StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,334
of 18,117 indexed, latest versions
Container images
6,152
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,334 of 18,117 indexed charts deploy, on 6,152 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,105
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,915
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,334 by stars
ChartLatestAffected imagesRadar Score
pgbouncerevilmartians0.2.01 of 2See more

pgbouncer evilmartians 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/evl.ms/pgbouncer-exporter:0.4.074f919b78494
stdlib@go1.14.4
1.26.9

Open the chart page →

2,933
preview-appsevilmartians0.4.01 of 1See more

preview-apps evilmartians 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.10.0b79e77d421d0
golang.org/x/net@v0.23.0
stdlib@go1.20.14
0.60.0
1.26.9

Open the chart page →

1,257
preview-apps-infrastructureevilmartians0.7.01 of 1See more

preview-apps-infrastructure evilmartians 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.11.13185496b3af3
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9

Open the chart page →

957
cloudflaredewatkinsVerified publisher0.1.01 of 1See more

cloudflared ewatkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.11.1665dda65335e
golang.org/x/net@v0.25.0
stdlib@go1.22.5-devel-cf
0.60.0
1.26.9

Open the chart page →

1,871
exa-csiexa-csi-driver0.2.0-rev26 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

6 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.23.0
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-attacher:v4.5.19dcd469f02bb
golang.org/x/net@v0.18.0
stdlib@go1.21.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
golang.org/x/net@v0.18.0
stdlib@go1.21.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/net@v0.19.0
stdlib@go1.21.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
golang.org/x/net@v0.18.0
stdlib@go1.21.5
0.60.0
1.26.9
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.3
0.60.0
1.26.9

Open the chart page →

11,418
exalsius-operatorexalsius-operatorVerified publisher0.12.11 of 1See more

exalsius-operator exalsius-operator 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.15e21ecd86281
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

239
exchange-hackexchange-hack0.1.01 of 1See more

exchange-hack exchange-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
oranhack7/solidproject:77c6453942223f
stdlib@go1.21.7
1.26.9

Open the chart page →

1,329
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.60.0
1.26.9
grafana/loki-canary:2.9.6549a40203e97
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.60.0
1.26.9
grafana/promtail:3.5.165bfae480b57
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.60.0
1.26.9

Open the chart page →

8,053
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
stdlib@go1.24.8
1.26.9

Open the chart page →

4,037
external-dns-watcherexternal-dns-watcherVerified publisher3.3.21 of 1See more

external-dns-watcher external-dns-watcher 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/kubehippie/external-dns-watcher:3.3.2b60dc2fc1d76
golang.org/x/net@v0.59.0
0.60.0

Open the chart page →

67
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
golang.org/x/net@v0.37.0
stdlib@go1.24.1
0.60.0
1.26.9

Open the chart page →

2,210
faasnetfaasnet0.0.42 of 5See more

faasnet faasnet 0.0.4

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f
stdlib@go1.17.1
0.60.0
1.26.9
mcr.microsoft.com/mssql/server:latest2b5b58162112
stdlib@go1.26.1
1.26.9

Open the chart page →

10,647
degafactlyVerified publisher0.11.132 of 3See more

dega factly 0.11.13

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
factly/dega-api:0.15.166fafc7b0a17
stdlib@go1.16.2
1.26.9
factly/dega-server:0.15.194d21479382e
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

8,027
kavachfactlyVerified publisher0.9.51 of 2See more

kavach factly 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
factly/kavach-server:0.22.3be85ff1b9bd3
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
stdlib@go1.16.2
0.60.0
1.26.9

Open the chart page →

4,798
mandefactlyVerified publisher0.5.181 of 3See more

mande factly 0.5.18

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
factly/mande-server:0.34.1384d384310ef
golang.org/x/net@v0.7.0
stdlib@go1.18.10
0.60.0
1.26.9

Open the chart page →

5,695
basic-demofairwinds-incubator1.0.01 of 1See more

basic-demo fairwinds-incubator 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
stdlib@go1.20.4
1.26.9

Open the chart page →

2,162
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
golang.org/x/net@v0.47.0
stdlib@go1.24.9
0.60.0
1.26.9

Open the chart page →

3,740
kubebenchfairwinds-incubator1.0.51 of 2See more

kubebench fairwinds-incubator 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.15.07a8fa32dce21
golang.org/x/net@v0.49.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

1,647
oom-event-generatorfairwinds-incubator0.2.21 of 1See more

oom-event-generator fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.13
0.60.0
1.26.9

Open the chart page →

6,100
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
golang.org/x/net@v0.11.0
stdlib@go1.21.0
0.60.0
1.26.9

Open the chart page →

2,472
stackdriver-metrics-adapterfairwinds-incubator0.3.01 of 1See more

stackdriver-metrics-adapter fairwinds-incubator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.19.3
0.60.0
1.26.9

