CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,312; of 18,131 indexed, latest versions
Container images: 6,132; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,312 of 18,131 indexed charts deploy, on 6,132 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,077
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,894
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,312 by stars

Chart

Latest

Affected images

Radar Score

notification-componentnotification-component

1.0.0

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,515

clusterfannousefreak

0.1.2

1 of 1 See more

clusterfan nousefreak 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/nousefreak/clusterfan :v0.1.0	4ea05e2a7b57	stdlib@go1.17.5	1.26.9

Open the chart page →

2,740

giteanovum-rgi-charts

2.1.3

1 of 3 See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

6,128

nfs-server-provisionernovum-rgi-charts

1.1.2

1 of 1 See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

4,115

example-dev-toolsnoygal

0.2.8

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.60.0 1.26.9

Open the chart page →

29,382

nri-plugin-runtimenri-plugin-runtime

0.0.3

1 of 1 See more

nri-plugin-runtime nri-plugin-runtime 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/bodgit/nri-plugin-runtime :v0.0.3	130c0b1b6fa3	stdlib@go1.26.4	1.26.9

Open the chart page →

371

nri-memory-policynri-plugins

0.14.0

1 of 1 See more

nri-memory-policy nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-policy :v0.14.0	531d21ec4ba2	stdlib@go1.26.0	1.26.9

Open the chart page →

585

nri-memory-qosnri-plugins

0.14.0

1 of 1 See more

nri-memory-qos nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-qos :v0.14.0	c7c5c24ed894	stdlib@go1.26.0	1.26.9

Open the chart page →

585

nri-resctrl-monnri-plugins

0.14.0

1 of 1 See more

nri-resctrl-mon nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resctrl-mon :v0.14.0	a9c9775fab70	stdlib@go1.26.0	1.26.9

Open the chart page →

585

nri-resource-annotatornri-plugins

0.14.0

1 of 1 See more

nri-resource-annotator nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-annotator :v0.14.0	8100a19e85f7	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

621

nri-resource-policy-templatenri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-template nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-template :v0.14.0	0edfc075277b	golang.org/x/net@v0.55.0 stdlib@go1.26.0	0.60.0 1.26.9

Open the chart page →

699

nri-sgx-epcnri-plugins

0.14.0

1 of 1 See more

nri-sgx-epc nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-sgx-epc :v0.14.0	b4c4d0d83c14	stdlib@go1.26.0	1.26.9

Open the chart page →

585

nri-volume-qosnri-volume-qos

0.1.3

1 of 1 See more

nri-volume-qos nri-volume-qos 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/nri-volume-qos :v0.1.3	cbe3e1ea2b6a	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

541

cnaos-pvc-populatornutanix-helm-releases

1.1.0-174-prod

1 of 2 See more

cnaos-pvc-populator nutanix-helm-releases 1.1.0-174-prod

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/volume-data-source-validator :v1.0.0	d35884236461	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,119

nai-knative-istio-controllernutanix-helm-releases

1.13.1

2 of 2 See more

nai-knative-istio-controller nutanix-helm-releases 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

2,872

nai-knative-servingnutanix-helm-releases

1.13.1

4 of 4 See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.60.0 1.26.9

Open the chart page →

6,385

nutanix-flow-cninutanix-helm-releases

1.1.0

4 of 7 See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

4 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.26.9
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.26.9
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.3	9751856cacc8	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

7,277

gpu-operatornvidia-gpu-operator

26.7.2

1 of 2 See more

gpu-operator nvidia-gpu-operator 26.7.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/nfd/node-feature-discovery :v0.19.0	2fa1c99ad09b	golang.org/x/net@v0.56.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

564

dnscrypt-proxyobeone

1.4.5

1 of 1 See more

dnscrypt-proxy obeone 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
klutchell/dnscrypt-proxy :2.1.18	a98e8d13314f	golang.org/x/net@v0.57.0 stdlib@go1.25.12	0.60.0 1.26.9

