StackRadar

CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,373
of 18,117 indexed, latest versions
Container images
6,208
deployed by those charts
Fix available
3 of 5
affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,373 of 18,117 indexed charts deploy, on 6,208 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.9, 1.27.26,150
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more0.60.04,957
golang-1.19deb1.19.8-2no fix listed1
ingress-nginx-controller-1.15apk1.15.10-r9no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r21
OSV records
CGA-354m-9r4m-xqmmCGA-387c-5f4p-4rh4DEBIAN-CVE-2026-97032GO-2026-6617
Also known as
CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending
Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,373 by stars
ChartLatestAffected imagesRadar Score
github-exporterk8sonlabVerified publisher0.0.41 of 1See more

github-exporter k8sonlab 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
githubexporter/github-exporter:v2.3.1a36fbedeedf8
stdlib@go1.26.4
1.26.9

Open the chart page →

274
librephotosk8sonlabVerified publisher1.1.73 of 7See more

librephotos k8sonlab 1.1.7

3 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d
stdlib@go1.17.6
0.60.0
1.26.9
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.26.9
reallibrephotos/librephotos-frontend:1.2.152371b6769d4
stdlib@go1.24.13
1.26.9

Open the chart page →

18,213
thanosk8sonlabVerified publisher1.1.71 of 1See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.60.0
1.26.9

Open the chart page →

1,015
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
stdlib@go1.24.6
1.26.9

Open the chart page →

8,480
k8s-pausek8s-pause0.1.41 of 1See more

k8s-pause k8s-pause 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

2,907
k8sprom-patch-controllerk8sprom-patch-controller0.1.41 of 1See more

k8sprom-patch-controller k8sprom-patch-controller 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8sprom-patch-controller:v0.1.243b92c9cf029
golang.org/x/net@v0.0.0-20211108170745-6635138e15ea
stdlib@go1.17.8
0.60.0
1.26.9

Open the chart page →

2,907
k8s-redirectsk8s-redirects1.0.01 of 1See more

k8s-redirects k8s-redirects 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

357
k8s-s3-bucket-operatork8s-s3-bucket-operator0.2.21 of 1See more

k8s-s3-bucket-operator k8s-s3-bucket-operator 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/devangradadiya/k8s-s3-bucket-operator:0.2.258288de9f9fa
golang.org/x/net@v0.47.0
stdlib@go1.25.8
0.60.0
1.26.9

Open the chart page →

937
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
golang.org/x/net@v0.23.0
stdlib@go1.21.11
0.60.0
1.26.9

Open the chart page →

4,171
k8stcpmap-controllerk8stcpmap-controller0.1.21 of 1See more

k8stcpmap-controller k8stcpmap-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8stcpmap-controller:v0.0.1ff005643dc97
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.14
0.60.0
1.26.9

Open the chart page →

2,566
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,719
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
golang.org/x/net@v0.23.0
stdlib@go1.22.5
0.60.0
1.26.9

Open the chart page →

2,869
k8svault-controllerk8svault-controller0.1.21 of 1See more

k8svault-controller k8svault-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
golang.org/x/net@v0.0.0-20211108170745-6635138e15ea
stdlib@go1.16.15
0.60.0
1.26.9

Open the chart page →

2,946
kagentkagent0.10.35 of 6See more

kagent kagent 0.10.3

5 of the 6 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.23885cf05d376c
stdlib@go1.24.6
1.26.9
mcp/grafana:latest9362bcf6aa0e
golang.org/x/net@v0.55.0
stdlib@go1.26.5
0.60.0
1.26.9
ghcr.io/kagent-dev/kagent/controller:0.10.3b2572a59386b
golang.org/x/net@v0.58.0
stdlib@go1.27.1
0.60.0
1.27.2
ghcr.io/kagent-dev/kagent/tools:0.3.0cb89eb762161
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
golang.org/x/net@v0.30.0
stdlib@go1.24.13
0.60.0
1.26.9

