CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,353; of 18,131 indexed, latest versions
Container images: 6,192; deployed by those charts
Fix available: 3 of 5; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,353 of 18,131 indexed charts deploy, on 6,192 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.9, 1.27.2	6,123
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	4,944
golang-1.19deb	1.19.8-2	no fix listed	1
ingress-nginx-controller-1.15apk	1.15.10-r9	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r2	1

OSV records: CGA-354m-9r4m-xqmm CGA-387c-5f4p-4rh4 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-4qpc-rjrp-f4h4, CGA-chcq-vrg9-rm7r
Trending: Rank 11 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,353 by stars

Chart

Latest

Affected images

Radar Score

seafileschmitzis

13.0.13

2 of 4 See more

seafile schmitzis 13.0.13

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	golang.org/x/net@v0.55.0 stdlib@go1.26.8	0.60.0 1.26.9
seafileltd/notification-server :13.0.21	1cac4101d0f4	stdlib@go1.26.2	1.26.9

Open the chart page →

44,456

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.60.0 1.26.9

Open the chart page →

4,257

vikunjaschmitzis

1.0.0

1 of 3 See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

5,204

koffanschoenwald

0.1.8

1 of 1 See more

koffan schoenwald 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.9

Open the chart page →

174

minifluxschoenwald

0.1.6

1 of 1 See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.3.3	49d7b6098761	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9

Open the chart page →

540

uptime-kumaschoenwald

1.0.10

1 of 1 See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/net@v0.55.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

36,895

yopassschoenwald

1.1.0

1 of 2 See more

yopass schoenwald 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
jhaals/yopass :14.10.0	6c33d9c813f7	stdlib@go1.27.1	1.27.2

Open the chart page →

548

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	golang.org/x/net@v0.55.0 stdlib@go1.26.3	0.60.0 1.26.9

Open the chart page →

61,319

restic-serverschoolguys-helmcharts

0.3.1

1 of 1 See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
restic/rest-server :0.14.0	d2aff06f47eb	stdlib@go1.24.3	1.26.9

Open the chart page →

3,008

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

3,460

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.60.0 1.26.9

Open the chart page →

5,245

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.60.0 1.26.9

Open the chart page →

14,628

seafileseafile

0.12.1

1 of 1 See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.26.9

Open the chart page →

76,934

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

5,872

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.60.0 1.26.9
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.60.0 1.26.9

Open the chart page →

6,402

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.26.9

Open the chart page →

3,996

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9

Open the chart page →

1,411

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.60.0 1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9

Open the chart page →

3,345

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.9

Open the chart page →

1,555

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.26.9
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.60.0 1.26.9
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.26.9

Open the chart page →

7,671

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

789

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,428

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9

Open the chart page →

1,735

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.60.0 1.26.9

Open the chart page →

2,270

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.60.0 1.26.9

Open the chart page →

3,711

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.26.9

Open the chart page →

1,749

nucleisecurecodebox-nuclei

5.2.0

1 of 1 See more

nuclei securecodebox-nuclei 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
projectdiscovery/nuclei :v3.5.1	d76713284ad0	golang.org/x/net@v0.46.0 stdlib@go1.24.4	0.60.0 1.26.9

Open the chart page →

3,602

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	golang.org/x/net@v0.56.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

400

trivysecurecodebox-trivy

5.9.0

1 of 1 See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.74.0	62b1e65e8869	golang.org/x/net@v0.58.0 stdlib@go1.26.6-X:jsonv2	0.60.0 1.26.9

Open the chart page →

838

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.60.0 1.26.9

Open the chart page →

2,009

security-webhooksecurity-webhook

0.0.14

1 of 1 See more

security-webhook security-webhook 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
kubestar/security-webhook :latest	156d495afe77	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.60.0 1.26.9

Open the chart page →

2,206

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.9

Open the chart page →

21,457

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.60.0 1.26.9
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.60.0 1.26.9
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.60.0 1.26.9
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.9

Open the chart page →

15,747

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9

Open the chart page →

3,164

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	6d45ab59ec50	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,861