Open the chart page →

344

firecrawlobeone

3.0.21

2 of 5 See more

firecrawl obeone 3.0.21

2 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/firecrawl/firecrawl :2.11.693-staging	e2f493babbc5	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
ghcr.io/firecrawl/nuq-postgres :latest	f9388bd25ae2	stdlib@go1.24.6	1.26.9

Open the chart page →

11,626

observability-collectobservability-collect

0.1.4

1 of 2 See more

observability-collect observability-collect 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.0	c4fde419a4f0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

408

observability-coreobservability-core

0.1.3

2 of 2 See more

observability-core observability-core 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.0	c4fde419a4f0	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9
ghcr.io/grafana/grafana-operator :v5.25.0	bc572995823f	golang.org/x/net@v0.58.0 stdlib@go1.26.6	0.60.0 1.26.9

Open the chart page →

646

observabilitysecobservabilitysec

0.0.1

2 of 2 See more

observabilitysec observabilitysec 0.0.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	999d5eb28f40	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
jdvalencia422/observabilitysec :latest	a80b6e47a7b8	stdlib@go1.18.4	1.26.9

Open the chart page →

2,146

ocellusaiocellusai

0.1.12

1 of 2 See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,699

lensoci-ai-incubations

0.1.14

11 of 16 See more

lens oci-ai-incubations 0.1.14

11 of the 16 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.22.7	0.60.0 1.26.9
grafana/grafana :12.1.1	a1701c218024	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.60.0 1.26.9
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.26.9
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.60.0 1.26.9
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.2	050a34002d5b	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

24,372

oci-prometheus-sd-proxyoci-prometheus-sd-proxy

1.0.0

1 of 1 See more

oci-prometheus-sd-proxy oci-prometheus-sd-proxy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/amaanx86/oci-prometheus-sd-proxy :latest	297a8379a328	stdlib@go1.26.4	1.26.9

Open the chart page →

498

ocisocis-community

0.1.0

1 of 1 See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,959

argocd-agent-addonocm-helm-charts

0.30.0

2 of 2 See more

argocd-agent-addon ocm-helm-charts 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-operator :v0.18.0	a09814522a72	golang.org/x/net@v0.49.0 stdlib@go1.25.10	0.60.0 1.26.9
quay.io/open-cluster-management/argocd-pull-integration :0.30.0	683ae238f351	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,265

argocd-pull-integrationocm-helm-charts

0.30.0

1 of 1 See more

argocd-pull-integration ocm-helm-charts 0.30.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/argocd-pull-integration :0.30.0	683ae238f351	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

293

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.60.0 1.26.9

Open the chart page →

2,613

cluster-managerocm-helm-charts

1.4.0

1 See more

cluster-manager ocm-helm-charts 1.4.0

1 container image this version deploys carries CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.4.0	dd9699e34ce7	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

—

cluster-proxyocm-helm-charts

0.13.0

1 of 1 See more

cluster-proxy ocm-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/cluster-proxy :v0.13.0	8270b3e5fa50	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

1,807

dynamic-scoring-frameworkocm-helm-charts

0.1.0

2 of 2 See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/dynamic-scoring-addon :latest	7e571a08ec1a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9
quay.io/open-cluster-management/dynamic-scoring-controller :latest	587f5bc8f2ed	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,797

governance-policy-addon-controllerocm-helm-charts

0.20.1

1 of 1 See more

governance-policy-addon-controller ocm-helm-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/governance-policy-addon-controller :v0.20.1	bc92ea252b55	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

233

governance-policy-propagatorocm-helm-charts

0.20.1

1 of 1 See more

governance-policy-propagator ocm-helm-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/governance-policy-propagator :v0.20.1	feed79aa9782	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

233

klusterletocm-helm-charts

1.4.0

1 of 1 See more

klusterlet ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.4.0	dd9699e34ce7	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