Open the chart page →

4,253
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

5,663
postgresqlkagiso-me0.4.01 of 1See more

postgresql kagiso-me 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/postgres:17.4-alpine7062a2109c4b
stdlib@go1.18.2
1.26.9

Open the chart page →

2,564
rediskagiso-me0.1.61 of 1See more

redis kagiso-me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
stdlib@go1.18.2
1.26.9

Open the chart page →

2,360
kom-operatorkaisoVerified publisher1.3.01 of 2See more

kom-operator kaiso 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kaiso/kom-operator:v2.2.0e0e22b928bdd
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

1,363
gpu-provisionerkaitoVerified publisher0.2.01 of 1See more

gpu-provisioner kaito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
golang.org/x/net@v0.20.0
stdlib@go1.21.8
0.60.0
1.26.9

Open the chart page →

1,690
ragenginekaitoVerified publisher0.12.01 of 1See more

ragengine kaito 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/ragengine:0.12.07bfe651c92db
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9

Open the chart page →

250
workspacekaitoVerified publisher0.12.07 of 7See more

workspace kaito 0.12.0

7 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
mcr.microsoft.com/acstor/local-csi-manager:v0.3.04f464b52ba85
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
mcr.microsoft.com/aks/kaito/workspace:0.12.0c4b887ca0542
golang.org/x/net@v0.56.0
stdlib@go1.26.7
0.60.0
1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.16.0dfa2570cf895
golang.org/x/net@v0.56.0
stdlib@go1.27.1
0.60.0
1.27.2
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v5.2.0afdfa3da79df
golang.org/x/net@v0.34.0
stdlib@go1.25.5
0.60.0
1.26.9
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v1.13.2fa8eba9843ff
golang.org/x/net@v0.34.0
stdlib@go1.25.7
0.60.0
1.26.9
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9

Open the chart page →

6,379
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
golang.org/x/net@v0.57.0
stdlib@go1.27.0
0.60.0
1.27.2

Open the chart page →

2,134
crashlooping-pod-deleterkarljorgensen0.1.31 of 1See more

crashlooping-pod-deleter karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.60.0
1.26.9

Open the chart page →

1,671
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
golang.org/x/net@v0.39.0
stdlib@go1.24.9
0.60.0
1.26.9

Open the chart page →

2,679
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
golang.org/x/net@v0.17.0
stdlib@go1.25.7
0.60.0
1.26.9

Open the chart page →

8,533
ping-exporterkarljorgensen1.2.11 of 1See more

ping-exporter karljorgensen 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
czerwonk/ping_exporter:v1.2.02a35a0584608
golang.org/x/net@v0.50.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

1,233
karpenter-provider-proxmoxkarpenter-provider-proxmox0.4.101 of 1See more

karpenter-provider-proxmox karpenter-provider-proxmox 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/karpenter-provider-proxmox:v0.13.0c529be73ddc3
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

215
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.60.0
1.26.9

Open the chart page →

2,063
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
golang.org/x/net@v0.52.0
stdlib@go1.26.0
0.60.0
1.26.9

Open the chart page →

38,885
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/mysql:latest9d48c42f8341
stdlib@go1.24.6
1.26.9

Open the chart page →

10,305
kcmkcm1.12.012 of 12See more

kcm kcm 1.12.0

12 of the 12 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
golang.org/x/net@v0.55.0
stdlib@go1.25.11
0.60.0
1.26.9
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.60.0
1.26.9
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
ghcr.io/k0rdent/kcm/controller:1.12.00ec66900c2a9
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
ghcr.io/k0rdent/kcm/telemetry:1.12.01718c4b14e65
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
ghcr.io/stakater/reloader:v1.4.22def2480040ad
golang.org/x/net@v0.56.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

