StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,086
of 17,821 indexed, latest versions
Container images
2,516
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,086 of 17,821 indexed charts deploy, on 2,516 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,516
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,086 by stars
ChartLatestAffected imagesRadar Score
chronograflsst-sqre1.3.51 of 1See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
google.golang.org/grpc@v1.37.0
1.82.1

Open the chart page →

2,350
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
google.golang.org/grpc@v1.36.0
1.82.1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
google.golang.org/grpc@v1.37.0
1.82.1

Open the chart page →

9,350
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
google.golang.org/grpc@v1.28.1
1.82.1

Open the chart page →

6,595
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
google.golang.org/grpc@v1.38.0
1.82.1

Open the chart page →

3,775
ratelimitlumiumcoVerified publisher0.0.41 of 2See more

ratelimit lumiumco 0.0.4

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

1,165
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

764
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

9,778
magistralamagistrala-devopsVerified publisher0.16.24 of 42See more

magistrala magistrala-devops 0.16.2

4 of the 42 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/grpc@v1.60.0
1.82.1
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/grpc@v1.60.0
1.82.1
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/grpc@v1.60.0
1.82.1
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

24,724
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

3,740
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
google.golang.org/grpc@v1.63.0
1.82.1

Open the chart page →

1,928
matrix-sliding-syncmatrix-sliding-sync0.2.31 of 1See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

1,607
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
google.golang.org/grpc@v1.60.0
1.82.1

Open the chart page →

1,423
mattermost-chaos-enginemattermostVerified publisher0.2.01 of 1See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mattermost/mattermost-app-chaosengine:c153e436268954edd67
google.golang.org/grpc@v1.36.0
1.82.1

Open the chart page →

4,077
mattermost-push-proxymattermostVerified publisher0.14.31 of 1See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mattermost/mattermost-push-proxy:6.3.045c53061c74e
google.golang.org/grpc@v1.63.2
1.82.1

Open the chart page →

897
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
google.golang.org/grpc@v1.72.0
1.82.1

Open the chart page →

4,131
mayastormayastorVerified publisher2.12.110 of 31See more

mayastor mayastor 2.12.1

10 of the 31 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
google.golang.org/grpc@v1.71.0
1.82.1
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.82.1
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.82.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.82.1

Open the chart page →

21,416
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

5,725
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

431
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

418
mdai-hubmdai-hubVerified publisher0.10.15 of 14See more

mdai-hub mdai-hub 0.10.1

5 of the 14 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
google.golang.org/grpc@v1.79.3
1.82.1
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
google.golang.org/grpc@v1.80.0
1.82.1
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
google.golang.org/grpc@v1.80.0
1.82.1
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
google.golang.org/grpc@v1.80.0
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,931
mdai-s3-logs-readermdai-s3-logs-readerVerified publisher0.0.81 of 1See more

mdai-s3-logs-reader mdai-s3-logs-reader 0.0.8

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/mdai-s3-logs-reader:0.0.8d1e35167eec5
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

408
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,340
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
google.golang.org/grpc@v1.56.1
1.82.1

Open the chart page →

3,738
msmmedia-streaming-meshVerified publisher0.1.173 of 6See more

msm media-streaming-mesh 0.1.17

3 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
google.golang.org/grpc@v1.66.2
1.82.1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
google.golang.org/grpc@v1.66.2
1.82.1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
google.golang.org/grpc@v1.56.1
1.82.1

Open the chart page →

11,653
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,521
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

3,042
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

3,854
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

3,152
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

3,152
kube-prometheus-stackmesosphere87.16.03 of 7See more

kube-prometheus-stack mesosphere 87.16.0

3 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

7,537
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
google.golang.org/grpc@v1.35.0
1.82.1

Open the chart page →

10,533
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

11,742
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
google.golang.org/grpc@v1.27.1
1.82.1

Open the chart page →

3,351
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
google.golang.org/grpc@v1.27.0
1.82.1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
google.golang.org/grpc@v1.26.0
1.82.1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
google.golang.org/grpc@v1.27.0
1.82.1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
google.golang.org/grpc@v1.26.0
1.82.1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
google.golang.org/grpc@v1.34.0
1.82.1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
google.golang.org/grpc@v1.34.0
1.82.1

Open the chart page →

14,113
cert-manager-setupmesosphere-stable0.2.103 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

7,218
dexmesosphere-stable2.14.12 of 5See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
google.golang.org/grpc@v1.56.1
1.82.1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
google.golang.org/grpc@v1.61.0
1.82.1

Open the chart page →

19,339
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

3,042
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.1

Open the chart page →

3,614
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

3,359
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

4,683
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
google.golang.org/grpc@v1.48.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
google.golang.org/grpc@v1.48.0
1.82.1

