StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,038
of 17,790 indexed, latest versions
Container images
2,479
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,038 of 17,790 indexed charts deploy, on 2,479 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,479
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,038 by stars
ChartLatestAffected imagesRadar Score
ranchercarbide-charts2.15.12 of 2See more

rancher carbide-charts 2.15.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.82.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,487
casdoor-helm-chartscasdoor4.4.01 of 1See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
casbin/casdoor:4.4.08511c0757ac3
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,110
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/grpc@v1.48.0
1.82.1

Open the chart page →

4,143
oci-csi-drivercastaiVerified publisher1.13.86 of 7See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,739
temporalcastaiVerified publisher0.54.25 of 14See more

temporal castai 0.54.2

5 of the 14 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
google.golang.org/grpc@v1.62.1
1.82.1
temporalio/admin-tools:1.26.237e2e33dbd7b
google.golang.org/grpc@v1.67.1
1.82.1
temporalio/server:1.26.21e2626efcbc1
google.golang.org/grpc@v1.56.3
1.82.1
temporalio/ui:2.33.05c586a3c8ec5
google.golang.org/grpc@v1.66.0
1.82.1
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
google.golang.org/grpc@v1.64.0
1.82.1

Open the chart page →

16,232
catalyst-agentscatalyst-agents0.1.3110 of 18See more

catalyst-agents catalyst-agents 0.1.31

10 of the 18 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
google.golang.org/grpc@v1.70.0
1.82.1
grafana/grafana:13.1.3ab5cb380e3ff
google.golang.org/grpc@v1.79.3
1.82.1
grafana/loki:3.0.0757b5fadf816
google.golang.org/grpc@v1.62.1
1.82.1
grafana/loki-canary:3.0.028d7c00588aa
google.golang.org/grpc@v1.62.1
1.82.1
grafana/tempo:2.5.0f0200a9bff6d
google.golang.org/grpc@v1.63.2
1.82.1
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
1.82.1
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.82.1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

17,099
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

647
cert-manager-csi-driver-spiffecert-managerOfficialVerified publisher0.15.02 of 4See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

585
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,328
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

1,271
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
google.golang.org/grpc@v1.69.2
1.82.1

Open the chart page →

1,094
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
google.golang.org/grpc@v1.69.4
1.82.1

Open the chart page →

839
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
google.golang.org/grpc@v1.57.0
1.82.1

Open the chart page →

1,278
cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones0.1.51 of 1See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

415
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

2,352
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

1,759
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,080
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

889
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

527
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,783
clechaosnative0.2.72 of 6See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
google.golang.org/grpc@v1.32.0
1.82.1
chaosnative/cle-server:2.7.0e7bcff4a20c0
google.golang.org/grpc@v1.42.0
1.82.1

Open the chart page →

16,412
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

4,440
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
google.golang.org/grpc@v1.75.0
1.82.1

Open the chart page →

7,501
memoscharts-derwitt-devVerified publisher1.4.01 of 1See more

memos charts-derwitt-dev 1.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
neosmemo/memos:0.30.071a5b4738d1b
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

561
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

667
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

8,417
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
google.golang.org/grpc@v1.74.2
1.82.1

Open the chart page →

968
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,876
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,828
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

663
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

1,993
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

935
promlenschristianhuthVerified publisher1.6.01 of 1See more

promlens christianhuth 1.6.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/promlens:v0.4.04a377d1a0eaa
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

135
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

7,034
mantlechronicleVerified publisher0.1.31 of 1See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mantlenetworkio/l2geth:v0.4.36bf383d14291
google.golang.org/grpc@v1.55.0
1.82.1

Open the chart page →

1,941
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.82.1

Open the chart page →

3,602
vulnerability-operatorckotzbauerVerified publisher0.31.151 of 1See more

vulnerability-operator ckotzbauer 0.31.15

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

196
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

1,625
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
google.golang.org/grpc@v1.61.1
1.82.1
calico/kube-controllers:v3.28.1eadb3a25109a
google.golang.org/grpc@v1.61.1
1.82.1
calico/node:v3.28.1d8c644a8a3ee
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

3,071
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
1.82.1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

5,991
capsule-rancher-addonclastixVerified publisher0.1.13 of 5See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

7,126
kamajiclastixVerified publisher0.0.0+latest3 of 4See more

kamaji clastix 0.0.0+latest

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
clastix/kamaji:latesta7c5d108810b
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,652
kamaji-etcdclastixVerified publisher0.17.02 of 4See more

kamaji-etcd clastix 0.17.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

12,082
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

7,413
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

1,768
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

21,034
cloudfront-tenant-operatorcloudfront-tenant-operatorVerified publisher0.3.01 of 1See more

cloudfront-tenant-operator cloudfront-tenant-operator 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

276
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

254
hcloud-csi-mgmtcloudhippieVerified publisher2.10.02 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

