StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,086
of 17,821 indexed, latest versions
Container images
2,516
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,086 of 17,821 indexed charts deploy, on 2,516 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,516
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,086 by stars
ChartLatestAffected imagesRadar Score
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
google.golang.org/grpc@v1.61.1
1.82.1
calico/kube-controllers:v3.28.1eadb3a25109a
google.golang.org/grpc@v1.61.1
1.82.1
calico/node:v3.28.1d8c644a8a3ee
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

3,079
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
1.82.1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

6,013
capsule-rancher-addonclastixVerified publisher0.1.13 of 5See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

7,144
kamajiclastixVerified publisher0.0.0+latest2 of 4See more

kamaji clastix 0.0.0+latest

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,644
kamaji-etcdclastixVerified publisher0.18.02 of 4See more

kamaji-etcd clastix 0.18.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

12,027
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

7,417
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

1,816
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

21,166
cloudfront-tenant-operatorcloudfront-tenant-operatorVerified publisher0.3.01 of 1See more

cloudfront-tenant-operator cloudfront-tenant-operator 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

284
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

262
hcloud-csi-mgmtcloudhippieVerified publisher2.10.02 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

611
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,127
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
google.golang.org/grpc@v1.27.1
1.82.1

Open the chart page →

25,529
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
google.golang.org/grpc@v1.27.1
1.82.1

Open the chart page →

6,708
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
google.golang.org/grpc@v1.29.0
1.82.1

Open the chart page →

6,933
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
google.golang.org/grpc@v1.46.2
1.82.1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
google.golang.org/grpc@v1.74.2
1.82.1

Open the chart page →

18,474
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

670
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
google.golang.org/grpc@v1.33.1
1.82.1

Open the chart page →

3,144
galaxycloudve6.8.81 of 3See more

galaxy cloudve 6.8.8

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
tusproject/tusd:v1.13.0f8088058b80f
google.golang.org/grpc@v1.57.0
1.82.1

Open the chart page →

5,652
galaxy-cvmfs-csicloudve2.5.12 of 3See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
google.golang.org/grpc@v1.60.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1

Open the chart page →

1,516
galaxy-depscloudve1.1.14 of 7See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
google.golang.org/grpc@v1.45.0
1.82.1
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

10,569
galaxykubemancloudve2.10.13 of 7See more

galaxykubeman cloudve 2.10.1

3 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
google.golang.org/grpc@v1.43.0
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

16,209
openstack-cinder-csicloudve1.2.01 of 5See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
k8scloudprovider/cinder-csi-plugin:latesta30c7a2a594a
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

2,069
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
google.golang.org/grpc@v1.67.0
1.82.1
library/docker:dind5efed980cba3
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

6,234
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
google.golang.org/grpc@v1.81.1
1.82.1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

3,836
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

1,160
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
google.golang.org/grpc@v1.76.0
1.82.1

Open the chart page →

723
monitoringcluster-deploy0.3.05 of 11See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
google.golang.org/grpc@v1.78.0
1.82.1
grafana/loki:3.6.73c8fd3570dd9
google.golang.org/grpc@v1.75.1
1.82.1
grafana/loki-canary:3.6.70dac7d5cb383
google.golang.org/grpc@v1.75.1
1.82.1
quay.io/prometheus/prometheus:v3.10.07571a304e67f
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

8,299
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
google.golang.org/grpc@v1.73.0
1.82.1

Open the chart page →

475
cluster-monitor-servercluster-monitor-server0.10.21 of 1See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
google.golang.org/grpc@v1.73.0
1.82.1

Open the chart page →

753
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

1,556
storage-piraeuscnapVerified publisher1.0.11 of 1See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/piraeusdatastore/piraeus-operator:v2.10.5dd68a66332de
google.golang.org/grpc@v1.79.2
1.82.1