Open the chart page →

7,529
kommandermesosphere-stable0.39.212 of 29See more

kommander mesosphere-stable 0.39.2

12 of the 29 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
google.golang.org/grpc@v1.23.1
1.82.1
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
google.golang.org/grpc@v1.26.0
1.82.1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
google.golang.org/grpc@v1.26.0
1.82.1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
google.golang.org/grpc@v1.26.0
1.82.1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
google.golang.org/grpc@v1.26.0
1.82.1
prom/prometheus:v2.19.2cd134bd4fca0
google.golang.org/grpc@v1.29.1
1.82.1
thanosio/thanos:v0.19.088276fcd1491
google.golang.org/grpc@v1.29.1
1.82.1
thanosio/thanos:v0.15.0b12d5c31bf5a
google.golang.org/grpc@v1.29.1
1.82.1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
google.golang.org/grpc@v1.27.1
1.82.1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
google.golang.org/grpc@v1.19.1
1.82.1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
google.golang.org/grpc@v1.27.1
1.82.1
quay.io/thanos/thanos:v0.17.1e362f02ed304
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

68,470
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
google.golang.org/grpc@v1.72.1
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
google.golang.org/grpc@v1.68.1
1.82.1

Open the chart page →

10,594
multusmesosphere-stable0.1.11 of 1See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
google.golang.org/grpc@v1.73.0
1.82.1

Open the chart page →

1,835
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
google.golang.org/grpc@v1.36.0
1.82.1

Open the chart page →

4,116
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
google.golang.org/grpc@v1.42.0
1.82.1

Open the chart page →

8,973
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
google.golang.org/grpc@v1.30.0
1.82.1

Open the chart page →

2,753
argomicroslacVerified publisher0.1.02 of 4See more

argo microslac 0.1.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.38.0b1d793440a98
google.golang.org/grpc@v1.61.0
1.82.1
quay.io/argoproj/argocd:v2.10.783c86003b781
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

9,977
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
google.golang.org/grpc@v1.51.0
1.82.1

Open the chart page →

1,808

Container images carrying it

2,516 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/sigstore/timestamp-server:v2.1.08637f0482ed1
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
google.golang.org/grpc@v1.64.1
google.golang.org/grpc@v1.64.1
1.82.1
1.82.1
1
ghcr.io/spegel-org/spegel26c60b05e08a
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
ghcr.io/spiffe/spiffe-csi-driver:0.2.34144101005b2
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
ghcr.io/squat/generic-device-plugin:latestdc192e164c69
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
google.golang.org/grpc@v1.64.1
google.golang.org/grpc@v1.64.1
1.82.1
1.82.1
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
google.golang.org/grpc@v1.69.2
google.golang.org/grpc@v1.69.2
1.82.1
1.82.1
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
google.golang.org/grpc@v1.43.0
google.golang.org/grpc@v1.43.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
google.golang.org/grpc@v1.61.0
google.golang.org/grpc@v1.61.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
google.golang.org/grpc@v1.48.0
google.golang.org/grpc@v1.48.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
google.golang.org/grpc@v1.48.0
google.golang.org/grpc@v1.48.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
google.golang.org/grpc@v1.48.0
google.golang.org/grpc@v1.48.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
google.golang.org/grpc@v1.48.0
google.golang.org/grpc@v1.48.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
google.golang.org/grpc@v1.72.0
google.golang.org/grpc@v1.72.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
google.golang.org/grpc@v1.75.0
google.golang.org/grpc@v1.75.0
1.82.1
1.82.1
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
google.golang.org/grpc@v1.75.1
google.golang.org/grpc@v1.75.1
1.82.1
1.82.1
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
google.golang.org/grpc@v1.31.0
google.golang.org/grpc@v1.31.0
1.82.1
1.82.1
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
google.golang.org/grpc@v1.31.0
google.golang.org/grpc@v1.31.0
1.82.1
1.82.1
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
google.golang.org/grpc@v1.62.1
google.golang.org/grpc@v1.62.1
1.82.1
1.82.1
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
google.golang.org/grpc@v1.62.1
google.golang.org/grpc@v1.62.1
1.82.1
1.82.1
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
google.golang.org/grpc@v1.55.0
google.golang.org/grpc@v1.55.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
1
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
ghcr.io/techarohq/anubis:v1.21.3940ac71ef6fc
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
google.golang.org/grpc@v1.58.3
google.golang.org/grpc@v1.58.3
1.82.1
1.82.1
1
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
google.golang.org/grpc@v1.82.0
google.golang.org/grpc@v1.82.0
1.82.1
1.82.1
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
google.golang.org/grpc@v1.62.0
google.golang.org/grpc@v1.62.0
1.82.1
1.82.1
1
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.