StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,064
of 17,828 indexed, latest versions
Container images
2,491
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,064 of 17,828 indexed charts deploy, on 2,491 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,491
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,064 by stars
ChartLatestAffected imagesRadar Score
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
google.golang.org/grpc@v1.67.0
1.82.1

Open the chart page →

927
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

1,208
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/grpc@v1.33.2
1.82.1

Open the chart page →

3,186
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.82.1
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
google.golang.org/grpc@v1.72.1
1.82.1

Open the chart page →

3,277
installer-post-upgrade-2-5-1krateo1.0.11See more

installer-post-upgrade-2-5-1 krateo 1.0.1

1 container image this version deploys carries GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

—
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

2,543
installer-pre-upgrade-2-5-0krateo1.0.11See more

installer-pre-upgrade-2-5-0 krateo 1.0.1

1 container image this version deploys carries GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

—
installer-pre-upgrade-2-5-1krateo1.0.11See more

installer-pre-upgrade-2-5-1 krateo 1.0.1

1 container image this version deploys carries GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

—
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
google.golang.org/grpc@v1.71.1
1.82.1

Open the chart page →

1,506
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
google.golang.org/grpc@v1.67.1
1.82.1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
google.golang.org/grpc@v1.58.3
1.82.1
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
google.golang.org/grpc@v1.58.3
1.82.1
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
google.golang.org/grpc@v1.58.3
1.82.1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
google.golang.org/grpc@v1.42.0
1.82.1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
google.golang.org/grpc@v1.60.1
1.82.1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
google.golang.org/grpc@v1.60.1
1.82.1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
google.golang.org/grpc@v1.60.1
1.82.1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
google.golang.org/grpc@v1.60.1
1.82.1

Open the chart page →

71,477
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
google.golang.org/grpc@v1.38.0
1.82.1
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
1.82.1
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

8,475
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
google.golang.org/grpc@v1.48.0
1.82.1

Open the chart page →

2,321
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

3,820
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

3,213
kubearmor-operatorkubearmor1.7.41 of 1See more

kubearmor-operator kubearmor 1.7.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubearmor/kubearmor-operator:v1.7.43faab85da688
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

132
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

1,948
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

1,948
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/grpc@v1.55.0
1.82.1

Open the chart page →

2,277
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/grpc@v1.43.0
1.82.1
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/grpc@v1.43.0
1.82.1

Open the chart page →

8,179
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

3,997
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/grpc@v1.57.1
1.82.1

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/grpc@v1.50.1
1.82.1

Open the chart page →

1,948
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/grpc@v1.50.1
1.82.1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/grpc@v1.52.3
1.82.1

Open the chart page →

7,614
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/grpc@v1.50.1
1.82.1

Open the chart page →

6,504
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/grpc@v1.51.0
1.82.1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/grpc@v1.51.0
1.82.1

Open the chart page →

2,434
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/grpc@v1.38.0
1.82.1
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/grpc@v1.45.0
1.82.1

Open the chart page →

13,856
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/grpc@v1.59.0
1.82.1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

2,886
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
google.golang.org/grpc@v1.61.1
1.82.1
calico/kube-controllers:v3.28.08f04e4772a2b
google.golang.org/grpc@v1.61.1
1.82.1
calico/node:v3.28.0385bf6391fea
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

3,318
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

2,307
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/grpc@v1.29.1
1.82.1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/grpc@v1.58.3
1.82.1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/grpc@v1.58.3
1.82.1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

13,686
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/grpc@v1.59.0
1.82.1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

5,153
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
google.golang.org/grpc@v1.63.2
1.82.1

Open the chart page →

1,573
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
google.golang.org/grpc@v1.45.0
1.82.1

Open the chart page →

3,581
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
google.golang.org/grpc@v1.47.0
1.82.1

Open the chart page →

2,090
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
google.golang.org/grpc@v1.45.0
1.82.1
grafana/loki:2.9.26074e01dbe03
google.golang.org/grpc@v1.56.3
1.82.1
grafana/loki-canary:2.9.24249db29b992
google.golang.org/grpc@v1.56.3
1.82.1

Open the chart page →

5,864
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/grpc@v1.59.0
1.82.1

Open the chart page →

1,145
openebskubeblocksVerified publisher3.10.02 of 3See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/grpc@v1.47.0
1.82.1
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/grpc@v1.55.0
1.82.1

Open the chart page →

10,633
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

10,325
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
google.golang.org/grpc@v1.53.0
1.82.1

Open the chart page →

9,260
spiderpoolkubeblocksVerified publisher1.2.01 of 4See more

spiderpool kubeblocks 1.2.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
google.golang.org/grpc@v1.58.3
1.82.1

Open the chart page →

8,515
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
google.golang.org/grpc@v1.70.0
1.82.1

Open the chart page →

3,045
kube-botblocker-operatorkube-botblockerVerified publisher0.2.21 of 2See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/gustavojst/kube-botblocker:0.2.04de059bb32ac
google.golang.org/grpc@v1.65.0
1.82.1

Open the chart page →

507
kubeclaritykubeclarity2.23.33 of 5See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
google.golang.org/grpc@v1.55.0
1.82.1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
google.golang.org/grpc@v1.56.3
1.82.1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
google.golang.org/grpc@v1.56.3
1.82.1

Open the chart page →

5,522
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

438
commons-operatorkubedoopVerified publisher0.4.01 of 1See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

388
dolphinscheduler-operatorkubedoopVerified publisher0.4.01 of 1See more

dolphinscheduler-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

381
hbase-operatorkubedoopVerified publisher0.4.01 of 1See more

hbase-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

388
hdfs-operatorkubedoopVerified publisher0.4.01 of 1See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

438
hive-operatorkubedoopVerified publisher0.4.01 of 1See more

hive-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hive-operator:0.4.0d66ba9149c22
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

381

Container images carrying it

2,491 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GHSA-hrxh-6v49-42gf.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.