6,719
kcp-operatorkcp-devVerified publisher0.7.101 of 1See more

kcp-operator kcp-dev 0.7.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
golang.org/x/net@v0.57.0
stdlib@go1.26.4
0.60.0
1.26.9

Open the chart page →

406
keeper-injectorkeeper-injectorVerified publisher0.10.02 of 2See more

keeper-injector keeper-injector 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
keeper/injector-webhook:0.10.0aeb5476b95f0
golang.org/x/net@v0.47.0
stdlib@go1.25.6
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

1,694
keeper-injectorkeeper-securityVerified publisher0.11.32 of 2See more

keeper-injector keeper-security 0.11.3

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
keeper/injector-webhook:0.11.33eb609f3e60c
golang.org/x/net@v0.55.0
stdlib@go1.25.14
0.60.0
1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
stdlib@go1.22.8
0.60.0
1.26.9

Open the chart page →

1,255
nodevitalskeiailabVerified publisher0.9.41 of 1See more

nodevitals keiailab 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/keiailab/nodevitals:0.9.4b07e506d4cb1
golang.org/x/net@v0.59.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

509
qdrant-operatorkeiailabVerified publisher0.10.21 of 1See more

qdrant-operator keiailab 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/keiailab/qdrant-operator:v0.10.23da83bf91aa1
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9

Open the chart page →

209
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.26.9

Open the chart page →

6,379
kent-exporterkentVerified publisher0.4.01 of 1See more

kent-exporter kent 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
staslevchenko/kent:0.4.0e1b5de030254
golang.org/x/net@v0.57.0
stdlib@go1.25.14
0.60.0
1.26.9

Open the chart page →

379
kestra-starterkestraOfficialVerified publisher2.0.63 of 5See more

kestra-starter kestra 2.0.6

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
library/docker:dind-rootless54155db4950e
golang.org/x/net@v0.58.0
stdlib@go1.26.8
0.60.0
1.26.9
library/postgres:17.5aadf2c0696f5
stdlib@go1.18.2
1.26.9
versity/versitygw:v1.1.0f730e0dbc1ef
golang.org/x/net@v0.49.0
stdlib@go1.25.5
0.60.0
1.26.9

Open the chart page →

7,406
keyauthoritykeyauthorityVerified publisher0.2.271 of 5See more

keyauthority keyauthority 0.2.27

1 of the 5 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
keyauthoritydh/backend:1.4.10b2519da39b25
golang.org/x/net@v0.59.0
stdlib@go1.27.1
0.60.0
1.27.2

Open the chart page →

2,277
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.13.8
0.60.0
1.26.9

Open the chart page →

6,417
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
golang.org/x/net@v0.0.0-20190415100556-4a65cf94b679
stdlib@go1.14.2
0.60.0
1.26.9

Open the chart page →

4,610
gogskeyporttech0.1.31 of 3See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
gogs/gogs:0.12.30195b095d0b2
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
stdlib@go1.14.7
0.60.0
1.26.9

Open the chart page →

4,782
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.60.0
1.26.9

Open the chart page →

10,292
connectkfirfer1.15.02 of 2See more

connect kfirfer 1.15.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
1password/connect-api:1.7.26aa94cf713f9
golang.org/x/net@v0.14.0
stdlib@go1.20.6
0.60.0
1.26.9
1password/connect-sync:1.7.2fe527ed9d81f
golang.org/x/net@v0.14.0
stdlib@go1.20.6
0.60.0
1.26.9

Open the chart page →

4,369
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/net@v0.0.0-20190522155817-f3200d17e092
stdlib@go1.13.11
0.60.0
1.26.9

Open the chart page →

4,050
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
stdlib@go1.17.1
1.26.9

Open the chart page →

7,805
keelkfirfer1.0.51 of 1See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
keelhq/keel:0.19.202ac4ea616c4
golang.org/x/net@v0.9.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

