StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,080
of 17,813 indexed, latest versions
Container images
2,500
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,080 of 17,813 indexed charts deploy, on 2,500 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,500
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,080 by stars
ChartLatestAffected imagesRadar Score
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
google.golang.org/grpc@v1.36.0
1.82.1

Open the chart page →

2,419
olmolmVerified publisher0.45.01 of 1See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.45.0f228c7a6b8c5
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

448
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

275
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

979
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

932
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

824
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

944
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,399
rekorsigstoreVerified publisher1.8.63 of 9See more

rekor sigstore 1.8.6

3 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createtreedigest-pinnede5232e8c9122
google.golang.org/grpc@v1.76.0
1.82.1
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
google.golang.org/grpc@v1.82.0
1.82.1
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

5,530
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

598
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
google.golang.org/grpc@v1.81.1
1.82.1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
google.golang.org/grpc@v1.80.0
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

2,445
sops-operatorsops-operatorVerified publisher0.10.11 of 2See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

1,260
thehivestrangebee-helmOfficialVerified publisher1.0.72 of 7See more

thehive strangebee-helm 1.0.7

2 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
google.golang.org/grpc@v1.71.0
1.82.1
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
google.golang.org/grpc@v1.71.0
1.82.1

Open the chart page →

16,535
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

6,027
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
google.golang.org/grpc@v1.60.1
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
google.golang.org/grpc@v1.60.1
1.82.1

Open the chart page →

14,375
vsphere-csivsphere-tmm3.8.17 of 7See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

3,960
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

6,270
kubedbappscodeVerified publisher2026.7.106 of 8See more

kubedb appscode 2026.7.10

6 of the 8 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
google.golang.org/grpc@v1.72.1
1.82.1
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
google.golang.org/grpc@v1.72.1
1.82.1
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,502
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

3,023
baserowbaserow-chartVerified publisher1.0.562 of 6See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
google.golang.org/grpc@v1.65.0
1.82.1
caddy/ingress:v0.2.118d1366fc0e9
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

17,791
celestia-appcelestia-labsVerified publisher0.5.01 of 3See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
google.golang.org/grpc@v1.68.0
1.82.1

Open the chart page →

1,077
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
google.golang.org/grpc@v1.27.1
1.82.1

Open the chart page →

3,088
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
google.golang.org/grpc@v1.33.1
1.82.1
library/traefik:2.5.47d0228d19042
google.golang.org/grpc@v1.38.0
1.82.1

Open the chart page →

132,171
openstack-cloud-controller-managercloud-provider-openstack2.36.51 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

512
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

553
immudbcodenotaryVerified publisher1.9.71 of 1See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
codenotary/immudb:1.9.77c85d7cc4f22
google.golang.org/grpc@v1.57.1
1.82.1

Open the chart page →

1,254
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
google.golang.org/grpc@v1.68.1
1.82.1

Open the chart page →

1,713
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
wait4x/wait4x:3.3.14dcd86307de1
google.golang.org/grpc@v1.71.0
1.82.1

Open the chart page →

9,598
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
google.golang.org/grpc@v1.10.0
1.82.1

Open the chart page →

2,832
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
google.golang.org/grpc@v1.58.3
1.82.1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
google.golang.org/grpc@v1.56.3
1.82.1

Open the chart page →

14,290
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

77,779
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
google.golang.org/grpc@v1.29.1
1.82.1
library/docker:20-dindaf96c680a7e1
google.golang.org/grpc@v1.50.1
1.82.1

Open the chart page →

5,693
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

1,988
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
google.golang.org/grpc@v1.67.1
1.82.1

Open the chart page →

1,792
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
google.golang.org/grpc@v1.41.0
1.82.1
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.82.1
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

8,858
gitops-promotergitops-promoterOfficialVerified publisher0.19.01 of 2See more

gitops-promoter gitops-promoter 0.19.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

2,958
alloy-operatorgrafana0.7.11 of 1See more

alloy-operator grafana 0.7.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

475
grafana-mcpgrafana-communityVerified publisher0.24.01 of 1See more

grafana-mcp grafana-community 0.24.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/mcp-grafana:1.5.107c6614a8f8b
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