Open the chart page →

2,646
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

6,781
fairwinds-insightsfairwinds-stableVerified publisher10.7.24 of 13See more

fairwinds-insights fairwinds-stable 10.7.2

4 of the 13 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
golang.org/x/net@v0.47.0
stdlib@go1.25.9
0.60.0
1.26.9
temporalio/admin-tools:1.32.0a9f84fb9a374
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
temporalio/server:1.32.0c3e752127759
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
temporalio/ui:2.54.1ff0943fe532b
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

3,883
fake-network-operatorfake-network-operatorVerified publisher0.1.01 of 1See more

fake-network-operator fake-network-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
golang.org/x/net@v0.28.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

1,004
aspmrelayfalcon-helmVerified publisher1.1.01 of 1See more

aspmrelay falcon-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/bionicstork/bionicstork/relay:latest978a59e0f79f
stdlib@go1.25.14
1.26.9

Open the chart page →

217
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9

Open the chart page →

4,509
k8s-metacollectorfalcosecurity0.3.21 of 1See more

k8s-metacollector falcosecurity 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
falcosecurity/k8s-metacollector:0.1.42c9b17ec36e8
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

209
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.214 of 18See more

farm-observability farm-observability 0.27.2

14 of the 18 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
golang.org/x/net@v0.55.0
stdlib@go1.26.3
0.60.0
1.26.9
grafana/alloy:v1.12.2f94b1c82957a
golang.org/x/net@v0.46.0
stdlib@go1.25.5
0.60.0
1.26.9
grafana/grafana:13.0.1-security-012d1f9ae67c17
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9
grafana/loki-canary:3.6.70dac7d5cb383
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.60.0
1.26.9
grafana/pyroscope:2.0.3cfd00e7f73c2
golang.org/x/net@v0.55.0
stdlib@go1.25.11
0.60.0
1.26.9
grafana/tempo:2.9.065a578975943
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.60.0
1.26.9
prom/memcached-exporter:v0.15.4b6763ecb3c47
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.60.0
1.26.9
ghcr.io/jkroepke/kube-webhook-certgen:1.8.38ce13c365c8e
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/net@v0.37.0
stdlib@go1.23.7
0.60.0
1.26.9
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.60.0
1.26.9
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
golang.org/x/net@v0.51.0
stdlib@go1.26.2
0.60.0
1.26.9

Open the chart page →

19,952
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

2,134
fauxgpufauxgpuVerified publisher0.2.41 of 4See more

fauxgpu fauxgpu 0.2.4

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/devops-dojo7/fauxgpu/device-plugin:0.2.4e5a12388e3d8
golang.org/x/net@v0.29.0
stdlib@go1.23.12
0.60.0
1.26.9

Open the chart page →

4,021
featureformfeatureformVerified publisher0.15.101 of 12See more

featureform featureform 0.15.10

1 of the 12 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latestefd719c99d83
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

257
quickstartfeatureformVerified publisher0.1.12 of 3See more

quickstart featureform 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
featureformcom/quickstart-loader:latest82396f8fb5e8
stdlib@go1.21.11
1.26.9
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.9

Open the chart page →

3,836
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
golang.org/x/net@v0.0.0-20220621193019-9d032be2e588
stdlib@go1.16.5
0.60.0
1.26.9

Open the chart page →

16,034
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.60.0
1.26.9

Open the chart page →

7,167
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

8,793
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
stdlib@go1.13.5
0.60.0
1.26.9

Open the chart page →

16,441
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
golang.org/x/net@v0.46.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

1,219
infrafibonacci-cluster-infraVerified publisher1.0.02 of 4See more

infra fibonacci-cluster-infra 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
stdlib@go1.18.2
1.26.9
library/redis:7.4.1bb142a9c18ac
stdlib@go1.18.2
1.26.9

Open the chart page →

15,280
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17.5
0.60.0
1.26.9

Open the chart page →

4,512
grgatefikaworks0.3.41 of 1See more

grgate fikaworks 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
stdlib@go1.20.2
1.26.9

Open the chart page →

1,735
filebrowserfilebrowser-rr0.1.01 of 1See more

filebrowser filebrowser-rr 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2-s6ee4ac79e5296
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

1,131
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-payment-service:1.0c96f759b6ce4
golang.org/x/net@v0.25.0
stdlib@go1.19.13
0.60.0
1.26.9

Open the chart page →

10,005
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mariadb:11.41292844148b3
stdlib@go1.24.6
1.26.9

Open the chart page →

8,891
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.9

Open the chart page →

6,619
first-matefirst-mateVerified publisher1.0.51 of 1See more

first-mate first-mate 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
chriswells0/first-mate:1.0.5f3918ec8471c
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