240

kueue-addonocm-helm-charts

0.1.4

1 of 1 See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9

Open the chart page →

2,202

managed-serviceaccountocm-helm-charts

0.12.0

1 of 1 See more

managed-serviceaccount ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/managed-serviceaccount :v0.12.0	4ccff81204f3	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9

Open the chart page →

277

multicluster-controlplaneocm-helm-charts

0.8.0

1 of 1 See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-controlplane :latest	9888240f644b	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

1,008

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.13	0.60.0 1.26.9

Open the chart page →

2,841

ocrserverocrserver

0.2.1

1 of 1 See more

ocrserver ocrserver 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
otiai10/ocrserver :latest	d338c767147d	stdlib@go1.15.9	1.26.9

Open the chart page →

2,216

octantoctant

0.1.86

1 of 1 See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	golang.org/x/net@v0.52.0 stdlib@go1.25.14	0.60.0 1.26.9

Open the chart page →

852

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

7,126

aspromokgolove

2.0.0

1 of 1 See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.26.9

Open the chart page →

2,935

cmsmsoleds-helm-charts

0.1.6

1 of 1 See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	stdlib@go1.23.10	1.26.9

Open the chart page →

3,518

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.60.0 1.26.9

Open the chart page →

10,266

mailpitoli-the-dev

1.1.1

1 of 1 See more

mailpit oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
axllent/mailpit :v1.31.0	c96991d9bef7	golang.org/x/net@v0.58.0 stdlib@go1.27.0	0.60.0 1.27.2

Open the chart page →

408

paperless-ngxoli-the-dev

1.3.1

1 of 1 See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.3.0	6b94799bc769	stdlib@go1.24.4	1.26.9

Open the chart page →

5,253

uptime-operatoroli-the-dev

1.2.0

1 of 1 See more

uptime-operator oli-the-dev 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/solid3dlab/uptime-operator :0.7.0	85264734084a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2

Open the chart page →

209

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.60.0 1.26.9

Open the chart page →

4,075

Container images carrying it

6,132 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kube-vip/kube-vip :v1.2.3	2fcdbb014a2e	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	1
ghcr.io/kubewall/kubewall :0.0.23	d9a03cfb557b	golang.org/x/net@v0.57.0 stdlib@go1.26.7	0.60.0 1.26.9	1
ghcr.io/kubewarden/adm-controller/audit-scanner :v1.38.2	c3dda1e1149a	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/adm-controller/controller :v1.38.2	383f71d05b44	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/network-enforcer/controller :v0.3.0	8698549f8ca5	golang.org/x/net@v0.59.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/runtime-enforcer/agent :v0.10.1	dc463d8f7553	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/runtime-enforcer/controller :v0.10.1	b005743f7868	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/sbomscanner/controller :v0.13.0	611e21c44268	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/sbomscanner/storage :v0.13.0	64929d3a8ecf	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubewarden/sbomscanner/worker :v0.13.0	0a8e4e31c890	golang.org/x/net@v0.58.0 stdlib@go1.27.1	0.60.0 1.27.2	1
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	golang.org/x/net@v0.34.0 stdlib@go1.23.10	0.60.0 1.26.9	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/net@v0.28.0 stdlib@go1.25.1	0.60.0 1.26.9	1
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/net@v0.42.0 stdlib@go1.21.5	0.60.0 1.26.9	1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/eventrouter :v0.4.15	6226040e1346	golang.org/x/net@v0.38.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/net@v0.41.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kuoss/myip :v0.1.7	760f5ccae493	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.60.0 1.26.9	1
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	golang.org/x/net@v0.42.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.60.0 1.26.9	1
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.26.9	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/policy-reporter :2.14.1	e74c6bf33d1b	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.60.0 1.26.9	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
ghcr.io/laki-n/laki :v1.6.0	599a10c453a3	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/net@v0.23.0 stdlib@go1.20.14	0.60.0 1.26.9	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.26.9	1
ghcr.io/leoquote/tencentcloud-exporter :master	ca51b6bb15dd	stdlib@go1.21.1	1.26.9	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.18.3	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9	1