065f211f5d7c
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

225
metallblectures-k8sinfra0.10.22 of 2See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.10.221164241c045
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.5
0.60.0
1.26.9
quay.io/metallb/speaker:v0.10.258cb99053bb3
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.5
0.60.0
1.26.9

Open the chart page →

7,744

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/kasten-images/configmap-reload:9.0.7b9b8a1b65f7a
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/controllermanager:9.0.7a01f872d8e0c
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/crypto:9.0.76c6b6d9af1d4
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/dashboardbff:9.0.71a8b1ccfc402
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/events:9.0.7e7beb79514f9
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/executor:9.0.74fe7419cecd9
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/garbagecollector:9.0.74dfd4a2dae57
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/gateway:9.0.76f14d4acd0c5
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/jobs:9.0.7a093d080604f
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/kanister:9.0.703d05d517803
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/kanister-tools:9.0.79778af80396e
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/logging:9.0.7e41747f4a3c3
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/metering:9.0.7209e1aaee219
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/prometheus:9.0.793bdb766db72
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/repositories:9.0.75c5435aea185
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9
1
gcr.io/kasten-images/state:9.0.7c4bfd7feb74a
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/kasten-images/upgrade:9.0.7b2447f8bc553
stdlib@go1.27.1
1.27.2
1
gcr.io/kasten-images/vbrintegrationapi:9.0.785e432303eff
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterd675f211a40f
golang.org/x/net@v0.30.0
stdlib@go1.22.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressec4b544499ba
golang.org/x/net@v0.30.0
stdlib@go1.22.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker395f4ff1bd34
golang.org/x/net@v0.30.0
stdlib@go1.22.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook873b968f02b5
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.2
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.13.1a5b041ba3c9e
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllere70bc675f977
golang.org/x/net@v0.30.0
stdlib@go1.22.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.6
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook7d76a6d42d13
golang.org/x/net@v0.30.0
stdlib@go1.22.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.6
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.13.1f066376eee17
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier15a601147ef4
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier197fbb71d1f1
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18.3
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/operator/cmd/operator:v1.22.3733f21dc06f9
golang.org/x/net@v0.53.0
stdlib@go1.26.4
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook:v1.22.366ae76179a80
golang.org/x/net@v0.53.0
stdlib@go1.26.4
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook6c5c90cdf707
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator08315309da4b
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18.3
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator1e3db4f2eeed
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.14.10
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activatora5de0fb75046
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.2
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.8
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler105bdd14ecaa
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18.3
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler2ef460356b17
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.2
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdb6ceff2aab4
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.14.10
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
golang.org/x/net@v0.7.0
stdlib@go1.20.4
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.2
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.17.8
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.