StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,080
of 17,813 indexed, latest versions
Container images
2,500
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,080 of 17,813 indexed charts deploy, on 2,500 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,500
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,080 by stars
ChartLatestAffected imagesRadar Score
inlets-operatorinlets0.17.201 of 1See more

inlets-operator inlets 0.17.20

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/inlets/inlets-operator:0.17.2208265c006973
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

504
coreinstill-aiOfficialVerified publisher0.1.757 of 15See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
google.golang.org/grpc@v1.71.0
1.82.1
instill/artifact-backend:b28766ac4a393e601ed
google.golang.org/grpc@v1.61.0
1.82.1
instill/mgmt-backend:d0933d4ebe12f77a3f9
google.golang.org/grpc@v1.73.0
1.82.1
instill/model-backend:611f0f2e980125e5ba5
google.golang.org/grpc@v1.73.0
1.82.1
library/influxdb:2.3.0-alpined7f5dd5f70e2
google.golang.org/grpc@v1.44.0
1.82.1
openfga/openfga:v1.9.25e94966c11df
google.golang.org/grpc@v1.73.0
1.82.1
temporalio/admin-tools:1.28cfde8170c92f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

31,162
intel-gpu-resource-driverintelVerified publisher0.7.01 of 1See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
intel/intel-gpu-resource-driver:v0.7.0e158711e32ce
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

566
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
google.golang.org/grpc@v1.76.0
1.82.1

Open the chart page →

1,188
kiali-operatorkiali2.32.01 of 1See more

kiali-operator kiali 2.32.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.32.096c5264d54ab
google.golang.org/grpc@v1.66.0
1.82.1

Open the chart page →

1,109
kubearmorkubearmor1.7.42 of 4See more

kubearmor kubearmor 1.7.4

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubearmor/kubearmor:stablea08141311045
google.golang.org/grpc@v1.81.1
1.82.1
kubearmor/kubearmor-relay-server:latest2dd4809d7c11
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

1,386
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
google.golang.org/grpc@v1.24.0
1.82.1
apache/skywalking-ui:8.1.067d50e4deff4
google.golang.org/grpc@v1.24.0
1.82.1

Open the chart page →

18,058
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
google.golang.org/grpc@v1.46.0
1.82.1

Open the chart page →

14,253
kubevpnkubevpn-charts2.11.91 of 1See more

kubevpn kubevpn-charts 2.11.9

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

1,689
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.03 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

3 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
google.golang.org/grpc@v1.57.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
google.golang.org/grpc@v1.57.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
google.golang.org/grpc@v1.57.0
1.82.1

Open the chart page →

59,088
prometheus-pingmesh-exporterkubservice-chartsVerified publisher1.1.11 of 1See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dongjiang1989/pingmesh-agent:latest355fa4be8e97
google.golang.org/grpc@v1.67.0
1.82.1

Open the chart page →

856
karporkusionstackVerified publisher0.7.62 of 3See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
google.golang.org/grpc@v1.51.0
1.82.1
quay.io/coreos/etcd:v3.5.11842975891182
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

3,326
kwokkwokOfficialVerified publisher0.3.01 of 1See more

kwok kwok 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

716
litellm-operatorlitellm-operatorVerified publisher1.1.21 of 1See more

litellm-operator litellm-operator 1.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/bbdsoftware/litellm-operator:1.1.2167a51113d90
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

284
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
google.golang.org/grpc@v1.50.1
1.82.1

Open the chart page →

3,694
vcluster-k8sloftVerified publisher0.0.0-ci.33 of 4See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
google.golang.org/grpc@v1.41.0
1.82.1
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
google.golang.org/grpc@v1.49.0
1.82.1
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

5,612
vcluster-platformloftVerified publisher4.12.11 of 1See more

vcluster-platform loft 4.12.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.19bc88940affc
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