597
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,105

Container images carrying it

2,479 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ethpandaops/rpc-snooper:latestc0b30fcf64bc
google.golang.org/grpc@v1.74.2
google.golang.org/grpc@v1.74.2
1.82.1
1.82.1
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
google.golang.org/grpc@v1.76.0
google.golang.org/grpc@v1.76.0
1.82.1
1.82.1
1
evcc/evcc:0.300.8ddf2a25afce5
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
factly/mande-server:0.34.1384d384310ef
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
1
falcosecurity/falco:0.44.1d0cfe422d6ac
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
falcosecurity/falcoctl:0.13.00eeb79adc580
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
falcosecurity/falco-operator:0.4.18a99fcc57a57
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
falcosecurity/falcosidekick:2.32.01976da721518
google.golang.org/grpc@v1.75.0
google.golang.org/grpc@v1.75.0
1.82.1
1.82.1
1
falcosecurity/falcosidekick:2.27.0828ee36cb13a
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
farmer1992/sshpiperd:v1.5.4e0064b824403
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
fatliverfreddy/cyphernetes-operator:lateste79f24ca7371
google.golang.org/grpc@v1.67.3
google.golang.org/grpc@v1.67.3
1.82.1
1.82.1
1
flanksource/apm-hub:v0.0.471dacc3195bf9
google.golang.org/grpc@v1.55.0
google.golang.org/grpc@v1.55.0
1.82.1
1.82.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
1
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
fleetdm/fleet:v4.66.012e644b7f40e
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
flomesh/fsm-manager:0.2.1122f849c70b25
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
flomesh/osm-edge-controller:1.3.9add7a4da4622
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
flomesh/osm-edge-injector:1.3.947287e3ad324
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
fluxcd/flux-cli:v2.9.5704d55295355
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
fluxcd/helm-controller:v0.9.092b891e495d8
google.golang.org/grpc@v1.27.1
google.golang.org/grpc@v1.27.1
1.82.1
1.82.1
1
fluxcd/source-controller:v0.10.031a8c79a6803
google.golang.org/grpc@v1.27.1
google.golang.org/grpc@v1.27.1
1.82.1
1.82.1
1
fluxninja/aperture-operator:2.34.0356d7aa86632
google.golang.org/grpc@v1.60.1
google.golang.org/grpc@v1.60.1
1.82.1
1.82.1
1
fortio/fortio:latest_releasefc8221136fe2
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
fosrl/newt:1.10.4ccd2b0e9a049
google.golang.org/grpc@v1.79.1
google.golang.org/grpc@v1.79.1
1.82.1
1.82.1
1
foxcpp/maddy:0.7.16ab538e2f28b
google.golang.org/grpc@v1.60.1
google.golang.org/grpc@v1.60.1
1.82.1
1.82.1
1
foxcpp/maddy:0.9.2a4b839985b9b
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
1
foxcpp/maddy:0.8.2eeb5813fc4d1
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
google.golang.org/grpc@v1.43.0
google.golang.org/grpc@v1.43.0
1.82.1
1.82.1
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
google.golang.org/grpc@v1.67.0
google.golang.org/grpc@v1.67.0
1.82.1
1.82.1
1
garethgeorge/backrest:v1.14.1b85297975428
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
google.golang.org/grpc@v1.44.0
google.golang.org/grpc@v1.44.0
1.82.1
1.82.1
1
gdxbsv/traktor:0.0.17675693335054
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
getconvoy/convoy:v26.7.6f4934cc05e31
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
google.golang.org/grpc@v1.62.0
google.golang.org/grpc@v1.62.0
1.82.1
1.82.1
1
gitea/gitea:1.27.3-rootless1c17ecaead42
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
gitea/gitea:1.27.134e3f6b75f5c
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
gitea/gitea:1.22.376f516a1a8c2
google.golang.org/grpc@v1.62.1
google.golang.org/grpc@v1.62.1
1.82.1
1.82.1
1
gitea/gitea:1.26.27d13848af126
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
gitea/gitea:1.27.387a67ee09d3a
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
gitea/gitea:1.21.6ac73e0da341f
google.golang.org/grpc@v1.58.3
google.golang.org/grpc@v1.58.3
1.82.1
1.82.1
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.82.1
1.82.1
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
google.golang.org/grpc@v1.21.1
google.golang.org/grpc@v1.21.1
1.82.1
1.82.1
1
goalert/goalert:v0.32.008d57388b0cb
google.golang.org/grpc@v1.61.0
google.golang.org/grpc@v1.61.0
1.82.1
1.82.1
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
google.golang.org/grpc@v1.69.4
google.golang.org/grpc@v1.69.4
1.82.1
1.82.1
1
goccx/go-file-server:latestf4b3ebea0303
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
gocrane/craned:v0.5.1a1400909118c
google.golang.org/grpc@v1.43.0
google.golang.org/grpc@v1.43.0
1.82.1
1.82.1
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/grpc@v1.43.0
google.golang.org/grpc@v1.43.0
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.