Open the chart page →

334
door-agentcnoVerified publisher3.0.158 of 15See more

door-agent cno 3.0.15

8 of the 15 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
google.golang.org/grpc@v1.65.1
1.82.1
beopenit/door-helm:v3.0.1b4d9f9bee224
google.golang.org/grpc@v1.53.0
1.82.1
envoyproxy/ratelimit:6f5de117b6cb6e16f8c9
google.golang.org/grpc@v1.27.0
1.82.1
library/docker:27-cli851f91d24121
google.golang.org/grpc@v1.68.1
1.82.1
library/docker:27-dindaa3df78ecf32
google.golang.org/grpc@v1.68.1
1.82.1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
google.golang.org/grpc@v1.65.0
1.82.1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
google.golang.org/grpc@v1.75.0
1.82.1
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

19,806
coder-ai-gatewaycoder-v2Verified publisher2.37.21 of 1See more

coder-ai-gateway coder-v2 2.37.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.26ea19b670111
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

212
coder-provisionercoder-v2OfficialVerified publisher2.37.21 of 1See more

coder-provisioner coder-v2 2.37.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.26ea19b670111
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

212
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-resource-operator:v0.2.23f45bf0a1bc0
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

3,854
loki-stackcommon-chartsVerified publisher1.0.35 of 12See more

loki-stack common-charts 1.0.3

5 of the 12 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
google.golang.org/grpc@v1.81.1
1.82.1
grafana/grafana:13.1.17cb8c64c4d57
google.golang.org/grpc@v1.81.1
1.82.1
grafana/loki:3.6.1144148ad243c0
google.golang.org/grpc@v1.80.0
1.82.1
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

5,515
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,583
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

12,934
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,220
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

8,419
autovpacontainerooVerified publisher0.4.21 of 1See more

autovpa containeroo 0.4.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

312
kube-ephemeral-container-exportercontainerooVerified publisher0.2.31 of 1See more

kube-ephemeral-container-exporter containeroo 0.2.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

312
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

9,167
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
google.golang.org/grpc@v1.67.1
1.82.1

Open the chart page →

771
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

8,514
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

4,711
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
google.golang.org/grpc@v1.75.0
1.82.1

Open the chart page →

2,255
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
google.golang.org/grpc@v1.68.0
1.82.1

Open the chart page →

1,940
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

3,692

Container images carrying it

2,516 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
google.golang.org/grpc@v1.56.1
google.golang.org/grpc@v1.56.1
1.82.1
1.82.1
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
google.golang.org/grpc@v1.22.0
google.golang.org/grpc@v1.22.0
1.82.1
1.82.1
1
ghcr.io/metio/jaas:2026.6.15e28772028e56
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/metrico/gigapipe:v4.1.6caeb2652ce5e
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
google.golang.org/grpc@v1.57.0
google.golang.org/grpc@v1.57.0
1.82.1
1.82.1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
ghcr.io/mitos-run/mitos-controller:v1.6.0b547c38dcc9d
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/mitos-run/mitos-kvm-device-plugin:v1.6.063e2b78d03c4
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
google.golang.org/grpc@v1.54.0
google.golang.org/grpc@v1.54.0
1.82.1
1.82.1
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
google.golang.org/grpc@v1.63.2
google.golang.org/grpc@v1.63.2
1.82.1
1.82.1
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
google.golang.org/grpc@v1.35.0
google.golang.org/grpc@v1.35.0
1.82.1
1.82.1
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/nicholaswilde/olivetin:version-2021-07-19e1d5c8a01008
google.golang.org/grpc@v1.37.0
google.golang.org/grpc@v1.37.0
1.82.1
1.82.1
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
google.golang.org/grpc@v1.69.4
google.golang.org/grpc@v1.69.4
1.82.1
1.82.1
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
google.golang.org/grpc@v1.15.0
google.golang.org/grpc@v1.15.0
1.82.1
1.82.1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
google.golang.org/grpc@v1.69.2
google.golang.org/grpc@v1.69.2
1.82.1
1.82.1
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
google.golang.org/grpc@v1.55.0
google.golang.org/grpc@v1.55.0
1.82.1
1.82.1
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
google.golang.org/grpc@v1.71.0
google.golang.org/grpc@v1.71.0
1.82.1
1.82.1
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
google.golang.org/grpc@v1.77.0
google.golang.org/grpc@v1.77.0
1.82.1
1.82.1
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.