CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

7,482

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.60.0 1.26.9

Open the chart page →

12,921

wazuh-operatorwazuh-operator

2026.10.2

1 of 1 See more

wazuh-operator wazuh-operator 2026.10.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/maximewewer/wazuh-operator :2026.10.2	aad30dd2e645	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

213

anubiswbstack

0.1.0

1 of 1 See more

anubis wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9

Open the chart page →

977

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0 stdlib@go1.20.1	0.60.0 1.26.9

Open the chart page →

7,324

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9

Open the chart page →

10,875

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9

Open the chart page →

10,754

azure-janitorwebdevops

1.0.13

1 of 1 See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-janitor :24.9.0	2446baee7b69	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,354

azure-keyvault-exporterwebdevops

1.0.12

1 of 1 See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-keyvault-exporter :24.9.1	f333704ecd60	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,353

azure-loganalytics-exporterwebdevops

1.0.13

1 of 1 See more

azure-loganalytics-exporter webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-loganalytics-exporter :25.12.0	051845d06d85	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

azure-resourcegraph-exporterwebdevops

1.1.5

1 of 1 See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcegraph-exporter :24.9.0	381136dda026	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,338

azure-resourcemanager-exporterwebdevops

1.3.6

1 of 1 See more

azure-resourcemanager-exporter webdevops 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-resourcemanager-exporter :26.1.0	d3e1842ad419	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

970

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

1,691

kube-pool-managerwebdevops

1.0.16

1 of 1 See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/kube-pool-manager :24.9.0	4fad7e14ad67	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.60.0 1.26.9

Open the chart page →

1,038

pagerduty-exporterwebdevops

1.1.8

1 of 1 See more

pagerduty-exporter webdevops 1.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
webdevops/pagerduty-exporter :25.12.1	83b95faf10a0	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

939

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mariadb :10	7db29378d4fd	stdlib@go1.24.6	1.26.9

Open the chart page →

11,207

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	a660310e39ad	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

2,194

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9

Open the chart page →

30,659

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	stdlib@go1.20.1	1.26.9

Open the chart page →

2,674

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,563

valkey-operatorwellcake

0.11.0

1 of 1 See more

valkey-operator wellcake 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/melancholictheory/wellcake :0.11.0	5833bb94d394	golang.org/x/net@v0.57.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

329

alertmanagerwener

2.1.1

2 of 2 See more

alertmanager wener 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

502

ambassadorwener

6.9.5

1 of 2 See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.60.0 1.26.9

Open the chart page →

5,651

apisixwener

2.18.1

1 of 3 See more

apisix wener 2.18.1

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0 stdlib@go1.23.10	0.60.0 1.26.9

Open the chart page →

3,705

apisix-ingress-controllerwener

1.4.0

1 of 2 See more

apisix-ingress-controller wener 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	golang.org/x/net@v0.56.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

2,338

argo-cdwener

10.10.3

2 of 3 See more

argo-cd wener 10.10.3

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/argoproj/argocd :v3.5.5	13db7b10db23	golang.org/x/net@v0.55.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

2,657

argocd-image-updaterwener

1.3.2

1 of 1 See more

argocd-image-updater wener 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.1	a578e328e8cb	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

398

argo-eventswener

2.4.27

1 of 1 See more

argo-events wener 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.57.0 stdlib@go1.25.6	0.60.0 1.26.9

Open the chart page →

1,609

argo-rolloutswener

2.43.7

1 of 1 See more

argo-rollouts wener 2.43.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.1	fbcc4cf0a29d	golang.org/x/net@v0.56.0	0.60.0

Open the chart page →

220

argo-workflowswener

2.0.13

3 of 3 See more

argo-workflows wener 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.5	93534a0d0ba3	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.60.0 1.26.9
quay.io/argoproj/argocli :v4.1.5	e0824b55297b	stdlib@go1.26.5	1.26.9
quay.io/argoproj/workflow-controller :v4.1.5	328307c9436f	stdlib@go1.26.5	1.26.9

Open the chart page →

966

athens-proxywener

0.5.2

2 of 2 See more

athens-proxy wener 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.60.0 1.26.9
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.60.0 1.26.9

Open the chart page →

6,742

cadencewener

0.23.0

2 of 5 See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.60.0 1.26.9
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

13,620

cert-managerwener

1.21.2

4 of 4 See more

cert-manager wener 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.21.2	c85268c64f2e	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

866

cockroachdbwener

22.0.4

1 of 3 See more

cockroachdb wener 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	b0fcc6c8147a	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.60.0 1.26.9

Open the chart page →

781

consulwener

2.0.4

2 of 2 See more

consul wener 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hashicorp/consul :2.0.4	1c59f007df8e	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9
hashicorp/consul-k8s-control-plane :2.0.4	9334d7f4bcf0	golang.org/x/net@v0.59.0 stdlib@go1.26.7	0.60.0 1.26.9

Open the chart page →

459

emissary-ingresswener

8.12.2

1 of 2 See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	golang.org/x/net@v0.28.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

76,693

external-secretswener

2.12.0

1 of 1 See more

external-secrets wener 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.12.0	7a3c4f7e038f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

270

filebrowserwener

1.0.0

1 of 1 See more

filebrowser wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

4,422

giteawener

12.7.0

2 of 4 See more

gitea wener 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.9
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.9