2,425
business-api-ecosystemfiware1.2.01See more

business-api-ecosystem fiware 1.2.0

1 container image this version deploys carries CVE-2026-97032.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:3.6.213e51da56fc54
stdlib@go1.15.1
1.26.9

Open the chart page →

—
consent-owner-resolverfiware0.2.01See more

consent-owner-resolver fiware 0.2.0

1 container image this version deploys carries CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/seamware/consent-owner-resolver:0.0.8f1f8abe4fc5f
stdlib@go1.27.0
1.27.2

Open the chart page →

—
did-helperfiware0.2.01See more

did-helper fiware 0.2.0

1 container image this version deploys carries CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/seamware/did-helper:0.6.0799c5f566952
stdlib@go1.26.7
1.26.9

Open the chart page →

—
dsba-pdpfiware0.2.02See more

dsba-pdp fiware 0.2.0

2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
golang.org/x/net@v0.1.0
stdlib@go1.18.10
0.60.0
1.26.9
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
stdlib@go1.18.9
1.26.9

Open the chart page →

—
endpoint-auth-servicefiware0.2.03See more

endpoint-auth-service fiware 0.2.0

3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
expediagroup/kubernetes-sidecar-injector:1.0.1193a00ec8dd4
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.18.3
0.60.0
1.26.9
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.18.5
0.60.0
1.26.9
quay.io/fiware/ishare-auth-provider:0.4.3158108f70f95
stdlib@go1.18.5
1.26.9

Open the chart page →

—

Container images carrying it

6,152 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/inlets/inlets-operator:0.17.2208265c006973
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/inspektor-gadget/inspektor-gadget:v0.57.063dea10c1e9e
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest51df6bd3686a
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.60.0
1.26.9
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
golang.org/x/net@v0.43.0
stdlib@go1.24.13
0.60.0
1.26.9
1
ghcr.io/ionos-cloud/cert-manager-webhook-ionos-cloud:v1.0.46860c5df73f1
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/ioxie/velkir/manager:v0.1.202c657d62d1d
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/isac322/pillar-csi/agent:0.5.4adb7fecffc4e
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/isac322/pillar-csi/controller:0.5.4f9eea76ec045
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/isac322/pillar-csi/node:0.5.4835432e4ddf1
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2
1
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.60.0
1.26.9
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
golang.org/x/net@v0.39.0
stdlib@go1.24.3
0.60.0
1.26.9
1
ghcr.io/itzg/minecraft-server:latest0c09bc50031e
golang.org/x/net@v0.58.0
stdlib@go1.22.2
0.60.0
1.26.9
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
1
ghcr.io/jarodr47/portager:0.5.06a7a61b37568
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/jdilsham/ai-k8s-agent-backend:0.1.1ec4b8534ded6
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.8.043401e216e89
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.7.7b18964551d8e
golang.org/x/net@v0.49.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.17.13
0.60.0
1.26.9
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
golang.org/x/net@v0.28.0
stdlib@go1.20.12
0.60.0
1.26.9
1
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics:1.21.38297aa4a9278
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/jmcgrath207/par:v0.1.09977511cb142
golang.org/x/net@v0.10.0
stdlib@go1.19.10
0.60.0
1.26.9
1
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
stdlib@go1.24.0
1.26.9
1
ghcr.io/jodevsa/wireguard-operator/manager:v2.0.2839412bdd403b
golang.org/x/net@v0.23.0
stdlib@go1.22.2
0.60.0
1.26.9
1
ghcr.io/jsclayton/prometheus-plex-exporter:latest18ef1b2197ef
stdlib@go1.23.0
1.26.9
1
ghcr.io/juanfont/headscale:0.29.4-debug2380cdb4951e
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
golang.org/x/net@v0.34.0
stdlib@go1.23.4
0.60.0
1.26.9
1
ghcr.io/juice-shop/multi-juicer/multi-juicer:v10.3.1de4f0de62e8b
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
stdlib@go1.25.12
1.26.9
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/k0rdent/kcm/controller:1.12.00ec66900c2a9
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/k0rdent/kcm/telemetry:1.12.01718c4b14e65
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/k10app/businit:latest94c9a3e799c2
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8s-at-home/cni-plugins:v0.9.1241592d93640
stdlib@go1.15.8
1.26.9
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/gateway-admision-controller:v2.0.00d6d0df98fe4
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.4
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/gateway-admision-controller:v3.5.0175512bb3f61
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.18.3
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
stdlib@go1.18.3
1.26.9
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
stdlib@go1.16.7
1.26.9
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/nullserv:v1.3.00792c7e6d814
stdlib@go1.16.5
1.26.9
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
stdlib@go1.18.4
1.26.9
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.