StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
prometheus-statsd-exporterprometheus-worawutchan0.1.01 of 1See more

prometheus-statsd-exporter prometheus-worawutchan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.18.0d23aca343b86
stdlib@go1.14.7
1.26.9

Open the chart page →

2,386
github-exporterpromhippieVerified publisher21.3.01 of 1See more

github-exporter promhippie 21.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/promhippie/github-exporter:20.4.06e2171233b5b
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
hetzner-exporterpromhippieVerified publisher2.19.01 of 1See more

hetzner-exporter promhippie 2.19.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/promhippie/hetzner-exporter:2.19.001a5a222d0a6
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
jenkins-exporterpromhippieVerified publisher2.18.01 of 1See more

jenkins-exporter promhippie 2.18.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/promhippie/jenkins-exporter:2.18.0bd83d17ed173
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
scw-exporterpromhippieVerified publisher3.19.01 of 1See more

scw-exporter promhippie 3.19.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/promhippie/scw-exporter:2.19.0192bb0fd1aea
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

77
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.9

Open the chart page →

4,159
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

11,339
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.60.0
1.26.9

Open the chart page →

9,503
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
golang.org/x/net@v0.58.0
stdlib@go1.26.6-X:jsonv2
0.60.0
1.26.9

Open the chart page →

2,142
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

3,809
kspanpuckpuck0.2.41 of 1See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.20.1
0.60.0
1.26.9

Open the chart page →

2,499
powerdnspuckpuck2.0.03 of 4See more

powerdns puckpuck 2.0.0

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.9
pschiffe/pdns-admin:0.4.137ebba8c2b8f
stdlib@go1.21.5
1.26.9
pschiffe/pdns-pgsql:5.0a227d41bc665
stdlib@go1.21.5
1.26.9

Open the chart page →

6,025
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.20.10
0.60.0
1.26.9

Open the chart page →

4,934
pulumi-esc-csi-providerpulumi-esc-csi-provider0.1.61 of 1See more

pulumi-esc-csi-provider pulumi-esc-csi-provider 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
golang.org/x/net@v0.32.0
stdlib@go1.23.1
0.60.0
1.26.9

Open the chart page →

1,366
pulumi-exporterpulumi-exporter0.1.61 of 1See more

pulumi-exporter pulumi-exporter 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
golang.org/x/net@v0.55.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

413
pumperlypumperlyVerified publisher0.2.01 of 3See more

pumperly pumperly 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
stdlib@go1.18.2
1.26.9

Open the chart page →

2,941
punch-boardpunchplatform298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev1 of 1See more

punch-board punchplatform 298.0.0-implement-native-gitlab-ci-sast-depencies-anlysis-template-in-gitlab-ci-yml-file-dev

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b
stdlib@go1.21.3
0.60.0
1.26.9

Open the chart page →

2,072
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest0c09bc50031e
golang.org/x/net@v0.58.0
stdlib@go1.22.2
0.60.0
1.26.9

Open the chart page →

5,105
cdmswebapppyalive-cdmswebappVerified publisher0.1.02 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.9
sarwansharma/minio:v359d1da9385d1
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.18.3
0.60.0
1.26.9

Open the chart page →

8,674
loki-stackpyalive-cdmswebappVerified publisher2.6.54 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:latestb28bae15e219
golang.org/x/net@v0.58.0
stdlib@go1.26.7
0.60.0
1.26.9
grafana/loki:2.5.0f9ef133793af
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.8
0.60.0
1.26.9
grafana/promtail:2.4.2626900031c4e
golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3
stdlib@go1.17.2
0.60.0
1.26.9
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

8,937
node-exporterpyalive-cdmswebappVerified publisher0.1.01 of 1See more

node-exporter pyalive-cdmswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:latest1b4e4438faca
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

357
rancher-metricspy-kube-downscalerVerified publisher0.0.81 of 4See more

rancher-metrics py-kube-downscaler 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.60.0
1.26.9

Open the chart page →

1,272
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.9

Open the chart page →

1,806
open-terminalqaoruVerified publisher0.2.51 of 1See more

open-terminal qaoru 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.14.0-slimba7a67129bba
stdlib@go1.24.4
1.26.9

Open the chart page →

2,798
unifiqaoruVerified publisher1.1.72 of 2See more

unifi qaoru 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mongo:7.0-jammyf71f6d0913c9
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9
linuxserver/unifi-network-application:10.6.106-ls149bb0510fedc3b
stdlib@go1.26.7
1.26.9

Open the chart page →

4,129
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.3
0.60.0
1.26.9
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.4
0.60.0
1.26.9

Open the chart page →

17,238
quarksquarks7.0.1+0.g5396b114 of 5See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.13.15
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.14.7
0.60.0
1.26.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

