StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,066
of 17,821 indexed, latest versions
Container images
2,486
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,066 of 17,821 indexed charts deploy, on 2,486 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,486
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,066 by stars
ChartLatestAffected imagesRadar Score
caninecanine0.1.104 of 7See more

canine canine 0.1.10

4 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
google.golang.org/grpc@v1.80.0
1.82.1
ghcr.io/caninehq/canine:latesta058034ca006
google.golang.org/grpc@v1.65.0
1.82.1
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
google.golang.org/grpc@v1.64.1
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

14,429
cert-managercanine1.15.32 of 4See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
google.golang.org/grpc@v1.64.1
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

2,909
traefikcanine40.2.01 of 1See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

1,058
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
google.golang.org/grpc@v1.73.0
1.82.1

Open the chart page →

2,080
ranchercarbide-charts2.15.12 of 2See more

rancher carbide-charts 2.15.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.82.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,534
casdoor-helm-chartscasdoor4.7.01 of 1See more

casdoor-helm-charts casdoor 4.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
casbin/casdoor:4.7.09d015582847d
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

963
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/grpc@v1.48.0
1.82.1

Open the chart page →

4,145
oci-csi-drivercastaiVerified publisher1.13.86 of 7See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,775
temporalcastaiVerified publisher0.54.25 of 14See more

temporal castai 0.54.2

5 of the 14 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
google.golang.org/grpc@v1.62.1
1.82.1
temporalio/admin-tools:1.26.237e2e33dbd7b
google.golang.org/grpc@v1.67.1
1.82.1
temporalio/server:1.26.21e2626efcbc1
google.golang.org/grpc@v1.56.3
1.82.1
temporalio/ui:2.33.05c586a3c8ec5
google.golang.org/grpc@v1.66.0
1.82.1
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
google.golang.org/grpc@v1.64.0
1.82.1

Open the chart page →

16,271
catalyst-agentscatalyst-agents0.1.3310 of 18See more

catalyst-agents catalyst-agents 0.1.33

10 of the 18 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
google.golang.org/grpc@v1.70.0
1.82.1
grafana/grafana:13.1.3ab5cb380e3ff
google.golang.org/grpc@v1.79.3
1.82.1
grafana/loki:3.0.0757b5fadf816
google.golang.org/grpc@v1.62.1
1.82.1
grafana/loki-canary:3.0.028d7c00588aa
google.golang.org/grpc@v1.62.1
1.82.1
grafana/tempo:2.5.0f0200a9bff6d
google.golang.org/grpc@v1.63.2
1.82.1
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
1.82.1
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.82.1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

17,686
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

668
cert-manager-csi-driver-spiffecert-managerOfficialVerified publisher0.15.02 of 4See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

585
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,337
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

1,424
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
google.golang.org/grpc@v1.69.2
1.82.1

Open the chart page →

1,247
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
google.golang.org/grpc@v1.69.4
1.82.1

Open the chart page →

847
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
google.golang.org/grpc@v1.57.0
1.82.1

Open the chart page →

1,286
cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones0.1.51 of 1See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

422
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

2,353
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

1,767
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,088
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

897
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

536
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,785
clechaosnative0.2.72 of 6See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
google.golang.org/grpc@v1.32.0
1.82.1
chaosnative/cle-server:2.7.0e7bcff4a20c0
google.golang.org/grpc@v1.42.0
1.82.1

Open the chart page →

16,435
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

4,498
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
google.golang.org/grpc@v1.75.0
1.82.1

Open the chart page →

7,598
memoscharts-derwitt-devVerified publisher1.4.01 of 1See more

memos charts-derwitt-dev 1.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
neosmemo/memos:0.30.071a5b4738d1b
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

707
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

812
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

8,419
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
google.golang.org/grpc@v1.74.2
1.82.1

Open the chart page →

1,230
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,877
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,829
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

670
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

1,990
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

952
promlenschristianhuthVerified publisher1.6.01 of 1See more

promlens christianhuth 1.6.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/promlens:v0.4.04a377d1a0eaa
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

137
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

7,215
mantlechronicleVerified publisher0.1.31 of 1See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mantlenetworkio/l2geth:v0.4.36bf383d14291
google.golang.org/grpc@v1.55.0
1.82.1

Open the chart page →

1,942
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.82.1

Open the chart page →

3,603
vulnerability-operatorckotzbauerVerified publisher0.31.151 of 1See more

vulnerability-operator ckotzbauer 0.31.15

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

198
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

1,749
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
google.golang.org/grpc@v1.61.1
1.82.1
calico/kube-controllers:v3.28.1eadb3a25109a
google.golang.org/grpc@v1.61.1
1.82.1
calico/node:v3.28.1d8c644a8a3ee
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

3,078
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
1.82.1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

6,012
capsule-rancher-addonclastixVerified publisher0.1.13 of 5See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

7,142
kamajiclastixVerified publisher0.0.0+latest2 of 4See more

kamaji clastix 0.0.0+latest

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,669
kamaji-etcdclastixVerified publisher0.18.02 of 4See more

kamaji-etcd clastix 0.18.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

12,123
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

7,417
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

1,816
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

21,162

Container images carrying it

2,486 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
google.golang.org/grpc@v1.46.2
google.golang.org/grpc@v1.46.2
1.82.1
1.82.1
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
google.golang.org/grpc@v1.74.2
google.golang.org/grpc@v1.74.2
1.82.1
1.82.1
1
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
1
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
google.golang.org/grpc@v1.68.0
google.golang.org/grpc@v1.68.0
1.82.1
1.82.1
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
google.golang.org/grpc@v1.71.0
google.golang.org/grpc@v1.71.0
1.82.1
1.82.1
1
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
google.golang.org/grpc@v1.74.2
google.golang.org/grpc@v1.74.2
1.82.1
1.82.1
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
google.golang.org/grpc@v1.69.2
google.golang.org/grpc@v1.69.2
1.82.1
1.82.1
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
google.golang.org/grpc@v1.75.1
google.golang.org/grpc@v1.75.1
1.82.1
1.82.1
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/grafana/k8s-injection-controller:0.2.0c5bad40655a3
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/grycap/oscar:latest0c58ff972451
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
google.golang.org/grpc@v1.55.0
1.82.1
1.82.1
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
google.golang.org/grpc@v1.43.0
google.golang.org/grpc@v1.43.0
1.82.1
1.82.1
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
ghcr.io/helmfile/helmfile:v1.8.01808ffb76f37
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
1
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
google.golang.org/grpc@v1.36.0
google.golang.org/grpc@v1.36.0
1.82.1
1.82.1
1
ghcr.io/hsn723/cert-estuary:0.2.00c4b6132b0ad
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
ghcr.io/igrikus/garm-operator:4.2.09e24d8a6a3b2
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
google.golang.org/grpc@v1.75.1
google.golang.org/grpc@v1.75.1
1.82.1
1.82.1
1
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
google.golang.org/grpc@v1.71.0
google.golang.org/grpc@v1.71.0
1.82.1
1.82.1
1
ghcr.io/inlets/inlets-operator:0.17.2208265c006973
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.