2,796
kubernetes-replicatorkfirfer2.9.11 of 1See more

kubernetes-replicator kfirfer 2.9.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.9.1baf5f784398b
golang.org/x/net@v0.8.0
stdlib@go1.20.5
0.60.0
1.26.9

Open the chart page →

1,563
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.60.0
1.26.9

Open the chart page →

4,257

Container images carrying it

6,208 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/itzg/minecraft-server:latest0c09bc50031e
golang.org/x/net@v0.58.0
stdlib@go1.22.2
0.60.0
1.26.9
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
golang.org/x/net@v0.10.0
stdlib@go1.20.7
0.60.0
1.26.9
1
ghcr.io/jarodr47/portager:0.5.06a7a61b37568
golang.org/x/net@v0.57.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/jdilsham/ai-k8s-agent-backend:0.1.1ec4b8534ded6
golang.org/x/net@v0.57.0
stdlib@go1.26.8
0.60.0
1.26.9
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.8.043401e216e89
golang.org/x/net@v0.52.0
stdlib@go1.26.1
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.60.0
1.26.9
1
ghcr.io/jkroepke/kube-webhook-certgen:1.7.7b18964551d8e
golang.org/x/net@v0.49.0
stdlib@go1.25.5
0.60.0
1.26.9
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.17.13
0.60.0
1.26.9
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
golang.org/x/net@v0.28.0
stdlib@go1.20.12
0.60.0
1.26.9
1
ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics:1.21.38297aa4a9278
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/jmcgrath207/par:v0.1.09977511cb142
golang.org/x/net@v0.10.0
stdlib@go1.19.10
0.60.0
1.26.9
1
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
stdlib@go1.24.0
1.26.9
1
ghcr.io/jodevsa/wireguard-operator/manager:v2.0.2839412bdd403b
golang.org/x/net@v0.23.0
stdlib@go1.22.2
0.60.0
1.26.9
1
ghcr.io/jsclayton/prometheus-plex-exporter:latest18ef1b2197ef
stdlib@go1.23.0
1.26.9
1
ghcr.io/juanfont/headscale:0.29.4-debug2380cdb4951e
golang.org/x/net@v0.56.0
stdlib@go1.26.5
0.60.0
1.26.9
1
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
golang.org/x/net@v0.56.0
stdlib@go1.26.4
0.60.0
1.26.9
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
golang.org/x/net@v0.34.0
stdlib@go1.23.4
0.60.0
1.26.9
1
ghcr.io/juice-shop/multi-juicer/multi-juicer:v10.3.1de4f0de62e8b
golang.org/x/net@v0.57.0
stdlib@go1.26.7
0.60.0
1.26.9
1
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
stdlib@go1.25.12
1.26.9
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
golang.org/x/net@v0.38.0
stdlib@go1.24.4
0.60.0
1.26.9
1
ghcr.io/k0rdent/kcm/controller:1.12.00ec66900c2a9
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/k0rdent/kcm/telemetry:1.12.01718c4b14e65
golang.org/x/net@v0.59.0
stdlib@go1.26.6
0.60.0
1.26.9
1
ghcr.io/k10app/businit:latest94c9a3e799c2
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.3
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8s-at-home/cni-plugins:v0.9.1241592d93640
stdlib@go1.15.8
1.26.9
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/gateway-admision-controller:v2.0.00d6d0df98fe4
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.4
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/gateway-admision-controller:v3.5.0175512bb3f61
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.18.3
0.60.0
1.26.9
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
stdlib@go1.18.3
1.26.9
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
stdlib@go1.16.7
1.26.9
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/nullserv:v1.3.00792c7e6d814
stdlib@go1.16.5
1.26.9
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
stdlib@go1.16.7
1.26.9
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
stdlib@go1.18.4
1.26.9
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
stdlib@go1.15
1.26.9
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
stdlib@go1.16.8
1.26.9
1
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
golang.org/x/net@v0.53.0
stdlib@go1.26.5
0.60.0
1.26.9
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.