1,127
secret-manageritscontainedVerified publisher0.2.11 of 1See more

secret-manager itscontained 0.2.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
itscontained/secret-manager:0.3.07ec3e93c6469
google.golang.org/grpc@v1.31.1
1.82.1

Open the chart page →

3,074
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

3,695
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
google.golang.org/grpc@v1.71.1
1.82.1

Open the chart page →

881
kubeflowkubeflow1.6.218 of 45See more

kubeflow kubeflow 1.6.2

18 of the 45 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
google.golang.org/grpc@v1.36.0
1.82.1
istio/proxyv2:1.14.1df69c1a7af7c
google.golang.org/grpc@v1.45.0
1.82.1
kserve/kserve-controller:v0.8.0f0692a9ea09f
google.golang.org/grpc@v1.42.0
1.82.1
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
google.golang.org/grpc@v1.42.0
1.82.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
google.golang.org/grpc@v1.42.0
1.82.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
google.golang.org/grpc@v1.42.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
google.golang.org/grpc@v1.44.0
1.82.1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
google.golang.org/grpc@v1.44.0
1.82.1
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

161,942
testkubekubeshop2.13.21 of 5See more

testkube kubeshop 2.13.2

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubeshop/testkube-minio:2025.10d8e1af6aca99
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

5,333
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

4,339
venti-stackkuossOfficialVerified publisher0.5.01 of 9See more

venti-stack kuoss 0.5.0

1 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

3,861
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

3,721
vclustermainVerified publisher0.17.06 of 10See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
google.golang.org/grpc@v1.51.0
1.82.1
registry.k8s.io/etcd:3.6.4-0e36c08168342
google.golang.org/grpc@v1.71.1
1.82.1
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
google.golang.org/grpc@v1.40.0
1.82.1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
google.golang.org/grpc@v1.47.0
1.82.1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
google.golang.org/grpc@v1.47.0
1.82.1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

11,611
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

8,218
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
google.golang.org/grpc@v1.56.3
1.82.1

Open the chart page →

2,674
nri-memtierdnri-pluginsOfficialVerified publisher0.14.01 of 1See more

nri-memtierd nri-plugins 0.14.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-memtierd:v0.14.09138314e12ba
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

276

Container images carrying it

2,500 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
1
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
google.golang.org/grpc@v1.58.3
google.golang.org/grpc@v1.58.3
1.82.1
1.82.1
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
google.golang.org/grpc@v1.63.2
google.golang.org/grpc@v1.63.2
1.82.1
1.82.1
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
google.golang.org/grpc@v1.64.1
google.golang.org/grpc@v1.64.1
1.82.1
1.82.1
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
google.golang.org/grpc@v1.77.0
google.golang.org/grpc@v1.77.0
1.82.1
1.82.1
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
google.golang.org/grpc@v1.53.0
google.golang.org/grpc@v1.53.0
1.82.1
1.82.1
1
registry.k8s.io/provider-os/cinder-csi-plugin:v1.36.078adaeb154c7
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-attacher:v4.1.008721106b949
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-attacher:v4.5.19dcd469f02bb
google.golang.org/grpc@v1.60.1
google.golang.org/grpc@v1.60.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
google.golang.org/grpc@v1.48.0
google.golang.org/grpc@v1.48.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.12cddcc716c19
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.7.04a4cae5118c4
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2a13bff2ed69a
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
google.golang.org/grpc@v1.27.0
google.golang.org/grpc@v1.27.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-provisioner:v5.0.27b9cdb5830d0
google.golang.org/grpc@v1.64.0
google.golang.org/grpc@v1.64.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
google.golang.org/grpc@v1.69.2
google.golang.org/grpc@v1.69.2
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
google.golang.org/grpc@v1.51.0
google.golang.org/grpc@v1.51.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
google.golang.org/grpc@v1.60.1
google.golang.org/grpc@v1.60.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
google.golang.org/grpc@v1.38.0
google.golang.org/grpc@v1.38.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
google.golang.org/grpc@v1.69.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
google.golang.org/grpc@v1.38.0
google.golang.org/grpc@v1.38.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
google.golang.org/grpc@v1.71.0
google.golang.org/grpc@v1.71.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
google.golang.org/grpc@v1.74.2
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.