27,520
quarks-statefulsetquarks0.0.1304-g4b4f2ac51 of 1See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

6,133
qubivaqubiva0.3.22 of 3See more

qubiva qubiva 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
golang.org/x/net@v0.30.0
stdlib@go1.23.4
0.60.0
1.26.9
library/mongo:71f995ad6fdb9
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

8,272
ingress-nginxquench-ingress-nginxVerified publisher0.0.111 of 1See more

ingress-nginx quench-ingress-nginx 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinnedbfc9db97a1e7
ingress-nginx-controller-1.15@1.15.10-r9
no fix listed

Open the chart page →

549
ingress-stackquench-ingress-stackVerified publisher0.0.61 of 5See more

ingress-stack quench-ingress-stack 0.0.6

1 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinnedbfc9db97a1e7
ingress-nginx-controller-1.15@1.15.10-r9
no fix listed

Open the chart page →

786
versitygwquench-versitygwVerified publisher0.0.21 of 1See more

versitygw quench-versitygw 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/versitygwdigest-pinned783ea36fcc7a
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

213
ingress-controllerqumine0.8.5001 of 1See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
qumine/ingress-controller:v0.8.5f2c8a2148381
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19
0.60.0
1.26.9

Open the chart page →

2,428
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
stdlib@go1.19.8
1.26.9

Open the chart page →

9,208
rabbitmq-cluster-operatorrabbitmq-cluster-operator4.8.02 of 2See more

rabbitmq-cluster-operator rabbitmq-cluster-operator 4.8.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-rabbitmq-cluster-operator:4.823d259e0c93e
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.60.0
1.26.9
adeptiainc/adeptia-connect-rabbitmq-messaging-topology-operator:4.8d13e3304bda8
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

2,295
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

1,755
kubemirrorraczylo-comVerified publisher0.10.251 of 1See more

kubemirror raczylo-com 0.10.25

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubemirror:0.10.253f444aa0d88b
stdlib@go1.26.8
1.26.9

Open the chart page →

148
rad-pluginsradOfficialVerified publisher2.4.155 of 5See more

rad-plugins rad 2.4.15

5 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.34adc2f5d5996b
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.44f30f0dc32205
golang.org/x/net@v0.57.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.38bbba62c5a110
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.504e25d84332fc
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

1,112
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
stdlib@go1.22.7
1.26.9
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
stdlib@go1.20.6
1.26.9

Open the chart page →

24,032
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
golang.org/x/net@v0.35.0
stdlib@go1.24.0
0.60.0
1.26.9

Open the chart page →

1,397
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

1,019
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
golang.org/x/net@v0.18.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

2,230
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
golang.org/x/net@v0.20.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

2,460
kubecostradar-baseVerified publisher1.0.03 of 7See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
golang.org/x/net@v0.29.0
stdlib@go1.23.1
0.60.0
1.26.9
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
golang.org/x/net@v0.34.0
stdlib@go1.23.4
0.60.0
1.26.9
quay.io/prometheus/prometheus:v3.2.05888c188cf09
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.60.0
1.26.9

Open the chart page →

11,665
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
golang.org/x/net@v0.40.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

4,062
nginx-gateway-fabricradar-baseVerified publisher2.6.61 of 1See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

405
nifikopradar-baseVerified publisher1.14.11 of 1See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9

Open the chart page →

1,009
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
golang.org/x/net@v0.36.0
stdlib@go1.23.7
0.60.0
1.26.9

Open the chart page →

2,483
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.60.0
1.26.9

Open the chart page →

2,775
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
golang.org/x/net@v0.27.0
stdlib@go1.23.2
0.60.0
1.26.9