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9

Open the chart page →

360

s3managersergeyshevch

0.1.0

1 of 1 See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.60.0 1.26.9

Open the chart page →

3,212

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.60.0 1.26.9

Open the chart page →

4,015

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.60.0 1.26.9

Open the chart page →

4,170

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,106

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.60.0 1.26.9

Open the chart page →

1,489

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.26.9
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.26.9
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.26.9

Open the chart page →

7,321

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.26.9
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.26.9
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.26.9

Open the chart page →

11,804

serviceexampleserviceexample-chart

0.3.0

2 of 4 See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

4,359

serviceexampleservice-example-helm-chart

0.1.0

2 of 4 See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mongo :latest	bac22ea7710d	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.27.2

Open the chart page →

2,170

service-exampleservice-example-jt

0.1.1

8 of 9 See more

service-example service-example-jt 0.1.1

8 of the 9 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	ad05bb9a19fa	golang.org/x/net@v0.59.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/mongodb-exporter :latest	fb4874bb3d07	golang.org/x/net@v0.57.0 stdlib@go1.26.8	0.60.0 1.26.9
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.9
bitnami/redis-exporter :latest	c6a2883c0bb7	stdlib@go1.26.8	1.26.9
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.26.9
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.60.0 1.26.9
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.26.9
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.9

Open the chart page →

10,552

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.60.0 1.26.9
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.60.0 1.26.9
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.60.0 1.26.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

10,910

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.60.0 1.26.9

Open the chart page →

2,424

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/mysql :latest	9d48c42f8341	stdlib@go1.24.6	1.26.9

Open the chart page →

3,837

Container images carrying it

6,192 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	golang.org/x/net@v0.34.0 stdlib@go1.23.10	0.60.0 1.26.9	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.60.0 1.26.9	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/net@v0.28.0 stdlib@go1.25.1	0.60.0 1.26.9	1
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/net@v0.42.0 stdlib@go1.21.5	0.60.0 1.26.9	1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/eventrouter :v0.4.15	6226040e1346	golang.org/x/net@v0.38.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.60.0 1.26.9	1
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/net@v0.41.0 stdlib@go1.23.12	0.60.0 1.26.9	1
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kuoss/myip :v0.1.7	760f5ccae493	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.60.0 1.26.9	1
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	golang.org/x/net@v0.42.0 stdlib@go1.24.10	0.60.0 1.26.9	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.60.0 1.26.9	1
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.26.9	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.60.0 1.26.9	1
ghcr.io/kylan11/understudy :0.4.4	466044b30aeb	golang.org/x/net@v0.58.0	0.60.0	1
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0 stdlib@go1.25.9	0.60.0 1.26.9	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.60.0 1.26.9	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/kyverno/policy-reporter :3.11.1	a95ef6394c4d	golang.org/x/net@v0.58.0	0.60.0	1
ghcr.io/kyverno/policy-reporter :2.14.1	e74c6bf33d1b	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.60.0 1.26.9	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.60.0 1.26.9	1
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.60.0 1.26.9	1
ghcr.io/laki-n/laki :v1.6.0	599a10c453a3	golang.org/x/net@v0.57.0 stdlib@go1.27.0	0.60.0 1.27.2	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/net@v0.23.0 stdlib@go1.20.14	0.60.0 1.26.9	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.60.0 1.26.9	1
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.26.9	1
ghcr.io/leoquote/tencentcloud-exporter :master	ca51b6bb15dd	stdlib@go1.21.1	1.26.9	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.18.3	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.60.0 1.26.9	1
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.60.0 1.26.9	1
ghcr.io/linkwarden/linkwarden :v2.16.3	0664c28a039b	stdlib@go1.23.7	1.26.9	1
ghcr.io/linuxoid69/school-bot :v0.3.3	c8872438f1e0	stdlib@go1.23.3	1.26.9	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.26.9	1
ghcr.io/linuxserver/calibre-web :latest	e7debaaec01a	stdlib@go1.17.8	1.26.9	1
ghcr.io/linuxserver/code-server :version-v3.11.1	a385ba5cb161	stdlib@go1.16.4	1.26.9	1
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.60.0 1.26.9	1
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.60.0 1.26.9	1
ghcr.io/linuxserver/duplicati :latest	78883c4ea7a3	stdlib@go1.24.9	1.26.9	1