StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,086
of 17,821 indexed, latest versions
Container images
2,516
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,086 of 17,821 indexed charts deploy, on 2,516 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,516
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,086 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher91.4.12 of 6See more

kube-prometheus-stack prometheus-community 91.4.1

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

682
argo-cdargoOfficialVerified publisher10.9.22 of 3See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.82.1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

3,043
prometheusprometheus-communityOfficialVerified publisher29.31.11 of 6See more

prometheus prometheus-community 29.31.1

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

466
lokigrafana7.3.02 of 6See more

loki grafana 7.3.0

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/loki:3.6.1144148ad243c0
google.golang.org/grpc@v1.80.0
1.82.1
grafana/loki-canary:3.6.121e9bfcff3867
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

3,958
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

171
gitlabgitlabVerified publisher10.4.08 of 21See more

gitlab gitlab 10.4.0

8 of the 21 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.01c38ad710b0c
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.0704cd68566af
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.0696d798a5c85
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabdc1a8972c640
google.golang.org/grpc@v1.77.0
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.26645e014f75d
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3aca1bb3d5b7e
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.02256b49461fa
google.golang.org/grpc@v1.81.1
1.82.1
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.25448611a3c54
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

16,478
harborharborOfficialVerified publisher1.19.25 of 8See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
google.golang.org/grpc@v1.81.1
1.82.1
goharbor/harbor-jobservice:v2.15.2f71a4452a095
google.golang.org/grpc@v1.81.1
1.82.1
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.82.1
goharbor/registry-photon:v2.15.2c4ebef61ceb5
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.82.1
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
google.golang.org/grpc@v1.81.0
1.82.1

Open the chart page →

1,739
gitlab-runnergitlabVerified publisher0.93.01 of 1See more

gitlab-runner gitlab 0.93.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

280
velerovmware-tanzu12.2.01 of 1See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,101
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
google.golang.org/grpc@v1.72.1
1.82.1
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
google.golang.org/grpc@v1.68.1
1.82.1
quay.io/metallb/speaker:v0.16.116561e96531e
google.golang.org/grpc@v1.72.1
1.82.1

Open the chart page →

2,176
cloudnative-pgcloudnative-pgVerified publisher0.29.01 of 1See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.30.0a2701eb97cdd
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

124
rancherrancher-stable2.15.12 of 2See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.82.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,534
oauth2-proxyoauth2-proxyOfficialVerified publisher10.7.01 of 1See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.15.310a1165743a1
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

154
kedakedacore2.20.23 of 3See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
google.golang.org/grpc@v1.81.1
1.82.1
ghcr.io/kedacore/keda-admission-webhooks:2.20.241f74102aba7
google.golang.org/grpc@v1.81.1
1.82.1
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,133
artifact-hubartifact-hubVerified publisher1.23.04 of 7See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
google.golang.org/grpc@v1.78.0
1.82.1
artifacthub/hub:v1.23.07d3a91c539dc
google.golang.org/grpc@v1.82.0
1.82.1
artifacthub/scanner:v1.23.02d8365601f0e
google.golang.org/grpc@v1.78.0
1.82.1
artifacthub/tracker:v1.23.05368d21a6e5c
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

10,881
kube-state-metricsprometheus-communityVerified publisher8.5.01 of 1See more

kube-state-metrics prometheus-community 8.5.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

96
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.18.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

600
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

583
argo-rolloutsargoOfficialVerified publisher2.43.21 of 1See more

argo-rollouts argo 2.43.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

122
argo-cdargo-cd-oci10.9.22 of 3See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.82.1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

3,043
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

8,003
mimir-distributedgrafana6.2.03 of 6See more

mimir-distributed grafana 6.2.0

3 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/rollout-operator:v0.38.132fe838b79dd
google.golang.org/grpc@v1.82.0
1.82.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

4,699
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
google.golang.org/grpc@v1.72.1
1.82.1

Open the chart page →

1,777
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
google.golang.org/grpc@v1.79.2
1.82.1

Open the chart page →

30,740
falcofalcosecurity9.1.03 of 3See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
google.golang.org/grpc@v1.79.3
1.82.1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
google.golang.org/grpc@v1.79.3
1.82.1
falcosecurity/falcoctl:0.13.00eeb79adc580
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

5,446
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

1,515
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,474
grafanagrafana-communityVerified publisher13.2.51 of 1See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

449
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

1,093
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.93.02 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.93.0

2 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,955
openebsopenebsOfficialVerified publisher4.6.113 of 35See more

openebs openebs 4.6.1

13 of the 35 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
google.golang.org/grpc@v1.71.0
1.82.1
grafana/loki:3.4.258a6c186ce78
google.golang.org/grpc@v1.70.0
1.82.1
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
google.golang.org/grpc@v1.71.1
1.82.1
openebs/lvm-driver:1.10.141f73aba7f31
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
google.golang.org/grpc@v1.75.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
google.golang.org/grpc@v1.72.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
google.golang.org/grpc@v1.68.0
1.82.1

Open the chart page →

24,290
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
google.golang.org/grpc@v1.60.1
1.82.1

Open the chart page →

945
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

2,892
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

362
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
google.golang.org/grpc@v1.71.1
1.82.1

Open the chart page →

3,107
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

2,017
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
google.golang.org/grpc@v1.67.1
1.82.1
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

2,614
opencostopencostOfficialVerified publisher2.5.311 of 2See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

275
flux2fluxcd-community2.19.15 of 7See more

flux2 fluxcd-community 2.19.1

5 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
google.golang.org/grpc@v1.80.0
1.82.1
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
google.golang.org/grpc@v1.80.0
1.82.1
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
google.golang.org/grpc@v1.80.0
1.82.1
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
google.golang.org/grpc@v1.81.1
1.82.1
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

2,467
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

1,061
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

1,385
snapshot-controllerpiraeus-chartsVerified publisher5.3.01 of 1See more

snapshot-controller piraeus-charts 5.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

242
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

2,110
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.16 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
google.golang.org/grpc@v1.81.0
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

4,145
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.16 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
google.golang.org/grpc@v1.81.0
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
google.golang.org/grpc@v1.72.2
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
google.golang.org/grpc@v1.79.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
google.golang.org/grpc@v1.78.0
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

4,145
chaos-meshchaos-meshVerified publisher2.8.44 of 4See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.82.1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.49e48285bb44c
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

6,545
csi-driver-nfscsi-driver-nfsVerified publisher4.13.46 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

6 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

3,350
atlantisatlantis6.15.11 of 1See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

1,934
codercoder-v2OfficialVerified publisher2.37.21 of 1See more

coder coder-v2 2.37.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.37.26ea19b670111
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

212
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/grpc@v1.50.1
1.82.1

Open the chart page →

2,470

Container images carrying it

2,516 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
google.golang.org/grpc@v1.72.1
google.golang.org/grpc@v1.72.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
google.golang.org/grpc@v1.60.1
google.golang.org/grpc@v1.60.1
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
google.golang.org/grpc@v1.38.0
google.golang.org/grpc@v1.38.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
google.golang.org/grpc@v1.69.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
google.golang.org/grpc@v1.38.0
google.golang.org/grpc@v1.38.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
google.golang.org/grpc@v1.71.0
google.golang.org/grpc@v1.71.0
1.82.1
1.82.1
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
google.golang.org/grpc@v1.74.2
1.82.1
1.82.1
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.