Open the chart page →

2,140

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/actions/gha-runner-scale-set-controller:0.15.0162dfb5bfbda
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
golang.org/x/net@v0.38.0
stdlib@go1.23.7
0.60.0
1.26.9
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
stdlib@go1.22.1
1.26.9
1
ghcr.io/aeyrtonvs/k8s-drain-surge:0.0.338bce7856b5c
golang.org/x/net@v0.53.0
stdlib@go1.25.10
0.60.0
1.26.9
1
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
stdlib@go1.19.8
1.26.9
1
ghcr.io/agjmills/sentry-operator:v1.2.500389ef6a00e
golang.org/x/net@v0.30.0
stdlib@go1.24.2
0.60.0
1.26.9
1
ghcr.io/ahrtr/etcd-defrag:v0.45.0b2a97f7fac6e
golang.org/x/net@v0.55.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/aivandrago/subnet-operator:3.2.0fdcb5bb7cc74
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
stdlib@go1.22.5
1.26.9
1
ghcr.io/ajnart/homarr:lateste103abadfb52
stdlib@go1.22.5
1.26.9
1
ghcr.io/akash-network/console-api:2.64.0ba359097329d
stdlib@go1.21.13
1.26.9
1
ghcr.io/akash-network/node:0.36.08763983b31f1
golang.org/x/net@v0.24.0
stdlib@go1.21.10
0.60.0
1.26.9
1
ghcr.io/akash-network/provider-proxy:1.4.353f533d7c6f8
stdlib@go1.21.13
1.26.9
1
ghcr.io/alekc/kpubber:v0.0.2a462d5797e14
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.16.9
0.60.0
1.26.9
1
ghcr.io/alex123012/annotations-exporter:v0.5.04c2b8dbc798e
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9
1
ghcr.io/alexbakker/alertmanager-ntfy:1.0.12f4db8064595
golang.org/x/net@v0.41.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/alexellis/registry-creds:0.3.2-rc1f5c72501e559
golang.org/x/net@v0.5.0
stdlib@go1.19.5
0.60.0
1.26.9
1
ghcr.io/alpineworks/ip:v1.0.04e0d4d51f0bc
golang.org/x/net@v0.34.0
stdlib@go1.24.2
0.60.0
1.26.9
1
ghcr.io/alpineworks/katalog-agent:v1.0.48f50bd568c2b
golang.org/x/net@v0.29.0
stdlib@go1.23.3
0.60.0
1.26.9
1
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
golang.org/x/net@v0.29.0
stdlib@go1.23.3
0.60.0
1.26.9
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
golang.org/x/net@v0.29.0
stdlib@go1.23.1
0.60.0
1.26.9
1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/amaanx86/oci-prometheus-sd-proxy:latest297a8379a328
stdlib@go1.26.4
1.26.9
1
ghcr.io/amoylab/unla/mcp-gateway:latest960cb3cfce77
golang.org/x/net@v0.52.0
stdlib@go1.25.0
0.60.0
1.26.9
1
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
golang.org/x/net@v0.52.0
stdlib@go1.25.0
0.60.0
1.26.9
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.9
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.20.14
0.60.0
1.26.9
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
golang.org/x/net@v0.49.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/andibraeu/cert-manager-webhook-inwx:v0.9.0f015e745983e
golang.org/x/net@v0.48.0
stdlib@go1.25.7
0.60.0
1.26.9
1
ghcr.io/andylibrian/terjang:latest20a46b199247
golang.org/x/net@v0.0.0-20211020060615-d418f374d309
stdlib@go1.16.4
0.60.0
1.26.9
1
ghcr.io/angelnu/chirpstack-packet-multiplexer:latest0c84c2d71006
stdlib@go1.13.15
1.26.9
1
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
golang.org/x/net@v0.36.0
stdlib@go1.24.1
0.60.0
1.26.9
1
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
golang.org/x/net@v0.30.0
stdlib@go1.24.2
0.60.0
1.26.9
1
ghcr.io/angelnu/tt-rss:2.0.100809fb02162f151
stdlib@go1.26.7
1.26.9
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
golang.org/x/net@v0.18.0
stdlib@go1.21.4
0.60.0
1.26.9
1
ghcr.io/apache/ats-ingress:latest2d4d776f6362
golang.org/x/net@v0.55.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/apache/superset-kubernetes-operator:0.3.0c3b9a023ddcf
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
golang.org/x/net@v0.47.0
stdlib@go1.25.9
0.60.0
1.26.9
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
golang.org/x/net@v0.47.0
stdlib@go1.25.8
0.60.0
1.26.9
1
ghcr.io/appscode/akp-crd-manager:v0.0.19b9e216a714a
golang.org/x/net@v0.58.0
stdlib@go1.25.13
0.60.0
1.26.9
1
ghcr.io/appscode/appcatalog:v0.0.109709a346888
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.60.0
1.26.9
1
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
golang.org/x/net@v0.0.0-20220531201128-c960675eff93
stdlib@go1.19.4
0.60.0
1.26.9
1
ghcr.io/appscode/aws-credential-manager:v0.1.00511bbe501c3
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.60.0
1.26.9
1
ghcr.io/appscode/azure-credential-manager:v0.1.0f5c797f7fbe7
golang.org/x/net@v0.49.0
stdlib@go1.25.9
0.60.0
1.26.9
1
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
golang.org/x/net@v0.8.0
stdlib@go1.20.2
0.60.0
1.26.9
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.60.0
1.26.9
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
golang.org/x/net@v0.33.0
stdlib@go1.23.2
0.60.0
1.26.9
1
ghcr.io/appscode/catalog-manager:v0.14.05e9a05238ed5
golang.org/x/net@v0.57.0
stdlib@go1.25.13
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.