773
lumigo-operatorlumigo-operatorOfficialVerified publisher69.0.04 of 8See more

lumigo-operator lumigo-operator 69.0.0

4 of the 8 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.124.08936271cf56a
google.golang.org/grpc@v1.71.0
1.82.1
public.ecr.aws/lumigo/lumigo-kubernetes-rbac-proxy:696c2f0585cd6c
google.golang.org/grpc@v1.47.0
1.82.1
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy:691d548e59c2c8
google.golang.org/grpc@v1.72.1
1.82.1
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog:696458fcd61e0c
google.golang.org/grpc@v1.71.1
1.82.1

Open the chart page →

7,794
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.71 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest154741f8596e
google.golang.org/grpc@v1.72.0
1.82.1

Open the chart page →

2,105
marmotmarmotOfficialVerified publisher1.5.11 of 2See more

marmot marmot 1.5.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/marmotdata/marmot:0.10.0bd2a49f86486
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

333
mattermost-rtcdmattermostVerified publisher1.4.11 of 1See more

mattermost-rtcd mattermost 1.4.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mattermost/rtcd:latesta27058aaa53a
google.golang.org/grpc@v1.70.0
1.82.1

Open the chart page →

595
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
google.golang.org/grpc@v1.45.0
1.82.1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
google.golang.org/grpc@v1.59.0
1.82.1
quay.io/prometheus/prometheus:v2.55.0378f4e037035
google.golang.org/grpc@v1.66.0
1.82.1
quay.io/thanos/thanos:v0.36.1e542959e1b36
google.golang.org/grpc@v1.63.2
1.82.1

Open the chart page →

17,907
rclonemglants2.3.41 of 1See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rclone/rclone:1.57.01e6eeabddc01
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

2,751
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

2,184
mocomoco0.27.01 of 1See more

moco moco 0.27.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cybozu-go/moco:0.37.032e7cab1bdd8
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

50
mortalgpumortalgpuOfficialVerified publisher1.3.71 of 1See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

379
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

3,829
opentelemetry-ebpfopentelemetry-helmOfficialVerified publisher0.1.71 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

2,583
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

101,186
ipfs-clusterparadeum-teamVerified publisher0.0.192 of 2See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
google.golang.org/grpc@v1.46.0
1.82.1
ipfs/ipfs-cluster:1.0.21511f6d57994
google.golang.org/grpc@v1.45.0
1.82.1

Open the chart page →

3,785
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
google.golang.org/grpc@v1.64.0
1.82.1

Open the chart page →

1,016
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
google.golang.org/grpc@v1.68.1
1.82.1

Open the chart page →

2,906
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

1,357
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

1,949
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
google.golang.org/grpc@v1.30.0
1.82.1

Open the chart page →

12,137
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
google.golang.org/grpc@v1.70.0
1.82.1

Open the chart page →

5,524
wordpress-hardenedriotkit-org2.0.01 of 2See more

wordpress-hardened riotkit-org 2.0.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/waf-proxy:snapshot683656fdace2
google.golang.org/grpc@v1.44.0
1.82.1

Open the chart page →

6,617
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

869
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
google.golang.org/grpc@v1.76.0
1.82.1

Open the chart page →

1,320
seaweedfs-csi-driverseaweedfs-csi-driver0.2.385 of 7See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

5 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.1

Open the chart page →

5,321
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
google.golang.org/grpc@v1.70.0
1.82.1

Open the chart page →

1,177
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
google.golang.org/grpc@v1.52.3
1.82.1

Open the chart page →

1,696
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
google.golang.org/grpc@v1.28.1
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
google.golang.org/grpc@v1.28.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
google.golang.org/grpc@v1.28.1
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
google.golang.org/grpc@v1.28.1
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
google.golang.org/grpc@v1.28.1
1.82.1

Open the chart page →

12,542
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
google.golang.org/grpc@v1.71.0
1.82.1

Open the chart page →

1,187
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
google.golang.org/grpc@v1.67.1
1.82.1