Open the chart page →

10,533

gitlab-runnerwener

0.93.0

1 of 1 See more

gitlab-runner wener 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

657

haproxy-ingresswener

0.16.2

1 of 1 See more

haproxy-ingress wener 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.2	42bcf39842db	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

243

ingress-nginxwener

4.15.1

2 of 2 See more

ingress-nginx wener 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

2,364

juicefs-csi-driverwener

0.33.0

5 of 5 See more

juicefs-csi-driver wener 0.33.0

5 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	golang.org/x/net@v0.55.0 stdlib@go1.25.14	0.60.0 1.26.9
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.60.0 1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

12,321

kube-prometheus-stackwener

92.7.0

5 of 6 See more

kube-prometheus-stack wener 92.7.0

5 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.4-distroless	ae3d3add290a	golang.org/x/net@v0.58.0 stdlib@go1.26.7	0.60.0 1.26.9
ghcr.io/jkroepke/kube-webhook-certgen :1.11.0	778d97dc3986	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

1,464

kubernetes-dashboardwener

7.14.0

4 of 5 See more

kubernetes-dashboard wener 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.60.0 1.26.9
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0 stdlib@go1.23.9	0.60.0 1.26.9

Open the chart page →

5,075

kube-state-metricswener

8.6.0

1 of 1 See more

kube-state-metrics wener 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

322

logging-operatorwener

3.17.10

1 of 1 See more

logging-operator wener 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.13	0.60.0 1.26.9

Open the chart page →

2,541

longhornwener

1.2.3

1 of 2 See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.60.0 1.26.9

Open the chart page →

17,191

mesherywener

1.0.71

1 of 1 See more

meshery wener 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	b3816d0c691d	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,882

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ashvinbambhaniya/nexus-tasks-backend :2.0.0	f80349eb018b	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.60.0 1.26.9	1
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/astradns/astradns-operator :v0.2.9	09e58b62416a	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.60.0 1.26.9	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	stdlib@go1.20.12	1.26.9	1
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.60.0 1.26.9	1
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	stdlib@go1.17.13	1.26.9	1
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	golang.org/x/net@v0.28.0 stdlib@go1.22.6	0.60.0 1.26.9	1
ghcr.io/atolat/open-cache :latest	d6105dd73eb4	stdlib@go1.25.8	1.26.9	1
ghcr.io/atrox/alertmanager-discord :v1.0.0	ac011a4b6df1	stdlib@go1.20.5	1.26.9	1
ghcr.io/attestkeep/attestkeep-k8s :1.3.7	1fbf69c89003	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/aureum-cloud/cloudflare-ddns :latest	aeb75d1605f4	stdlib@go1.23.12	1.26.9	1
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.60.0 1.26.9	1
ghcr.io/authelia/authelia :4.39.24	8f428b06bb07	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9	1
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	1
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.60.0 1.26.9	1
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox :latest	7af2216c7b9e	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/avistotelecom/kubebrowser :0.10.0	a354b8dc7e6a	golang.org/x/net@v0.47.0 stdlib@go1.24.1	0.60.0 1.26.9	1
ghcr.io/axonops/axonops-developer-operator :v0.1.0	b3d6600c8ba5	golang.org/x/net@v0.25.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/axonops/axonops-operator :0.1.0	e0cdb993f0b1	golang.org/x/net@v0.51.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/b100to/idle-reaper :0.1.4	47b4a0e091f0	golang.org/x/net@v0.49.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	stdlib@go1.22.11	1.26.9	1
ghcr.io/bank-vaults/bank-vaults :v1.33.1	98b6ea2ed319	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	1
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/net@v0.8.0 stdlib@go1.19.11	0.60.0 1.26.9	1
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.6	0.60.0 1.26.9	1
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/banzaicloud/log-socket :latest	a514736d2d4d	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.18.6	0.60.0 1.26.9	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/bbdsoftware/litellm-operator :1.1.2	167a51113d90	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.60.0 1.26.9	1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.60.0 1.26.9	1
ghcr.io/behappy-project/behappy-tencentcloud-exporter :0.1.3	a0ba56e1501b	stdlib@go1.21.13	1.26.9	1
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/net@v0.10.0 stdlib@go1.20.8	0.60.0 1.26.9	1
ghcr.io/benc-uk/kubeview :latest	45b64d7c7016	golang.org/x/net@v0.57.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.60.0 1.26.9	1
ghcr.io/bionicstork/bionicstork/relay :latest	978a59e0f79f	stdlib@go1.25.14	1.26.9	1
ghcr.io/biru-scop/tenzu-front :latest	16759fa523f8	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10	b6373349a301	golang.org/x/net@v0.43.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.60.0 1.26.9	1
ghcr.io/bitwarden/admin :2026.9.2	e82f37409cce	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/api :2026.9.2	72abdfb33c83	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/attachments :2026.9.2	a3e09f120b64	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/events :2026.9.2	818a1d907fc4	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/icons :2026.9.2	5e23eaab3976	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/identity :2026.9.2	63037d60f7d8	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/notifications :2026.9.2	029f0d8a576f	stdlib@go1.26.5	1.26.9	1
ghcr.io/bitwarden/sm-operator :2.1.0	846624161f32	golang.org/x/net@v0.53.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/bitwarden/sso :2026.9.2	3ef058df2039	stdlib@go1.26.5	1.26.9	1