Open the chart page →

590
sn-platformstreamnative1.11.443 of 9See more

sn-platform streamnative 1.11.44

3 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
google.golang.org/grpc@v1.45.0
1.82.1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
google.golang.org/grpc@v1.44.0
1.82.1
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

72,232
feedbacksystemthm-mni-iiVerified publisher0.47.13 of 10See more

feedbacksystem thm-mni-ii 0.47.1

3 of the 10 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
google.golang.org/grpc@v1.60.1
1.82.1
library/docker:20.10.21-dind3153fa63f546
google.golang.org/grpc@v1.47.0
1.82.1
thmmniii/fbs-runner:v1.27.186105349c1a3
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

28,866
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
google.golang.org/grpc@v1.71.1
1.82.1

Open the chart page →

1,677
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
google.golang.org/grpc@v1.27.1
1.82.1

Open the chart page →

4,146
traefik-meshtraefikOfficialVerified publisher4.1.12 of 7See more

traefik-mesh traefik 4.1.1

2 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
google.golang.org/grpc@v1.27.1
1.82.1
library/traefik:v2.57d5a6ae66572
google.golang.org/grpc@v1.38.0
1.82.1

Open the chart page →

9,291

Container images carrying it

2,500 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
quay.io/zncdatadev/hive-operator:0.4.0d66ba9149c22
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/listener-csi-driver:0.4.0b69bed123b02
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
quay.io/zncdatadev/listener-operator:0.4.068b92dae8d75
google.golang.org/grpc@v1.81.0
google.golang.org/grpc@v1.81.0
1.82.1
1.82.1
1
quay.io/zncdatadev/nifi-operator:0.4.0bb4e26ff5e2f
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
quay.io/zncdatadev/spark-k8s-operator:0.4.0d3f2b10c4a6d
google.golang.org/grpc@v1.72.2
google.golang.org/grpc@v1.72.2
1.82.1
1.82.1
1
quay.io/zncdatadev/superset-operator:0.4.0102e66e32218
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/trino-operator:0.4.04f516757aee3
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
quay.io/zncdatadev/zookeeper-operator:0.4.0b4f33d89ac45
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
google.golang.org/grpc@v1.37.1
google.golang.org/grpc@v1.37.1
1.82.1
1.82.1
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
google.golang.org/grpc@v1.54.0
google.golang.org/grpc@v1.54.0
1.82.1
1.82.1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
google.golang.org/grpc@v1.79.1
google.golang.org/grpc@v1.79.1
1.82.1
1.82.1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
google.golang.org/grpc@v1.79.1
google.golang.org/grpc@v1.79.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.01c38ad710b0c
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.0704cd68566af
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.0696d798a5c85
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabdc1a8972c640
google.golang.org/grpc@v1.77.0
google.golang.org/grpc@v1.77.0
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.26645e014f75d
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3aca1bb3d5b7e
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.02256b49461fa
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
google.golang.org/grpc@v1.41.0
google.golang.org/grpc@v1.41.0
1.82.1
1.82.1
1
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.25448611a3c54
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
google.golang.org/grpc@v1.56.2
google.golang.org/grpc@v1.56.2
1.82.1
1.82.1
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
google.golang.org/grpc@v1.78.0
google.golang.org/grpc@v1.78.0
1.82.1
1.82.1
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
google.golang.org/grpc@v1.82.0
google.golang.org/grpc@v1.82.0
1.82.1
1.82.1
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
google.golang.org/grpc@v1.73.0
google.golang.org/grpc@v1.73.0
1.82.1
1.82.1
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/grpc@v1.54.0
google.golang.org/grpc@v1.54.0
1.82.1
1.82.1
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
google.golang.org/grpc@v1.77.0
google.golang.org/grpc@v1.77.0
1.82.1
1.82.1
1
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
1
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
google.golang.org/grpc@v1.75.1
google.golang.org/grpc@v1.75.1
1.82.1
1.82.1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.